Microsoft Outlook Support

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Wednesday, 24 June 2009

Terrorists' latest way of information sharing

Posted on 11:14 by Unknown
by Michael Smith (Veshengro)

The latest nigh on intercept proof way of information sharing that terrorists have come up with could have been invented by a grade school kid. They now use draft folders of web mail services rather than actually sending emails.

Instead of sending emails – even encrypted ones – to communicate with one another, which can and will be intercepted and stored, terrorists have now begun using web mail draft folders for the exchange of communications.

The system is so simple and easy that it could have been thought up by a fourth grader. The chance is it may just have been one.

Each member of a particular cell has the username and password for the particular web mail account in question and log on at a time when none of the other will be logged into the account and then read the message(s) in the draft folder and add reply.

Note: This is also a cute way of document co-authoring without having to use an in-the-cloud service

As no email is sen d or received no intercept of this communication is possible – at least not at present.

This method could be referred to as a Cyberspace Dead Letter Drop.

The interesting part here is though that no one will or can – with the exception that the IPs will be different and the locations – realize that more than one person uses that particular email account online.

To all intents and purposes any access to the account will always appear to be b y the user though from different IPs and global locations even.

But, unless the account could come under investigation nothing would throw a marker up to this effect and flag that behavior, as it is something rather common with web mail, as strange, for instance.

In so-called free and democratic countries it just would way too much be an infringement of personal liberties – which indeed it would be – and also an infringement of business secrecy, to, in fact, monitor email accounts for just such activities and to read the messages in the draft email folders, or documents in any other folder stored on the web mail account.

I also doubt that any of our governments would want to be seen to be that intrusive and I think that most people would not go along with permitting our governments to become that intrusive a “Big Brother”, , though we already have a nigh on total surveillance state in the UK, for instance.

The implications of this practice of communicating and information sharing, however, are rather serious as it will make having prior knowledge a lot harder.

Then again the same is true also in this regard with the terrestrial old style dear letter drops.

Dead letter drops of the old kind did sometimes come to notice and could then be observed and such. This is somewhat more difficult, obviously, with such dead letter drops being in the cloud, in cyberspace, in web mail accounts, as monitoring of accounts, as said, could be a real infringement of so many things and not just civil liberties.

Then again, what would one be watching for? The owner/user of the account logging on; then off and then on again?

Having something stored in the draft folder also is no proof of any terrorist or other illegal activities.

What this proves, however, is that there is always a way around intercepts and surveillance and someone does come up with such things and some of those things are so simple that it is amazing that no one has used them for much longer already. This system is so simple that is beggars belief, really. We can but wonder as to “what next?”.

© 2009
<>
Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest
Posted in | No comments
Newer Post Older Post Home

0 comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Popular Posts

  • Open Source Software in Business & Government
    by Michael Smith (Veshengro) Lots of Open Source in use in mainland Europe, including EU member states, very little in the UK and less still...
  • Infosecurity Europe 2011 Hall of Fame nominations now open
    London UK, February  2011 – The time is ripe to elevate the greatest movers and shakers in the world of information security as nominations ...
  • Tufin unveils new functionality & updated PCI DSS 2.0 compliance reporting
    TUFIN TECHNOLOGIES UNVEILS enhanced firewall operations management functionality and UPDATEd pci dss 2.0 compliance reporting New Perm...
  • Web 2.0 services are the next security hurdle says 360°IT – The IT Infrastructure Event
    Planning is are now well under way for the first 360°IT – The IT Infrastructure Event, due to take place at London's Earls Court this co...
  • Safer Internet Day - The role of Security within Social Networks
    Amichai Shulman – CTO and co-founder of Imperva Last week researchers unveiled a “ dating database ” consisting of 250,000 users. This was...
  • ISACA’s EuroCACS Examines Data Protection, Cloud Computing and Social Networking
    ISACA’s EuroCACS Examines Data Protection, Cloud Computing and Social Networking 20-23 March 2011, Manchester, UK Rolling Meadows, IL,...
  • Experts warn about risks of multi-tasking on new iPhone 4.0 OS
    Fortify Software warns companies to beware multi-tasking aspects of new iPhone 4.0 operating system Following a rash of news reports about...
  • Experts says trashed hard drive fiasco at Pfizer could have been avoided with Encryption
    Credant says trashed hard drive at Pfizer would not have happened if data had been encrypted Credant Technologies says that a security gaffe...
  • IT services provider, FORT, brings AVG to Irish market
    by Michael Smith (Veshengro) ISP customers to benefit from complete Internet security solution London, UK – AVG, the world’s most downloaded...
  • Lieberman Software and Q1 Labs Partner to stop insider threats
    Joins Q1 Labs Security Intelligence Partner Program London – February 1, 2011 Organisations seeking to eliminate the potential for anony...

Categories

  • ASUS
  • AVG Link Scanner
  • BeCrypt
  • book review
  • Brocade
  • Codenomicon
  • Columbian USB stick loss
  • computer recycling
  • Conficker worm
  • Credant Technologies
  • cyber crime
  • Cyber-Ark
  • Cyber-Ark®
  • Data Center
  • data encryption
  • DeviceLock
  • Digital Pathways
  • diskGenie
  • Eclypt
  • Eee PC
  • Eee PC Seashell 1008HA
  • F5 Networks
  • Facebook
  • Finjan
  • Finjan Inc.
  • Finjan MCRC
  • Firewall Management
  • Fortify
  • Fortify 360
  • Fortify Software
  • Fortify® Software
  • gadgets
  • Google
  • Google Chrome
  • green computing
  • green IT
  • IBM
  • Infosec
  • Infosec Europe 2009
  • Infosecurity Adviser
  • Infosecurity Europe
  • Infosecurity Europe 2009
  • Internet privacy
  • iStorage
  • iStorage diskGenie
  • iStorage Ltd.
  • Juniper Networks
  • Lakeland
  • Lapdesk
  • LLC
  • Logitech
  • malware
  • ManageEngine
  • McAfee International Ltd
  • MI6
  • MI6 data loss
  • Microsoft
  • MiFi™ 2352
  • Mio
  • Mobile Broadband
  • MS Office
  • National Cybersecurity Advisor
  • Navman
  • Navman Spirit
  • Netac
  • Novatel
  • Novatel Wireless Intelligent Mobile Hotspot 2352
  • OneClick IntelliPanel Desktop
  • online social media
  • open source
  • OpenOffice.org
  • Optenet
  • Origin Data Locker
  • Origin Storage
  • PNDs
  • product review
  • Red
  • SaaS
  • Sat Nav
  • saving energy
  • Security
  • Shavlik Technologies
  • SIS
  • spam
  • Stonewood Group
  • Storage Area Networks
  • Storage Expo
  • Storage Expo 2009
  • Sun Microsystems
  • Swine Flu
  • Syphan Technologies
  • Throwing Sheep in the Boardroom
  • Tufin Technologies
  • Twitter
  • U256
  • Unisys Security Index
  • USB drives
  • Vektor
  • VisionRacer
  • VisionRacer VR3
  • VMware
  • Weast
  • Web Apps Security
  • WebFilter PC Solution
  • WebSpy
  • XSS-driven attacks

Blog Archive

  • ►  2012 (1)
    • ►  January (1)
  • ►  2011 (67)
    • ►  December (1)
    • ►  April (1)
    • ►  March (14)
    • ►  February (30)
    • ►  January (21)
  • ►  2010 (192)
    • ►  December (20)
    • ►  November (22)
    • ►  October (19)
    • ►  September (5)
    • ►  August (8)
    • ►  July (5)
    • ►  June (22)
    • ►  May (13)
    • ►  April (11)
    • ►  March (13)
    • ►  February (27)
    • ►  January (27)
  • ▼  2009 (240)
    • ►  December (25)
    • ►  November (9)
    • ►  October (21)
    • ►  September (19)
    • ►  August (30)
    • ►  July (35)
    • ▼  June (30)
      • Fortify Software to Collaborate with HP on Applica...
      • Say Hello to Vid: Logitech Introduces Simpler, Str...
      • Bull equips several French Ministries with globull...
      • Survey reveals 20% of IT Cheat on Audits to get th...
      • Finjan’s Research Unveils Botnet Trading Platform ...
      • ASUS Post-Computex 2009 Press Event & Product Launch
      • Finjan’s Research Unveils Botnet Trading Platform ...
      • ISACA Commends EC Plans for Tougher Cybercrime Leg...
      • Terrorists' latest way of information sharing
      • IRONKEY Hardware encrypted USB Device – Product Re...
      • Could "Opera Unite" be a Botmaster's best friend?
      • Kingston Technology First to Market with a Massive...
      • The Sky’s the Limit: Logitech Introduces Its First...
      • Oh Great! Hackers offer T-Mobile data to highest b...
      • ASUS Eee PC: Best Low Power Solution for Developin...
      • Experts say East European ATM sniffing down to poo...
      • SACA Praises Change Your Password Day
      • Low bit levels could compromise encryption
      • Download Your Software instead getting on disc
      • ASUS Eee PC™ T91: A Head-Spinning Nice Touch
      • IT experts say 109,000 pension holder data loss ea...
      • Kingston Technology Launches Fully Compatible Secu...
      • A Help Button Needed on Every Website According to...
      • Twitter's scareware distribution attack signals a ...
      • Experts recommend preparing for withdrawal of Offi...
      • IT services provider, FORT, brings AVG to Irish ma...
      • 3ami MAS v7 bridges the USB data loss gap
      • Experts warn firms for code audit as Windows XP en...
      • 73% of companies believe they are vulnerable to ha...
      • Infosecurity Adviser applauds forensics lab traini...
    • ►  May (21)
    • ►  April (42)
    • ►  March (8)
Powered by Blogger.

About Me

Unknown
View my complete profile