China Stealing Land, Exploiting it

Posted on February 16, 2016February 16, 2016 by Denise Simon

In part, JapanTimes: It’s the first time the leaders of Indonesia, Malaysia, the Philippines, Singapore, Thailand, Brunei, Vietnam, Laos, Myanmar and Cambodia have held a stand-alone meeting in the U.S. China is not an ASEAN member, but its territorial claims over disputed waters have raised international concerns and heightened tensions with some member countries.

Obama said trade between the U.S. and ASEAN had increased 55 percent since he took office. The region is now the U.S.’s fourth-largest goods trade partner. U.S. companies are also the largest source of foreign investment in its member nations, he said.

Obama said he wants to build on that progress “so that growth and development is sustainable and inclusive and benefits all people.” More here.

China Reclaimed Land for South China Sea Anti-Submarine Helicopter Base Near Vietnam

By: Sam LaGrone

PLAN Chinese Z-18F Anti-Submarine Helicopter

The People’s Liberation Army is building a South China Sea helicopter base that could be a key node in a Chinese anti-submarine warfare (ASW) network across the region, according to new satellite images and analysis shared with USNI News on Friday.

The imagery — first published on news site The Diplomat — show what appears to be extensive reclamation work to build could easily be an ASW helicopter base on Duncan Island, about 200 miles from the coast of Vietnam in the disputed Paracel Islands.

The base “could signal a step-up in China’s ASW capabilities across the South China Sea. A network of helicopter bases and refueling stops scattered across the South China Sea, using no more than the bases China is already known to be building, would make almost any coordinate in the sea reachable,” read the analysis by Victor Robert Lee.
“By hopscotching between bases, the [ASW] helicopter fleet would be unconstrained by fuel range or limited numbers of ship-borne landing berths, creating a continuous and contiguous web of surveillance and response capability.”

thediplomat_2016-02-12_15-55-05 The analysis went on to say “such a web would have utility beyond anti-submarine warfare, and would probably reshape surface ship and aerial combat strategies in the region,” Lee wrote.

In reaction to the revelation, Pentagon officials reiterated their call for all South China Sea nations to island reclamation work, in a Sunday statement to USNI News

“The United Sates continues to call on all claimants to halt land reclamation, construction and militarization of features in the South China Sea,” spokesman Cmdr. Bill Urban told USNI News. “While the United States does not take a position on sovereignty claims to land features, we have growing concerns about China’s pattern of assertive behavior, which creates uncertainties about China’s strategic intentions.”

Naval analyst Eric Wertheim told USNI News last week, if the analysis holds up, it would give the Chinese more military options regionally.

“If it turns out to be true. It’s another example of China excreting its effort to control the South China Sea,” the author of the U.S. Naval Institute’s Combat Fleets of the World said.
“From a military perspective it certainly has an impact as these bases can serve as unsinkable aircraft carriers.”

According to Wertheim, the bases could sustain and act as lily pads for the PLAN’s new Changhe Z-18F ASW variant – based on the French SA 321 Super Frelon heavy lift helicopter – which have a range of 450 nautical miles. The Duncan Island installation would put the helicopters easily in range of Vietnam’s maritime territory.

thediplomat_2016-02-12_15-55-13 In September, Pacific Command commander Adm. Harry Harris told the Senate how he viewed the expanded installations across the entire region.

“If you look at all of these facilities — and you could imagine a network of missiles sites, runways for their fifth generation fighters and surveillance sites and all that — it creates a mechanism in which China would have de facto control over the South China Sea in any scenario short of war,” Harris said.
“These are obviously easy targets in war, it’s what we call in the military, “grapes” if you will, but short of that, the militarization of these features pose a threat against all other countries in the region.”

News of the base comes as Vietnam is in the midst of modernizing its submarine force to include six Russian-built improved Kilo-class diesel electric attack submarines. The submarines, acquired for the maritime defense of Vietnam’s substantial coastline, are part of a Hanoi naval expansion that would assert Vietnam claims in the region.

The disparity between the Vietnamese Navy and the PLAN and China’s heavily armed coast guard ships, was highlighted in 2014. That May, China sent a $1 billion offshore oil platform inside Vietnam’s disputed economic exclusion zone (EEZ) and had ringed it with ships to prevent challenges. If China, for example, made a similar attempt in the future, it could make it riskier for Vietnams reconstituted submarine force to intercede with closer ASW helicopters.

While the reclamation work in the Paracels – where last month the U.S. sent the guided missile destroyer USS Curtis Wilbur (DDG-54) on a freedom of navigation operation – is not as controversial as the ongoing work the Chinese have done to build artificial islands in the Spratly Islands near the Philippines.

In the last two years China has turned low tide elevations into military-style installations – though China insists they aren’t for military use.

Victor Robert Lee image. The Chinese controlled territories in the Paracels – on the other hand – are recognized land features that China has controlled since the mid-1970s while Vietnam and Taiwan also have claims.

In addition expanding the territory on Duncan Island by more than 50 percent in the last year, China has also expanded its Paracel holdings at its airbase at Woody Island, North Island and Tree Island.

“The recent developments at Tree, North, and Duncan islands indicate that Beijing is augmenting its position in the Paracels, which have been overshadowed of late by China’s epic construction projects in the Spratlys,” Lee wrote.
The changes in progress will in the Paracels “probably reshape surface ship and aerial combat strategies in the region.”

It was not a Hardware Issue, it was a Cyber Intrusion, IRS

Posted on February 12, 2016February 12, 2016 by Denise Simon

IRS Confirms It Was a Victim of an Automated Attack

The attack, which occurred in January, targeted the electronic filing PIN application form on the IRS.gov Website. Experts said there are lessons to be learned.

eWeek: The U.S. Internal Revenue Service (IRS) is gearing up for another busy tax season, and it appears that hackers are getting ready, too. On Feb. 9, the IRS confirmed that it was the victim of an automated attack in January that targeted the electronic filing PIN application form on the IRS.gov Website.According to the IRS, attackers made use of personal information, including Social Security numbers, that was stolen from other non-IRS Websites. The attackers then used that information in an attempt to generate fraudulent E-File PIN numbers on IRS.gov. With a PIN number, an attacker could have potentially been able to file a tax return or gain access to other taxpayer information.The IRS investigation has found that 464,000 unique Social Security numbers (SSNs) were used in the attack, with 101,000 being successfully able to access the E-File PIN. The IRS is emphasizing that it has halted the attack and is contacting those who are affected.”No personal taxpayer data was compromised or disclosed by IRS systems,” the agency stated. “The IRS also is taking immediate steps to notify affected taxpayers by mail that their personal information was used in an attempt to access the IRS application.”

In May 2015, the IRS reported that its Get Transcript service was attacked. Get Transcript enables users to get information about their tax account transactions. As is the case with the new attack against the E-File PIN, the Get Transcript service attack involved user information that was stolen from third-party sites. The success rate for the Get Transcript attackers, however, was higher than it was for the E-File PIN attackers, where 100,000 out of 200,000 hack attempts were successful.

Security experts contacted by eWEEK are not surprised that the IRS is once again reporting an attack against its systems. The fact that the IRS.gov site was attacked with SSNs stolen from other third-party sites is, however, somewhat ironic.”One of the most successful ways hackers steal citizens’ Social Security numbers is through fraudulent phishing emails or phone calls that appear to be from the IRS,” Darren Guccione, CEO and co-founder of Keeper Security, told eWEEK.

Hackers know the public is terrified of being identity-theft victims and exploit this fear well, often by telling someone they’ve been a victim already and asking for their Social Security number, Guccione noted.Lance James, chief scientist at Flashpoint, commented that one of the big concerns he sees with the latest IRS attack is the continued reliance on Social Security numbers. “We need to rethink what a Social Security number means these days when it comes to accessing data,” James told eWEEK. “It should not be the administrator password for a person’s life.”Andy Hayter, security evangelist at G DATA Software, also commented on the risks associated with SSN disclosure. Every bit of an individual’s personally identifiable information that is collected via a breach is one more piece of information that can, and someday will, be used against a person, he said.
“As long as information such as Social Security numbers is used as identification, we will have bad actors trying to collect as much information about individuals to do harm, either through theft or worse,” Hayter told eWEEK.Inga Goddijn, executive vice president at Risk Based Security, noted that taxpayers should be concerned that questionable security practices at organizations completely unrelated to the IRS have the potential of affecting their tax returns.

Though the IRS has stated that no personal taxpayer data was compromised or disclosed in the new attack, JP Bourget, CEO of Syncurity, noted that there is still a real risk.”While maybe the IRS can in the end prevent any bad outcomes for taxpayers, I can imagine a few scenarios where a bad guy attempts to file a tax return for a refund that then holds up a valid refund to someone who is owed a refund, and even depending on that refund,” Bourget told eWEEK. “There’s also the angle of now your account is flagged and the uncertainty of how that affects a taxpayer over time and what hidden costs may arise from that.”One potentially positive outcome that could result from the IRS attack is that lessons learned could help prevent the next attack. Goddijn said that it would be helpful if the IRS can share more detail as to how the agency detected the attack and ideas for preventing these types of enumeration attacks in the future. She added that the U.S. government has been pushing for more threat intelligence sharing and improved security practices for all organizations.”Why not take this opportunity to lead the charge and share more about the attack with the security community,” Goddijn said. “That may help stop the next, similar assault on a high-value target.”

In 2015:

USAToday: Criminals hacked into an Internal Revenue Service website and gained access to approximately 100,000 tax accounts, the agency said Tuesday. Another 100,000 attempts were made but were not successful.

The attack appears to have first begun in February, the agency said.

The hackers got in by taking information about taxpayers they’d acquired from other sources and using it to correctly answer several personal identity verification questions in the IRS’ “Get Transcript” application, the IRS said in a statement.

This allowed them to get information about tax accounts through the application. The information stolen included Social Security information, date of birth and street address.

The Get Transcript application allows users to view their tax account transactions, line-by-line tax return information or wage and income reported to the IRS for a specific tax year. It was used to securely retrieve approximately 23 million taxpayer transcripts last year, the IRS said.

The information the hackers used to get in was probably previously stolen by other hackers who then sold it on the open market, said Rob Roy, chief technology officer of HP Enterprise Security Products.

The hackers who bought it “appear to have hired an army of people to submit over 200,000 queries into the IRS site over a period of four months. Not exactly a quick and easy operation,” he said.

“The matter is under review by the Treasury Inspector General for Tax Administration as well as the IRS’ Criminal Investigation unit, and the ‘Get Transcript’ application has been shut down temporarily,” the IRS said.

The agency will provide free credit monitoring services for the approximately 100,000 taxpayers whose accounts were accessed.

The theft was discovered late last week when IRS staff noticed unusual activity on the application. Further investigation showed that attempts were made beginning in February.

The breach does not involve the main IRS computer system that handles tax filing submissions. “That system remains secure,” the IRS said.

“The IRS historically has been very security, it has to be by virtue of the data it collects. But it just goes to show that even the most secure system can be attacked,” said Larry Ponemon of the Ponemon Institute, a data security research group.

NYPD Covertly Tracked Cell Phones

Posted on February 11, 2016February 11, 2016 by Denise Simon

New York police have covertly tracked cell phones, group says

Reuters: New York City’s police have made extensive use of covert devices to track cell phones without obtaining warrants since 2008, a civil liberties group said on Thursday, revealing how frequently law enforcement in the largest U.S. city has employed the technology.

The New York Civil Liberties Union released files that showed the New York Police Department used “cell site simulators” to track nearby cell phones more than a 1,000 times over the past eight years.

The American Civil Liberties Union has identified 60 local, state and federal agencies that have adopted the devices in recent years, but the group has said there are likely far more. The extent of the devices has largely been shrouded in secrecy, as departments and private manufacturers such as Harris Corp have refused to disclose information about their use.

U.S. Representative Jason Chaffetz of Utah, a Republican, has introduced a bill to require warrants for the use of cell site simulators.

The documents released on Thursday were obtained by the NYCLU through a Freedom of Information Law request.

The NYPD does not have a written policy on using the surveillance devices and does not obtain warrants when doing so, according to the NYCLU.

Instead, the department seeks “pen register” orders, which have been used for decades to gather information on specific phone numbers. The orders are issued by judges but require a lower standard than the probable cause needed for warrants.

The NYPD’s practice is less stringent than the one adopted last year by the U.S. Department of Justice, which calls for warrants except in emergency situations.

“We still have concerns that this military equipment is being used in a civilian context,” said Mariko Hirose, an NYCLU attorney. “At the very least, they should be using warrants and with a strict privacy policy that is written.”

The NYPD did not immediately respond to a request for comment.

The devices mimic cell towers and intercept signals from nearby phones to gather information. That data can include locations of calls, numbers that are called or texted and even the content of communications, the NYCLU said.

The simulators can also sweep up information from nearby “bystander” phones.

The documents do not indicate what data police collected. The simulators were used to investigate a wide range of crimes, including murder, rape and drug trafficking.

No New York court has yet tackled the question of whether the warrantless use of such devices is constitutional, Hirose said.

She said the NYCLU could have difficulty establishing the legal standing to bring such a challenge, which would probably have to come from a criminal defendant specifically targeted by a simulator.

Yikes, there is more:

Intercept: The NYPD has used cell-site simulators, commonly known as Stingrays, more than 1,000 times since 2008, according to documents turned over to the New York Civil Liberties Union. The documents represent the first time the department has acknowledged using the devices.

The NYPD also disclosed that it does not get a warrant before using a Stingray, which sweeps up massive amounts of data. Instead, the police obtain a “pen register order” from a court, more typically used to collect call data for a specific phone. Those orders do not require the police to establish probable cause. Additionally, the NYPD has no written policy guidelines on the use of Stingrays.

Stingrays work by imitating cellphone towers. They force all nearby phones to connect to them, revealing the owners’ locations. That means they collect data on potentially hundreds of people. They are small enough to fit in a suitcase, or be mounted on a plane.

When they were originally developed in 2003, Stingrays were designed for military use. But in the past decade, they have increasingly been purchased by law enforcement agencies. According to the ACLU, Stingrays are used by at least 59 police departments in 23 states, and at least 13 federal agencies, including the DEA, FBI, and the IRS. Because most departments withhold information about Stingrays, these numbers likely underrepresent the total.

In December, The Intercept published a secret U.S. government catalogue of cellphone surveillance technology, including Stingrays and “dirt-boxes.” The advertisements boast that many of the items can spy on “up to 10,000 targets.”

Stingrays have long been a topic of concern for privacy activists. “Cell-site simulators are powerful surveillance devices that can track people, including in their homes, and collect information on innocent bystanders,” said Mariko Hirose, a senior staff attorney at the NYCLU. “If they are going to be used in communities the police should at minimum obtain a warrant and follow written policies.”

Instead, law enforcement agencies have fought to keep Stingrays secret, even dropping criminal cases to avoid disclosing anything about them. The FBI has forced local police agencies to sign Stingray-related non-disclosure agreements, claiming that criminals and terrorists who know about Stingrays could take countermeasures against them.

The increasing use of Stingrays, coupled with the lack of transparency, has alarmed civil liberties groups. “I think it’s critical to have transparency about the use of technology like Stingrays,” said Faiza Patel, an attorney with the Brennan Center for Justice. “That’s what allows courts, the public, and our elected officials to weigh in on the proper rules.”

In September, the Department of Justice issued guidelines requiring its officers to seek probable cause warrants before using a Stingray. But the guidelines only applied to federal law enforcement agencies, not to state and local police, who have fought such a change. In one ongoing court case, the state of Maryland has argued that anyone who turns on their phone consents to having his or her location tracked.

In November, Senator Ron Wyden, D-Ore., and Rep. Jason Chaffetz, R-Utah, introduced the GPS Act, a bill that would extend the Department of Justice’s guidelines to all law enforcement agencies. “Buying a smartphone shouldn’t be interpreted as giving the government a free pass to track your movements,” Wyden said.

See the government catalogue here:

Top photo: “nypd” by Nick Allen, used under CC BY 2.0/ cropped and color corrected from original.

Contact the author:

ISIS, Islamic State has a Help Desk

Posted on February 11, 2016February 11, 2016 by Denise Simon

The Islamic State in Iraq and Syria (ISIS) uses a 34-page manual to instruct its followers on how to stay invisible on the Internet.

The Arabic document was translated and released this week by analysts at the Combating Terrorism Center, an independent research group at the U.S. Military Academy at West Point. It includes warnings to avoid Instagram because it is owned by Facebook, and Dropbox because former secretary of State Condoleezza Rice sits on its board of investors. Famous government leaker Edward Snowden has also criticized Dropbox over its privacy, the document notes.

Users are also directed to use Apple’s encrypted FaceTime and iMessage features over regular unencrypted text and chat features. More here.

New ISIS ‘help desk’ to aid hiding from authorities

TheHill: The Islamic State in Iraq and Syria (ISIS) has opened up a new technical “help desk” that instructs terrorists on how to hide from Western authorities, according to researchers.

The Electronic Horizon Foundation (EHF) was launched on Jan. 30 as a joint effort of several of the top ISIS cybersecurity experts, the Middle East Media Research Institute (MEMRI) said in a new report.

While researchers have previously uncovered an ISIS “help desk” and 34-page manual that help extremists encrypt their communications, MEMRI said the EHF takes these services to an “alarming” new level.

“Jihadis have long sought technical information, which has been confined in the past to various password-protected jihadi forums,” said the MEMRI report, shared exclusively with The Hill. “However, the freedom and ease by which they can now obtain that information is alarming, especially when such information is shared over private and secure channels.”

The EHF operates on the encrypted messaging platform Telegram but also maintains a Twitter account that disseminates information and directs followers to its secure Telegram channel.

The group’s self-stated goal is clear: “Spreading security and technical awareness among the monotheists.”

According to an announcement celebrating the EHF launch, ISIS has spent a year establishing the group with the goal of “unifying the technical and security efforts, and uniting the ranks of the mujahideen’s supporters.”

It brings together several technical support entities, such as the Information Security channel on Telegram and the “Islamic State Technician,” an ISIS security specialist thought to be behind a leading password-protected technical forum.

The announcement, which the MEMRI translated, was also direct that the EHF had been formed “due to the electronic war and tight surveillance imposed by the Western intelligence apparatuses over Internet users, and their tracking and following of the mujahideen and their supporters, and targeting them based on their data and information, which they share over the Internet.”

EHF pledged to provide resources to help combat this surveillance.

“It is time to face the electronic surveillance, educate the mujahideen about the dangers of the Internet, and support them with the tools, directives and security explanations to protect their electronic security, so that they don’t commit security mistakes that can lead to their bombardment and killing,” the announcement said.

As of early this week, the EHF Telegram account had over 2,200 members.

MEMRI said EHF has not posted much yet, “but it is expected to take the lead nonetheless in content posted as time goes by.”

If the group follows in the footsteps of its creators, its content will be “defensively-oriented,” such as tutorials on mobile phone security, instead of “offensively-oriented,” such as instructions on launching cyberattacks, MEMRI said.

In the wake of the terror attacks in Paris and San Bernardino, Calif., law enforcement officials have cautioned that potential terrorists are increasingly using encryption to hide from investigators, a phenomenon they call “going dark.”

The warnings have led to some calling for legislation that would guarantee government access to encrypted data, although momentum on Capitol Hill for such a bill has cooled in recent months.

“I don’t think we’re any closer to a consensus on that than we were, I think, six months ago,” Rep. Adam Schiff (D-Calif.), the House Intelligence Committee’s top Democrat, said last week. “Or if there is a consensus, it is that a legislative solution, I think, is very unlikely.”

IS Encryption Guide by AlyssaBereznak

The Brits Invented this? Whew Hoo

Posted on February 11, 2016February 11, 2016 by Denise Simon

Scientists create internet cables 50,000 times faster than superfast broadband

The frustrations of slow internet downloads could become a thing of the past after British researchers discovered a way to send data at 50,000 times the average broadband speed.

Scientists at University College London have developed new fibre-optic equipment that can send data at 1.125 terabits per second.

The speed, a world record, is enough to transfer an entire TV series at high-definition quality in a fraction of a second, compared to the hours it would take many British households.

“This is almost 50,000 times greater than the average speed of a UK broadband connection of 24 megabits per second, which is the current speed defining ‘superfast’ broadband,” Dr Robert Maher, who lead the research, said.

This is almost 50,000 times greater than the average speed of a UK broadband connection

Dr Robert Mayer

“To give an example, the data rate we have achieved would allow the entire HD Game of Thrones series to be downloaded within one second.”

Downloading the same amount of data on a typical UK connection would take around an hour. Almost a third of households have speeds of less than 10 megabits per second, and would need around two hours.

The researchers said the “super-channel” technology could revolutionise broadband networks and create “the next generation of high-capacity communication systems”.

They achieved the breakthrough, published in the journal Scientific Reports, using similar fibre-optic technology that sends light signals through the thousands of miles of cables that make up the BT broadband network today.

The speeds could transfer a series of Game of Thrones in HD in less than a second Credit: HBO

The milestone was achieved by sending 15 pulses of light at different frequencies at once, a so-called “super-channel”, which allowed the researchers to send information at a much faster speed. A special receiver is able to capture the wide range of frequencies and process them.

The technique is commonly used to split up wireless signals but to date has not been used in fixed internet connections. Even the fastest state-of-the-art fibre-optic cables used by broadband companies today can achieve speeds of just 100 gigabits per second – less than one-tenth what the UCL researchers found.

“This ultimately resulted in us achieving the greatest information rate ever recorded using a single receiver,” Dr Maher said.

The technology uses fibre-optic technology like today’s broadband networks

Although distance and network signal deterioration mean most consumers are unlikely to see connections at the speeds found in the laboratory, UCL’s Professor Polina Bayvel said if the new design were used instead of current technology, it would mean home broadband speeds more than 10 times faster.

“A high-capacity digital communications infrastructure underpins the internet and is essential to all aspects of the digital economy and everyday lives,” Bayvel said.

The technology is not yet commercially available but the UCL researchers now plan to test it to see if it can successfully carry data across the thousands of miles of optical fibres that cross the country.

The breakthrough comes as frustration at internet speeds creates pressure on regulators to break up BT, separating the Openreach division that manages the UK’s broadband infrastructure from BT itself.

If you’d like fast broadband in your home or office and want to save money then use usave’s broadband comparison tool and you’ll get the best broadband for the best price.

More than 100 MPs have called on Ofcom to enforce a break-up, claiming that British businesses have been held back by a “lack of ambition and under-investment”.

Mapped: The best and worst places in the country for broadband