Facts: Mexico to U.S. Immigration

Posted on February 12, 2016February 12, 2016 by Denise Simon

Unaccompanied Alien Children Charged in Execution-Style Murder, Media Calls Them “Baby-Faced Boys”

It appears that the recent execution-style murder of a Massachusetts man was committed by two Central American teens that came to the U.S. as Unaccompanied Alien Children (UAC) under President Obama’s open border free-for-all. Tens of thousands of illegal immigrant minors—mostly from El Salvador, Guatemala and Honduras—have entered the country through the Mexican border since the influx began in the summer of 2014 and the administration has relocated them nationwide.

News reports indicate that the 17-year-olds charged in the gruesome Massachusetts killing entered the U.S. recently as UAC’s and both have ties to MS-13, according to authorities cited by various outlets. They lived in Everett and one of the teens, Cristian Nunez-Flores, moved to Massachusetts from his native El Salvador a year and a half ago which is when the influx of Central American minors began. His parents remain in El Salvador, according to a local news article. The other gangbanger’s name is Jose Vasquez Ardon and he too is a recent arrival from Central America. Prosecutors say the teens, described in a local news article as “baby-faced boys,”shot a 19-year-old in the head. Both are being held without bail for obvious reasons. A must read summary here.

*** Meanwhile***

5 facts about Mexico and immigration to the U.S.

PewResearch: Pope Francis is expected to make immigration a major theme of his visit to Mexico. By traveling northward across Mexico, he intends to symbolically retrace the journey of Mexican and Central American migrants traveling to the United States. After the pope leaves Mexico City, his route will begin in the southern state of Chiapas, which shares a long border with Guatemala, and end in Ciudad Juárez, located across the U.S.-Mexico border from El Paso, Texas, a longtime entry point to the U.S.

U.S. immigration from Latin America has shifted over the past two decades. From 1965 to 2015, more than 16 million Mexicans migrated to the U.S. in one of the largest mass migrations in modern history. But over the past decade, Mexican migration to the U.S. has slowed dramatically. Today, Mexico increasingly serves as a land bridge for Central American immigrants traveling to the U.S.

Here are five facts about Mexico and trends in immigration to the U.S.

1Mexico is stopping more unauthorized Central American immigrants at its southern border. The Mexican government said in 2014 that it would increase enforcement at its southern border in response to an increased flow of Central Americans traveling through Mexico to reach the U.S. In 2015, the government there carried out about 150,000 deportations of unauthorized immigrants from El Salvador, Guatemala and Honduras, a 44% jump over the previous year. These three Central American countries alone accounted for nearly all (97%) of Mexico’s deportations in 2015.

2Despite increased enforcement by Mexico, many unauthorized Central Americans are still reaching the U.S. via Mexico. At the U.S.-Mexico border, the number of families and unaccompanied children apprehended by U.S. Customs and Border Protection officials is again rising, though it’s too early to tell how 2016 will compare with prior years. From Oct. 1, 2015, to Jan. 31, 2016, 24,616 families and 20,455 unaccompanied children – the vast majority of them from Central America – were apprehended at the southwestern U.S. border, double the total from the same time period the year before. Apprehensions of unaccompanied children rose to record levels in fiscal 2014, then decreased by 42% in fiscal 2015.

3More Cubans are also traveling through Mexico to reach the U.S. The number of Cubans migrating through Mexico to reach the U.S. spiked dramatically last year after President Barack Obama said the U.S. would renew ties with the island nation. In fiscal 2015, 43,159 Cubans entered the U.S. via ports of entry, a 78% increase over the previous year. Two-thirds of these Cubans arrived through the U.S. Border Patrol’s Laredo Sector in Texas. (Cubans who pass an inspection can enter the U.S. legally under the Cuban Adjustment Act of 1966.)

4Fewer Mexicans are migrating to the U.S. today than in the past. In fact, more Mexicans left than came to the U.S since the end of the Great Recession. Between 2009 and 2014, 870,000 Mexican nationals left Mexico to come to the U.S., down from the 2.9 million who left Mexico for the U.S. between 1995 and 2000. Of those moving back to Mexico, many cite family as the reason for their return. About 1 million Mexican immigrants and their U.S.-born children moved from the U.S. to Mexico between 2009 and 2014, and 61% said they had done so to reunite with family or to start a family, according to the 2014 Mexican National Survey of Demographic Dynamics.

5More Mexicans now say life is about the same in the U.S. and Mexico. In 2015, 33% of Mexican adults said life in the U.S. is neither better nor worse than life in Mexico, up from 23% who said this in 2007. Still, about half of Mexican adults believe life is better in the U.S. and 35% of Mexicans said they would move to the U.S. if they had the opportunity and means to do so, similar shares as in 2009.

It was not a Hardware Issue, it was a Cyber Intrusion, IRS

Posted on February 12, 2016February 12, 2016 by Denise Simon

IRS Confirms It Was a Victim of an Automated Attack

The attack, which occurred in January, targeted the electronic filing PIN application form on the IRS.gov Website. Experts said there are lessons to be learned.

eWeek: The U.S. Internal Revenue Service (IRS) is gearing up for another busy tax season, and it appears that hackers are getting ready, too. On Feb. 9, the IRS confirmed that it was the victim of an automated attack in January that targeted the electronic filing PIN application form on the IRS.gov Website.According to the IRS, attackers made use of personal information, including Social Security numbers, that was stolen from other non-IRS Websites. The attackers then used that information in an attempt to generate fraudulent E-File PIN numbers on IRS.gov. With a PIN number, an attacker could have potentially been able to file a tax return or gain access to other taxpayer information.The IRS investigation has found that 464,000 unique Social Security numbers (SSNs) were used in the attack, with 101,000 being successfully able to access the E-File PIN. The IRS is emphasizing that it has halted the attack and is contacting those who are affected.”No personal taxpayer data was compromised or disclosed by IRS systems,” the agency stated. “The IRS also is taking immediate steps to notify affected taxpayers by mail that their personal information was used in an attempt to access the IRS application.”

In May 2015, the IRS reported that its Get Transcript service was attacked. Get Transcript enables users to get information about their tax account transactions. As is the case with the new attack against the E-File PIN, the Get Transcript service attack involved user information that was stolen from third-party sites. The success rate for the Get Transcript attackers, however, was higher than it was for the E-File PIN attackers, where 100,000 out of 200,000 hack attempts were successful.

Security experts contacted by eWEEK are not surprised that the IRS is once again reporting an attack against its systems. The fact that the IRS.gov site was attacked with SSNs stolen from other third-party sites is, however, somewhat ironic.”One of the most successful ways hackers steal citizens’ Social Security numbers is through fraudulent phishing emails or phone calls that appear to be from the IRS,” Darren Guccione, CEO and co-founder of Keeper Security, told eWEEK.

Hackers know the public is terrified of being identity-theft victims and exploit this fear well, often by telling someone they’ve been a victim already and asking for their Social Security number, Guccione noted.Lance James, chief scientist at Flashpoint, commented that one of the big concerns he sees with the latest IRS attack is the continued reliance on Social Security numbers. “We need to rethink what a Social Security number means these days when it comes to accessing data,” James told eWEEK. “It should not be the administrator password for a person’s life.”Andy Hayter, security evangelist at G DATA Software, also commented on the risks associated with SSN disclosure. Every bit of an individual’s personally identifiable information that is collected via a breach is one more piece of information that can, and someday will, be used against a person, he said.
“As long as information such as Social Security numbers is used as identification, we will have bad actors trying to collect as much information about individuals to do harm, either through theft or worse,” Hayter told eWEEK.Inga Goddijn, executive vice president at Risk Based Security, noted that taxpayers should be concerned that questionable security practices at organizations completely unrelated to the IRS have the potential of affecting their tax returns.

Though the IRS has stated that no personal taxpayer data was compromised or disclosed in the new attack, JP Bourget, CEO of Syncurity, noted that there is still a real risk.”While maybe the IRS can in the end prevent any bad outcomes for taxpayers, I can imagine a few scenarios where a bad guy attempts to file a tax return for a refund that then holds up a valid refund to someone who is owed a refund, and even depending on that refund,” Bourget told eWEEK. “There’s also the angle of now your account is flagged and the uncertainty of how that affects a taxpayer over time and what hidden costs may arise from that.”One potentially positive outcome that could result from the IRS attack is that lessons learned could help prevent the next attack. Goddijn said that it would be helpful if the IRS can share more detail as to how the agency detected the attack and ideas for preventing these types of enumeration attacks in the future. She added that the U.S. government has been pushing for more threat intelligence sharing and improved security practices for all organizations.”Why not take this opportunity to lead the charge and share more about the attack with the security community,” Goddijn said. “That may help stop the next, similar assault on a high-value target.”

In 2015:

USAToday: Criminals hacked into an Internal Revenue Service website and gained access to approximately 100,000 tax accounts, the agency said Tuesday. Another 100,000 attempts were made but were not successful.

The attack appears to have first begun in February, the agency said.

The hackers got in by taking information about taxpayers they’d acquired from other sources and using it to correctly answer several personal identity verification questions in the IRS’ “Get Transcript” application, the IRS said in a statement.

This allowed them to get information about tax accounts through the application. The information stolen included Social Security information, date of birth and street address.

The Get Transcript application allows users to view their tax account transactions, line-by-line tax return information or wage and income reported to the IRS for a specific tax year. It was used to securely retrieve approximately 23 million taxpayer transcripts last year, the IRS said.

The information the hackers used to get in was probably previously stolen by other hackers who then sold it on the open market, said Rob Roy, chief technology officer of HP Enterprise Security Products.

The hackers who bought it “appear to have hired an army of people to submit over 200,000 queries into the IRS site over a period of four months. Not exactly a quick and easy operation,” he said.

“The matter is under review by the Treasury Inspector General for Tax Administration as well as the IRS’ Criminal Investigation unit, and the ‘Get Transcript’ application has been shut down temporarily,” the IRS said.

The agency will provide free credit monitoring services for the approximately 100,000 taxpayers whose accounts were accessed.

The theft was discovered late last week when IRS staff noticed unusual activity on the application. Further investigation showed that attempts were made beginning in February.

The breach does not involve the main IRS computer system that handles tax filing submissions. “That system remains secure,” the IRS said.

“The IRS historically has been very security, it has to be by virtue of the data it collects. But it just goes to show that even the most secure system can be attacked,” said Larry Ponemon of the Ponemon Institute, a data security research group.

NYPD Covertly Tracked Cell Phones

Posted on February 11, 2016February 11, 2016 by Denise Simon

New York police have covertly tracked cell phones, group says

Reuters: New York City’s police have made extensive use of covert devices to track cell phones without obtaining warrants since 2008, a civil liberties group said on Thursday, revealing how frequently law enforcement in the largest U.S. city has employed the technology.

The New York Civil Liberties Union released files that showed the New York Police Department used “cell site simulators” to track nearby cell phones more than a 1,000 times over the past eight years.

The American Civil Liberties Union has identified 60 local, state and federal agencies that have adopted the devices in recent years, but the group has said there are likely far more. The extent of the devices has largely been shrouded in secrecy, as departments and private manufacturers such as Harris Corp have refused to disclose information about their use.

U.S. Representative Jason Chaffetz of Utah, a Republican, has introduced a bill to require warrants for the use of cell site simulators.

The documents released on Thursday were obtained by the NYCLU through a Freedom of Information Law request.

The NYPD does not have a written policy on using the surveillance devices and does not obtain warrants when doing so, according to the NYCLU.

Instead, the department seeks “pen register” orders, which have been used for decades to gather information on specific phone numbers. The orders are issued by judges but require a lower standard than the probable cause needed for warrants.

The NYPD’s practice is less stringent than the one adopted last year by the U.S. Department of Justice, which calls for warrants except in emergency situations.

“We still have concerns that this military equipment is being used in a civilian context,” said Mariko Hirose, an NYCLU attorney. “At the very least, they should be using warrants and with a strict privacy policy that is written.”

The NYPD did not immediately respond to a request for comment.

The devices mimic cell towers and intercept signals from nearby phones to gather information. That data can include locations of calls, numbers that are called or texted and even the content of communications, the NYCLU said.

The simulators can also sweep up information from nearby “bystander” phones.

The documents do not indicate what data police collected. The simulators were used to investigate a wide range of crimes, including murder, rape and drug trafficking.

No New York court has yet tackled the question of whether the warrantless use of such devices is constitutional, Hirose said.

She said the NYCLU could have difficulty establishing the legal standing to bring such a challenge, which would probably have to come from a criminal defendant specifically targeted by a simulator.

Yikes, there is more:

Intercept: The NYPD has used cell-site simulators, commonly known as Stingrays, more than 1,000 times since 2008, according to documents turned over to the New York Civil Liberties Union. The documents represent the first time the department has acknowledged using the devices.

The NYPD also disclosed that it does not get a warrant before using a Stingray, which sweeps up massive amounts of data. Instead, the police obtain a “pen register order” from a court, more typically used to collect call data for a specific phone. Those orders do not require the police to establish probable cause. Additionally, the NYPD has no written policy guidelines on the use of Stingrays.

Stingrays work by imitating cellphone towers. They force all nearby phones to connect to them, revealing the owners’ locations. That means they collect data on potentially hundreds of people. They are small enough to fit in a suitcase, or be mounted on a plane.

When they were originally developed in 2003, Stingrays were designed for military use. But in the past decade, they have increasingly been purchased by law enforcement agencies. According to the ACLU, Stingrays are used by at least 59 police departments in 23 states, and at least 13 federal agencies, including the DEA, FBI, and the IRS. Because most departments withhold information about Stingrays, these numbers likely underrepresent the total.

In December, The Intercept published a secret U.S. government catalogue of cellphone surveillance technology, including Stingrays and “dirt-boxes.” The advertisements boast that many of the items can spy on “up to 10,000 targets.”

Stingrays have long been a topic of concern for privacy activists. “Cell-site simulators are powerful surveillance devices that can track people, including in their homes, and collect information on innocent bystanders,” said Mariko Hirose, a senior staff attorney at the NYCLU. “If they are going to be used in communities the police should at minimum obtain a warrant and follow written policies.”

Instead, law enforcement agencies have fought to keep Stingrays secret, even dropping criminal cases to avoid disclosing anything about them. The FBI has forced local police agencies to sign Stingray-related non-disclosure agreements, claiming that criminals and terrorists who know about Stingrays could take countermeasures against them.

The increasing use of Stingrays, coupled with the lack of transparency, has alarmed civil liberties groups. “I think it’s critical to have transparency about the use of technology like Stingrays,” said Faiza Patel, an attorney with the Brennan Center for Justice. “That’s what allows courts, the public, and our elected officials to weigh in on the proper rules.”

In September, the Department of Justice issued guidelines requiring its officers to seek probable cause warrants before using a Stingray. But the guidelines only applied to federal law enforcement agencies, not to state and local police, who have fought such a change. In one ongoing court case, the state of Maryland has argued that anyone who turns on their phone consents to having his or her location tracked.

In November, Senator Ron Wyden, D-Ore., and Rep. Jason Chaffetz, R-Utah, introduced the GPS Act, a bill that would extend the Department of Justice’s guidelines to all law enforcement agencies. “Buying a smartphone shouldn’t be interpreted as giving the government a free pass to track your movements,” Wyden said.

See the government catalogue here:

Top photo: “nypd” by Nick Allen, used under CC BY 2.0/ cropped and color corrected from original.

Contact the author:

ISIS, Islamic State has a Help Desk

Posted on February 11, 2016February 11, 2016 by Denise Simon

The Islamic State in Iraq and Syria (ISIS) uses a 34-page manual to instruct its followers on how to stay invisible on the Internet.

The Arabic document was translated and released this week by analysts at the Combating Terrorism Center, an independent research group at the U.S. Military Academy at West Point. It includes warnings to avoid Instagram because it is owned by Facebook, and Dropbox because former secretary of State Condoleezza Rice sits on its board of investors. Famous government leaker Edward Snowden has also criticized Dropbox over its privacy, the document notes.

Users are also directed to use Apple’s encrypted FaceTime and iMessage features over regular unencrypted text and chat features. More here.

New ISIS ‘help desk’ to aid hiding from authorities

TheHill: The Islamic State in Iraq and Syria (ISIS) has opened up a new technical “help desk” that instructs terrorists on how to hide from Western authorities, according to researchers.

The Electronic Horizon Foundation (EHF) was launched on Jan. 30 as a joint effort of several of the top ISIS cybersecurity experts, the Middle East Media Research Institute (MEMRI) said in a new report.

While researchers have previously uncovered an ISIS “help desk” and 34-page manual that help extremists encrypt their communications, MEMRI said the EHF takes these services to an “alarming” new level.

“Jihadis have long sought technical information, which has been confined in the past to various password-protected jihadi forums,” said the MEMRI report, shared exclusively with The Hill. “However, the freedom and ease by which they can now obtain that information is alarming, especially when such information is shared over private and secure channels.”

The EHF operates on the encrypted messaging platform Telegram but also maintains a Twitter account that disseminates information and directs followers to its secure Telegram channel.

The group’s self-stated goal is clear: “Spreading security and technical awareness among the monotheists.”

According to an announcement celebrating the EHF launch, ISIS has spent a year establishing the group with the goal of “unifying the technical and security efforts, and uniting the ranks of the mujahideen’s supporters.”

It brings together several technical support entities, such as the Information Security channel on Telegram and the “Islamic State Technician,” an ISIS security specialist thought to be behind a leading password-protected technical forum.

The announcement, which the MEMRI translated, was also direct that the EHF had been formed “due to the electronic war and tight surveillance imposed by the Western intelligence apparatuses over Internet users, and their tracking and following of the mujahideen and their supporters, and targeting them based on their data and information, which they share over the Internet.”

EHF pledged to provide resources to help combat this surveillance.

“It is time to face the electronic surveillance, educate the mujahideen about the dangers of the Internet, and support them with the tools, directives and security explanations to protect their electronic security, so that they don’t commit security mistakes that can lead to their bombardment and killing,” the announcement said.

As of early this week, the EHF Telegram account had over 2,200 members.

MEMRI said EHF has not posted much yet, “but it is expected to take the lead nonetheless in content posted as time goes by.”

If the group follows in the footsteps of its creators, its content will be “defensively-oriented,” such as tutorials on mobile phone security, instead of “offensively-oriented,” such as instructions on launching cyberattacks, MEMRI said.

In the wake of the terror attacks in Paris and San Bernardino, Calif., law enforcement officials have cautioned that potential terrorists are increasingly using encryption to hide from investigators, a phenomenon they call “going dark.”

The warnings have led to some calling for legislation that would guarantee government access to encrypted data, although momentum on Capitol Hill for such a bill has cooled in recent months.

“I don’t think we’re any closer to a consensus on that than we were, I think, six months ago,” Rep. Adam Schiff (D-Calif.), the House Intelligence Committee’s top Democrat, said last week. “Or if there is a consensus, it is that a legislative solution, I think, is very unlikely.”

IS Encryption Guide by AlyssaBereznak

Subpoena: State Dept vs. Clinton Foundation

Posted on February 11, 2016February 11, 2016 by Denise Simon

How the Clinton Foundation is organized

What We Know About WJC, LLC, Bill Clinton’s Consulting Company

Financial disclosures show that the former president started a pass-through company to channel his consulting fees.

Clinton Foundation received subpoena from State Department investigators

Investigators with the State Department issued a subpoena to the Bill, Hillary and Chelsea Clinton Foundation last fall seeking documents about the charity’s projects that may have required approval from the federal government during Hillary Clinton’s term as secretary of state, according to people familiar with the subpoena and written correspondence about it.

The subpoena also asked for records related to Huma Abedin, a longtime Clinton aide who for six months in 2012 was employed simultaneously by the State Department, the foundation, Clinton’s personal office, and a private consulting firm with ties to the Clintons.

The full scope and status of the inquiry, conducted by the State Department’s inspector general, were not clear from the material correspondence reviewed by The Washington Post.

A foundation representative, who spoke on the condition of anonymity to discuss an ongoing inquiry, said the initial document request had been narrowed by investigators and that the foundation is not the focus of the probe.

A State IG spokesman declined to comment on that assessment or on the subpoena.

Representatives for Hillary Clinton’s presidential campaign and Abedin also declined comment.

[How Huma Abedin operated at the center of the Clinton universe]

There is no indication that the watchdog is looking at Clinton. But as she runs for president in part by promoting her leadership of the State Department, an inquiry involving a top aide and the relationship between her agency and her family’s charity could further complicate her campaign.

For months, Clinton has wrangled with controversy over her use of a private email server, which has sparked a separate investigation by the same State Department inspector general’s office. There is also an FBI investigation into whether her system compromised national security.

Bill Clinton used LLC as a pass through

Clinton was asked about the FBI investigation at a debate last week and said she was “100 percent confident” nothing would come of it. Last month, Clinton denied a Fox News report that the FBI had expanded its probe to include ties between the foundation and the State Department. She called that report “an unsourced, irresponsible” claim with “no basis.”

During the years Clinton served as secretary of state, the foundation was led by her husband, former president Bill Clinton. She joined its board after leaving office in February 2013 and helped run it until launching her White House bid in April.

Abedin served as deputy chief of staff at State starting in 2009. For the second half of 2012, she participated in the “special government employee” program that enabled her to work simultaneously in the State Department, the foundation, Hillary Clinton’s personal office and Teneo, a private consultancy with close ties to the Clintons.

Abedin has been a visible part of Hillary Clinton’s world since she served as an intern in the 1990s for the then-first lady while attending George Washington University. On the campaign trail, Clinton is rarely seen in public without Abedin somewhere nearby.

Republican lawmakers have alleged that foreign officials and other powerful interests with business before the U.S. government gave large donations to the Clinton Foundation to curry favor with a sitting secretary of state and a potential future president.

Both Clintons have dismissed those accusations, saying donors contributed to the $2 billion foundation to support its core missions: improving health care, education and environmental work around the world.

Sen. Bernie Sanders (Vt.), Clinton’s opponent in the Democratic primary, has largely avoided raising either issue in his campaign. Last spring, Sanders expressed concerns about the Clinton Foundation being part of a political system “dominated by money.”

Sanders has batted away questions about the email scandal, famously saying at a debate last fall that, “The American people are sick and tired of hearing about your damn emails.”

The potential consequences of the IG investigation are unclear. Unlike federal prosecutors, inspectors general have the authority to subpoena documents without seeking approval from a grand jury or a judge.

But their power is limited. They are able to obtain documents, but they cannot compel testimony. At times, IG inquiries result in criminal charges, but sometimes they lead to administrative review, civil penalties or reports that have no legal consequences.

The IG has investigated Abedin before. Last year, the watchdog concluded she was overpaid nearly $10,000 because of violations of sick leave and vacation policies, a finding that Abedin and her attorneys have contested.

Republican lawmakers, led by Senate Judiciary Committee Chairman Charles E. Grassley (R-Iowa), have alleged that Abedin’s role at the center of overlapping public and private Clinton worlds created the potential for conflicts of interest.

Examples of fees paid for speeches