« BACK  |  PRINT

RS

FRONT PAGE CONTRIBUTOR

Tech at Night: Google, National Security Agency

Tech at Night

Good evening. We’re now off to a good start with this new Monday-Wednesday-Friday column, because this time I’m getting it published before midnight on both coasts.

So let’s get right to it. The two big stories I’m seeing are that Google’s Street View spying troubles are coming home to the US, and the NSA is apparently expanding its mission to protect US communications from foreign agents in a new and potentially troublesome direction.

For the most part, Google has been having troubles in Europe related to its Street View services. It was revealed that the Street View vans were spying on wireless networks and recording data from them, something that gives trouble for Google under various European privacy laws. However US officials may begin to act now that it’s come out that gee, US officials weren’t immune to this spying if their home networks weren’t secure. Says Consumer Watchdog at its site Insidegoogle.com:

“This is the most massive example of wire tapping in American history and even members of Congress do not appear to be immune,” said Jamie Court, president of Consumer Watchdog, which published the results on its Insidegoogle.com website. “Whether it’s compromising government secrets or our personal financial information, Google’s unprecedented WiSpying threatens the security of the American people and Congress owes Americans action.”

I can only wonder what emails Vint Cerf and Andrew McLaughlin are exchanging about this matter.

Speaking of spying, the National Security Agency is in the news again. The spy agency charged with cracking enemy signals and protecting our own is apparently looking at protecting private signals over the Internet with a new program called Perfect Citizen. In theory, the program sounds harmless if narrowly construed and operated in good faith, but theory is irrelevant here.

First off, we’re talking about spies, and in particular spies who have never published the methodologies behind previous “public services” such as the modification of the S-boxes of DES*. Secondly, we’re talking about the government, which has made scope creep a way of life since the Louisiana Purchase. Thirdly, we’re talking about the Obama administration, which is already active in trying to control the Internet via the Cybersecurity Act and via Net Neutrality regulation. We have no reason to believe Perfect Citizen is as harmless and safe as it appears to be. Watch out.

* Many years ago the government wanted to publish a standard cryptographic algorithm that private businesses could use to protect their data. The initial work was farmed out to IBM, who produced the code called Lucifer, later to be called DES, the Data Encryption Standard. However before DES, which became a FIPS Federal Information Processing Standard, was made official, it was turned it over to the NSA for review. NSA changed one part of the algorithm, called the S-Boxes, but never said why. Said Allen Konheim, one of DES’s designers, “We sent the S-Boxes off to Washington. They came back and were all different.” For all we know the NSA spooks made DES more crackable for themselves, and they’re not saying anything to make us doubt that.

Today DES is terribly obsolete, because the key is too short. Also obsolete is the variant known as TDEA, the Triple Data Encryption Algorithm, which runs DES three times to get a triple key length. Both have been replaced by the new AES, Advanced Encryption Standard, which was developed entirely in the private sector (by Belgian researchers in fact) and was not changed by the NSA before final publication.

Get Alerts

COMMENTS

  • RoscoeP

    . . . S-P-E-C-T-R-E . . . SPecial Executive for Counter-intelligence, Terrorism, Revenge and Extortion . . . mwahaha

  • http://www.800cart.com Ron Robinson

    … next thing you know, your GPS and Cam will switch on all by themselves…

  • GregInFla

    Sounds like another of those great progressive terms: Social justice, Employee Free Choice Act, Net Neutrality, Free Press, Center for Socialist… oops American Progress, Stimulus.

  • merryj1

    If Google’s Street View vans were “spying on wireless networks and recording data from them,” they must’ve either had paying customers for the recorded data, or some other means of getting paid for their tech work.

    Who ordered the recorded data, and/or what was Google’s purpose in recording it?

  • holystone

    Techies are just techies and they do things “because they can” and then there is the “rascallity of man” as George Washington put it. There is a reason to fear corporations and governments “who know best” and therefore we have laws. Let’s hope that the “turtle” called law doesn’t get so far behind the “rabbit” called tech that we all end up in a soup called “Borg” where eveything “is for the good of the collective.” All with the best of intentions, of course ……………

  • rasvar

    What I find interesting about Consumer Watchdog is that they went and repeated, on purpose, what Google did and then released the information to the public. How is this any different or any better than what Google did? Heck, in the long room, if this means that people don’t just buy their wireless router and leave it as ‘linksys’ and wide open, that is a good thing. [Other than the fact that it will make it harder for me to find a quick wifi connection in an emergency]

    They idea that what Google did is so scary actually makes me laugh. My bank knows a million times more about me than Google could ever learn about me from a drive-by wifi check.

  • rasvar

    Long room??? Long run. Brain disconnect from fingers.

  • http://www.hakubi.us/ Neil Stevens

    Are you serious? Think:

    Consumer Watchdog warned people that default networks are insecure.

    Google *listened in* on insecure networks and *recorded data* from them.

  • http://www.hakubi.us/ Neil Stevens
  • Menlo

    My mother was a switchboard operator back in the 60′s (long before I came along), and she told me that they listened in on calls just for kicks and giggles when they weren’t really busy.

    Despite the changes over the years, there are still plenty of Ernestine Tomlin types around.

  • rasvar

    Did they have to do it by publicly announcing to all the world the names of Congressmen and Congresswomen who had open wifi ports? Would it not have been better to just state that there were people in Congress with open wifi and just let them know privately instead of publicly.

    Plus, seriously, how much data do you think can be captured when you are just driving by in a car that is taking photos? Unless you are a full blown conspiracy nut, about all they were going to get is just the SSID and a few packets at most. Now are you trying to imply that this data was being collected to be sold and used for nefarious purposes? You, of all people, should understand the mindset of programmers and software engineers. Most of them are not politically motivated and just do something because they think it is cool without thinking if they should be doing it.

    I am not defending that this feature was installed in the streetview cars. But I think it is stretching credulity to define nefarious Anti-American causes to nothing more than a higher tech version of war-driving with a Pringles can antenna.

  • http://www.hakubi.us/ Neil Stevens

    So I guess you really have no case to make.

  • fisk2521

    I lived near NSA for over 30 years and remember how friends who worked there actually were required to deny it existed. It was referred to as employment at Fort Meade. NSA was only ‘permitted’ to listen/spy/invesigate outside the US, not here.

    Isn’t it just incredible that after all the bs about the Patriot Act under President Bush regarding the Patriot Act as being ‘unconstitutional’, we now find that the Liberal/Progressive/ Democrats are in charge and want to extend NSA’s charge to include our citizens???

    Makes you wonder what their motives truly are, don’t you think?

    “Everything that is really great and inspiring is created by the individual who can labor in freedom.” Albert Einstein

  • rasvar

    Do you have proof of malfeasance? My point is simply the KISS method. The simplest argument is that it was just geeks being geeks.

    ?Whether it?s compromising government secrets or our personal financial information, Google?s unprecedented WiSpying threatens the security of the American people and Congress owes Americans action.?

    My point is that there is no proof to back up this charge that government secrets or financial information was, or was intended to be, compromised. As you say, “speculation is not an argument.”

  • rasvar

    It is a bigger issue that the Wireless AP’s were open and unsecured. But that was not Google’s fault. I am not sure how much your software work has involved network issues. I have been a network designer for over twenty years. I am also an amateur radio operator and have spent significant on both the hardware and software aspects of wireless communication. I have seen streetview vehicles in operation. They are in as constant motion as possible in order to maximize the area of roads that are photographed. Other than picking up the broadcasted SSID from the AP while passing a location, it is highly unlikely that any significant level of data could even be captured and if something is, it would be pure luck if it was something spy worthy.

    So, in order for there to be any use for the data, it has to either be sold to a third party(which there is, as of now, absolutely no proof) or someone would have to return and sit near the location with other equipment to gather more information. Either way, this would be more of a law enforcement issue and not something for Congressional inquiry. There is technically no law against intercepting data from an unlicensed FCC Part B device that a wireless AP is as far as I am aware. They are not protected like cell phone conversations are. Is there a technical or legal argument I am missing here?

  • http://www.hakubi.us/ Neil Stevens

    The ones who want to pass a new law are the ones who have the burden of proof to show it’s a good one.

    Are you a Republican?

  • rasvar

    I am a Republican. But I am also a techie. If I am reading you right, you want to have a law passed to prohibit intercepting data from unencrypted wireless AP’s? I am trying to figure out if this is meant as an attack on Google because it does tend to be more on the liberal side or is it just trying to protect people who don’t understand how open their technology are. I am actually against the latter since it would add a lot more layers of regulation to wireless network management. Are we going to outlaw open AP’s? I am afraid that is what our Congress, with its hideous record of being able to deal with technology would do. This would also have a major effect on small business who provide wifi access as methods of pulling in customers. I

    My concern is that any Congressional response to this would be to create some kind of open law that would also put the FCC in even more charge of regulating wifi networks. As they are Part B devices, the FCC tends to keep its hands off. I fear the unintended consequences of pushing an untrained Congress into regulating the way wifi works. Plus, if you start restricting access to wifi monitoring, how many of my technical tools for troubleshooting issues of wifi interference will become illegal? I am torn between issues of privacy and issues of personal responsibility along with not wanting government regulation messing things up. It is a catch-22.

  • kchand

    What’s the down side of them spying inside the US? Anyone believe Holder will prosecute anyone on ‘their’ side. Anyone believe the press would get all “wee-wee’d up” about the Obamacracy doing this?

  • http://pocketchangeproductions.net/ anotherindyfilmguy

    Google HQ moved to a *nation island* that *dissapears* from the maps etc…

    Google has to do what it can to avoid international prosecution somehow, now isn’t that right Mr. Bond?

  • zroxx

    At a high level the hysterical reactions to the Google wi-fi scenario serve as another data point for why letting liberal hogwash (conspiracy theories, anti-corporate feelings, and jealously of “too much success”) invade conservative ‘thought’ is a bad thing.

    If Google broke laws, let those who are party to the crime sue. Having state and federal governments “investigate” is an ill use of taxpayer funds.

    This is simple, in two parts:

    (1) If someone is offended by the idea of Google collecting wi-fi access point data including publicly broadcast identifiers and linking those with geographic locations and feel it’s an invasion of your privacy, then they must be equally shocked to learn that Skyhook Wireless and Navizon have been doing precisely that for longer than Google. They both sell that information to other companies; for example, Navizon recently announced a deal to supply Microsoft and Motorola switched from Google to Skyhook to provide data for Motorola’s Android-based phones.

    Skyhook employs a fleet of drivers like Google. Navizon rewards mobile device users for “mapping the wireless landscape” in their own neighborhoods. Both maintain massive databases of location-linked wi-fi access points.

    Since I’ve never seen hysteria break out over those successful American companies I wouldn’t take seriously anyone criticizing Google for doing the same thing.

    (2) If someone is offended that Google collected data packets in addition to the identifying numbers/codes from wi-fi networks, then they are upset over the equivalent of someone recording three words from a ten minute phone conversation. Unless they think Google’s fleet of cars stopped in front of every house for an hour recording data to dig up evidence of someone downloading Iron Man. Again, if Google broke a law in some state then let those unjustly affected parties sue. If someone doesn’t accept Google’s reasonable explanation for why they collected the other data, and doesn’t believe them when they say they haven’t used that other data but rather believe that Google engaged in some nefarious plot – purpose unknown – then they must provide evidence and/or a logical basis for their theory. Otherwise, it is, as one poster described, “speculation … not an argument”.

  • http://www.hakubi.us/ Neil Stevens

    Uh *huh*.

  • zroxx

    Mm *hmm*.

  • http://www.hakubi.us/ Neil Stevens

    Now be a good little soldier and report me to flag@whitehouse.gov for my transgressions against the Party.

  • zroxx

    But, no.

    Try again?

  • Pingback: Why is Mobile Marketing the Next Big Thing in Online Marketing? | Pipstone Online Solutions