Velveeta:

Velveeta: "beware Operation Sudden Fall" [Telecom]

NewsGroups | Search | Tools
 comp.dcom.telecom  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Velveeta: "beware Operation Sudden Fall" [Telecom] editor 05-11-2008
Posted by on May 11, 2008, 11:17 am
If you were  Registered and logged in, you could reply and use other advanced thread options

***** Moderator's Note *****

Usenet is getting a flood of Velveeta this morning, all of it touting
some scheme to "Encrypt" SMS messages, and supposedly protect them
from interception by the police. The first two URL's in the Velveeta
point to news reports about widespread drug dealing and arrests on a
college campus.

Although I won't spread the landing zone URL's, the Velveeta is being
done by a pro, which makes me wonder if this is an escalation in the
spam arms race: Velveeta is as old as Usenet, but whomever sent these
knows enough to be in the same league with Hipcrime, so I'm afraid
that some new guild/group is gearing up for widespread Usenet abuse.

In any case, paradoxically, the subject _is_ related
to telecom, and I'm curious if the readers can answer these questions
for me:

1. Does anyone know who is sending these? Is (s)he for real or just a hired gun?
(1)
2. Is it possible to add AES encryption to SMS on the "average" cell phone?
3. Should SMS be considered a private paper deserving of constitutional
protection against unreasonable search?
4. Should the U.S. government be prohibited from monitoring cell channels
without a search warrant?

Bill Horne
Temporary Moderator
bill@horneQRM.net

(1) Write me offline if you need the actual URL's being touted.

P.S. I don't care if it's not called "Velveeta" anymore.

(Filter QRM from my address for direct replies. Please put [Telecom] at the end
of your subject line,
or I may never see your post! Thanks!)

- - - - - - - -
Law enforcement is now intercepting text messages,
as proven by Operation Sudden Fall in San Diego.

http://www.usdoj.gov/dea/pubs/states/newsrel/sd050608.html
http://www.signonsandiego.com/news/education/20080506-1338-bn06sdsu2.html


Don't let your personal SMS/text messages fall into
the wrong hands. Encrypt your messages with one
of these:



http://redacted.inv

http://redacted.inv

http://redacted.inv

http://redacted.inv

http://redacted.inv

http://redacted.inv

http://groups.google.com/group/redacted

http://home.redacted


Be Safe, Be Encrypted, #$% the Police!!


Posted by Koos van den Hout on May 11, 2008, 7:15 pm

> Usenet is getting a flood of Velveeta this morning, all of it touting
> some scheme to "Encrypt" SMS messages, and supposedly protect them
> from interception by the police. The first two URL's in the Velveeta
> point to news reports about widespread drug dealing and arrests on a
> college campus.

> Although I won't spread the landing zone URL's, the Velveeta is being
> done by a pro, which makes me wonder if this is an escalation in the
> spam arms race: Velveeta is as old as Usenet, but whomever sent these
> knows enough to be in the same league with Hipcrime, so I'm afraid
> that some new guild/group is gearing up for widespread Usenet abuse.

> 1. Does anyone know who is sending these? Is (s)he for real or just a hired
gun? (1)

My best guess from reading several versions of the message you refer to: it
is a hippie who got all excited when he saw news that the police can
monitor text messages, he collected a few links to existing options to
encrypt your text message traffic and got those out to the world in order
to make everyone aware of this breach of privacy and hoping everyone would
switch to encrypted messaging.

** just my guess sofar

Maybe making his encrypted messages about buying dope be less noticable in
all that encrypted traffic.

** and here is where it turned into real fantasy.

The random signatures and the usage of different usenet servers for
injecting the message do suggest that it is someone who knows usenet.

I'm not thinking 'pro usenet spammer'.

I visited one of the advertised sites. That is not a spammer site. I can
find out the domain owner, it is not registered via a shady registrar in a
country known for spam, and it has a matching registration for the IP also
in a clean network neighbourhood.

> 2. Is it possible to add AES encryption to SMS on the "average" cell phone?

A (GSM) cell phone has encryption in itself in order to work. For
applications to use it they would need to be symbian or java applications
with access to message sending/receiving functions.

> 3. Should SMS be considered a private paper deserving of constitutional
protection against unreasonable search?

I am not a lawyer, but my thought would be that SMS by nature is a private
communication between two unique phone endpoints and should therefore be
considered private communications.

> 4. Should the U.S. government be prohibited from monitoring cell channels
without a search warrant?

I am not a lawyer and not a US citizen but my personal view is that any
democratic government should always aim for maximum privacy of its citizens
and should only breach the privacy of specific citizens when there is a
reasonable and verifiably reason to do so, and be willing to explain to
that citizen afterwards why his/her privacy was broken.

> Law enforcement is now intercepting text messages,
> as proven by Operation Sudden Fall in San Diego.

> http://www.usdoj.gov/dea/pubs/states/newsrel/sd050608.html
> http://www.signonsandiego.com/news/education/20080506-1338-bn06sdsu2.html

What I think happened that the text messages were sent out when the sender
was already under investigation for drug dealing so search warrants
were all in place. Which means the police just were very surprised at
the stupidity of openly mentioning the drugdeals in text messages. A lot
of police work is based on babbling (or in modern times: text-babbling)
self-incriminating which is why phone taps are so popular with the police.

Koos

--
Koos van den Hout Homepage: http://idefix.net/~koos/
Fax: +31-30-2817051 PGP keyid DSS/1024 0xF0D7C263 or RSA/1024 0xCA845CB5
Webprojects: Camp Wireless http://www.camp-wireless.org/
The Virtual Bookcase http://www.virtualbookcase.com/


Posted by Bill Horne on May 11, 2008, 10:57 pm
Koos van den Hout wrote:
>
>> Usenet is getting a flood of Velveeta this morning, all of it touting
>> some scheme to "Encrypt" SMS messages, and supposedly protect them
>> from interception by the police. [snip]
>
>> 1. Does anyone know who is sending these? Is (s)he for real or just a hired
gun? (1)
>
> My best guess from reading several versions of the message you refer to: it
> is a hippie who got all excited when he saw news that the police can
> monitor text messages, he collected a few links to existing options to
> encrypt your text message traffic and got those out to the world in order
> to make everyone aware of this breach of privacy and hoping everyone would
> switch to encrypted messaging.
[snip]
> I visited one of the advertised sites. That is not a spammer site. I can
> find out the domain owner, it is not registered via a shady registrar in a
> country known for spam, and it has a matching registration for the IP also
> in a clean network neighbourhood.

I suppose you're right, although I can't help but wonder if someone is
touting SMS encryption as a roundabout way of pumping a common
underlying technology which is in use by all the sites mentioned.

>> 2. Is it possible to add AES encryption to SMS on the "average" cell phone?
>
> A (GSM) cell phone has encryption in itself in order to work. For
> applications to use it they would need to be symbian or java applications
> with access to message sending/receiving functions.

But is it AES, or something less robust? If it's AES, then the
encryption is believable, but if it's a less robust method, then it
would make sense for someone to tout it via Velveeta.

[snip]

> What I think happened that the text messages were sent out when the sender
> was already under investigation for drug dealing so search warrants
> were all in place. Which means the police just were very surprised at
> the stupidity of openly mentioning the drugdeals in text messages. A lot
> of police work is based on babbling (or in modern times: text-babbling)
> self-incriminating which is why phone taps are so popular with the police.
>
> Koos

I guess that's the part I find hard to believe: the notion that
college students could be so stupid as to allegedly conduct a drug
ring using _any_ electronic communication is bad enough, and if it's
true, it speaks volumes about the hubris and arrogance some spoiled
children exhibit. An indictment isn't a conviction, of course, so I'll
leave that aspect to the courts.

My stumbling point is this Velveeta: it just doesn't track my notion
of something a knowledgeable Internaut would do to protest what (s)he
obviously feels is unwarranted (pun intended) monitoring. I _want_
there to be a commercial motive so that the effort makes sense.

I guess you're right: it's probably a futile gesture by someone who
doesn't accept that police have a job to do.

Bill

--
Bill Horne
Temporary Moderator
Telecom Digest

(When sending a post to the digest, please put "[Telecom]"
{without the quotes but _with_ the brackets} at the end of
your subject line, or I may never see your mail. Thanks!)

(Remove QRM from my address for direct replies.)


Posted by Dave Garland on May 12, 2008, 10:58 am
wrote:

>Koos van den Hout wrote:
>> A (GSM) cell phone has encryption in itself in order to work. For
>> applications to use it they would need to be symbian or java applications
>> with access to message sending/receiving functions.
>
>But is it AES, or something less robust? If it's AES, then the
>encryption is believable, but if it's a less robust method, then it
>would make sense for someone to tout it via Velveeta.

It's something called A5. It's been cracked.
http://www.darkreading.com/document.asp?doc_id=146616

It only protects you between the phone and the tower. In the case of
the police, GSM encryption isn't going to help because they've got
access to the unencrypted data via the ability to tap anybody's phone.

And in any case, it only protects you if the cell tower turns it on. You
don't normally have any way to know. According to the above report,
some GSM networks use the same key for 16 calls, which would make things
easier for an over-the-air eavesdropper.

Dave


Similar ThreadsPosted
U.S. FTC Sues New Hampshire 'Spyware' Operation October 5, 2005, 12:25 pm
Re: U.S. FTC Sues New Hampshire 'Spyware' Operation October 6, 2005, 9:19 am
Re: U.S. FTC Sues New Hampshire 'Spyware' Operation October 6, 2005, 7:23 pm
Re: U.S. FTC Sues New Hampshire 'Spyware' Operation October 6, 2005, 4:54 pm
Beware of the Dot January 28, 2007, 1:03 am
Re: Beware of the Dot February 2, 2007, 8:18 pm
Re: Beware of the Dot February 4, 2007, 12:42 am
Re: Beware of the Dot February 5, 2007, 11:12 am
Re: Beware of the Dot February 6, 2007, 2:39 pm
Re: Beware of the Dot February 8, 2007, 3:17 am

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map