Dear President Trump, Please Stop It

Posted on February 13, 2017February 13, 2017 by Denise Simon

Remember the circle jerk where the Federal government gives Planned Parenthood $500 million a year for subsidizing the organizations low cost healthcare for women? Planned Parenthood has a political action committee that has donated to members of Congress….so Federal dollars get cycled right back to member of Congress. Some like this for 2016/ House: Total to Democrats: $534,489 Total to Republicans: $7,500

(See the recipients here) Related reading: Planned Parenthood workers, PACs donated $25M to Dems since 2000

Essentially the same model is used for corporate subsidies….hold on to you oh sh*t bar for this one:

First examine the Export Import Bank shall we? Authorization to fund the ExIm Bank in 2015 was stopped by Congress and corporations freaked out. Why you ask? Well one reason dealt with an investigation from 2014: The U.S. Export-Import Bank has suspended or removed four officials in recent months amid investigations into allegations of gifts and kickbacks, as well as attempts to steer federal contracts to favored companies, several people familiar with the matter said. More here from the WSJ.

The Export Import Bank was designed to give small business a better edge in competing on national and global markets. So…how has that worked out?

Using a report published in 2015:

Using a dataset that the US Export-Import Bank recently made available to the public, one can see which foreign companies are among the top purchasers of American exports financed by the bank’s subsidy programs. The following table shows the top 10 foreign buyers, based on the total amount of financing authorized from fiscal years 2007 through 2013.

**

The number one buyer was the Mexican state-owned petroleum company, Pemex, which has a market capitalization of $416 billion but has somehow needed more than $7 billion in US-taxpayer-backed financing to facilitate deals with American exporters in recent years. Such assistance from the federal government to Pemex, along with other oil companies on the list, raises eyebrows, particularly considering that the current administration, which supports the reauthorization of the Ex-Im Bank, hasn’t exactly been pro-fossil fuels.

Other top buyers include foreign airlines that purchased aircraft from Boeing, which isn’t surprising given that Boeing is, by an overwhelming margin, the chief beneficiary of export assistance from the bank. Emirate Airlines, which has benefitted from $3.4 billion in US-backed financing, proudly boasts on its website that it has “recorded an annual profit in every year since its third in operation.”

The table further undermines the claim made by the Ex-Im Bank’s defenders that it provides critical support to US small businesses. Instead, it provides evidence that the biggest beneficiaries of the Ex-Im Bank’s largesse are large multinational corporations, here and overseas.

*** Okay, that is just the Export Import Bank…let us move on to other federal subsidies some of which during the campaign trail Senator Ted Cruz advocated for termination. He was right. How so?

From 2015: *(See any small companies listed below?) Read more here. Note the numbers below are BILLIONS.

Now the private and free enterprise system and corporations should have success. But are these companies standing on their own or just part of another circle jerk for political favors? Hah….rhetorical question until you see who is participating. How about Google….the most profitable and successful tech company out there. Well yes but… Besides Intel, Google is the top tech company that receives government subsidies, picking up more than $630 million from states like Oregon, North Carolina and a few others. What does a multi-billion dollar company that controls the majority of the world’s Internet need with more than $630 million in government subsidies, you ask? Well, you know, for things like property taxes and training reimbursements. What, do you all think that money just grows on trees?! Also, don’t even think about googling “Google government subsidies” because THEY WILL KNOW ABOUT IT. How about WalMart?

Yup, Walmart, the retail giant also benefits greatly from more than 260 different grants from multiple states totaling nearly $150 million. With that kind of money, it’s no wonder they can manage to sell anything and everything in their stores.

Seems Goldman Sachs had the red carpet to the cash the check here door too.

Remember that company that essentially caused the whole recession a few years ago and then managed to get billions in bailout money from the federal government because the U.S. Treasury and Federal Reserve were both stacked with the company’s former CEOs and high-level employees? Well, just so you know, they also do pretty well in the subsidies department. Goldman Sachs has raked in over $660 million, mostly from their home state of New York, but with some help from New Jersey, Utah and Michigan as well. Hooray! More here from PolicyMic.

Are we sure all these corporations including Disney or Intel are told to get these subsidies, they must hired American employees? Nope…hardly…but shouldn’t that be a stipulation? Disney has apparently survived a scandal by hiring foreign workers replacing Americans. It was just reported last year that Intel fired 12,000 employees only to be replaced by foreigners. Domestic corporations are getting big money from various federal programs and then abuse the H1B visa system.

Convoluted right? Where is the outrage? Hey President Trump….stop it all please…Please?

Operation Blockbuster: Lazarus Group Hacks Again

Posted on February 13, 2017February 13, 2017 by Denise Simon

Why should you care? There was a long investigation in separate yet concentrated efforts by both government and private/independent cyber corporations as it related to the hack of Sony. Enter the Lazarus Group, an applied name to hackers that have hit industries such as government, military, financial and entertainment. Few countries are really exempt, as their signature malware has also been found in Japan, India and China.

Image result for lazarus group cyber

Lazarus Group has been active since 2009 and to date cannot be attributed to any single actor or country.

For the comprehensive report, go here. Operation Blockbuster: Image result for operation blockbuster cyber

Recent malware attacks on Polish banks tied to wider hacking campaign

Hackers targeted more than 100 organizations in more than 30 countries

ComputerWorld: Malware attacks that recently put the Polish banking sector on alert were part of a larger campaign that targeted financial organizations from more than 30 countries.

Researchers from Symantec and BAE Systems linked the malware used in the recently discovered Polish attack to similar attacks that have taken place since October in other countries. There are also similarities to tools previously used by a group of attackers known in the security industry as Lazarus.

The hackers compromised websites that were of interest to their ultimate targets, a technique known as watering-hole attacks. They then injected code into the websites that redirected visitors to a custom exploit kit.

The exploit kit contained exploits for known vulnerabilities in Silverlight and Flash Player; the exploits only activated for visitors who had Internet Protocol addresses from specific ranges.

“These IP addresses belong to 104 different organizations located in 31 different countries,” researchers from Symantec said in a blog post Sunday. “The vast majority of these organizations are banks, with a small number of telecoms and internet firms also on the list.”

In the case of the targeted Polish banks, it’s suspected that the malicious code was hosted on the website of the Polish Financial Supervision Authority, the government watchdog for the banking sector. The BAE Systems researchers found evidence that similar code pointing to the custom exploit kit was present on the website of the National Banking and Stock Commission of Mexico in November. This is the Mexican equivalent to the Polish Financial Supervision Authority.

The same code was also found on the website of the Banco de la República Oriental del Uruguay, the largest state-owned bank in that South American country, according to BAE Systems.

Included in the list of targeted IP addresses were those of 19 organizations from Poland, 15 from the U.S., nine from Mexico, seven from the U.K., and six from Chile.

The payload of the exploits was a previously unknown malware downloader that Symantec now calls Downloader.Ratankba. Its purpose is to download another malicious program that can gather information from the compromised system. This second tool has code similarities to malware used in the past by the Lazarus group.

Lazarus has been operating since 2009, and has largely focused on targets from the U.S. and South Korea in the past, the Symantec researchers said. The group is also suspected of being involved in the theft of $81 million from the central bank of Bangladesh last year. In that attack, hackers used malware to manipulate the computers used by the bank to operate money transfers over the SWIFT network.

“The technical/forensic evidence to link the Lazarus group actors … to the watering-hole activity is unclear,” the BAE Systems researchers said in a blog post Sunday. “However, the choice of bank supervisor and state-bank websites would be apt, given their previous targeting of central banks for heists — even when it serves little operational benefit for infiltrating the wider banking sector.”

The Other NSA Thief Indicted, Worse than Snowden?

Posted on February 13, 2017February 13, 2017 by Denise Simon

What is going on at the NSA? Or is it really the NSA contractor, Booz, Allen and Hamilton? Either way…this is beyond dangerous.

Bring in Harold Martin….. Image result for harold martin nsa NBC

Read the full indictment here.

According to an indictment released Wednesday, the information stolen by Harold Martin, a former NSA contractor who was arrested in August of last year, may be far more damaging to the U.S. intelligence community than anything taken by Edward Snowden.

On October 5, the New York Times broke the story that the FBI had arrested an employee of the intelligence community over suspicions the worker had stolen highly classified computer code.

From that report:

“The contractor was identified as Harold T. Martin III of Glen Burnie, Md., according to a criminal complaint filed in late August and unsealed Wednesday. Mr. Martin, who at the time of his arrest was working as a contractor for the Defense Department after leaving the NSA, was charged with theft of government property and the unauthorized removal or retention of classified documents.”

According to the Times, a neighbor saw “two dozen FBI agents wearing military-style uniforms and armed with long guns” storm Martin’s home and later escort the man out in handcuffs.

At the time, there was speculation that Martin could be connected to stolen NSA code that found its way into the hands of a group called the Shadow Brokers — for a period, Martin worked for the elite NSA unit from which the data was taken — but even now, authorities can’t prove he actually passed on any information.

But the mere fact that he possessed such highly sensitive material is enough to put Martin away for the rest of his life, as the recently released indictment indicates.

“For more than two decades,” Business Insider wrote on Thursday, “Martin allegedly made off with highly-classified documents that were found in his home and car that included discussions of the US military’s capabilities and gaps in cyberspace, specific targets, and ‘extremely sensitive’ operations against terror groups, according to an indictment released Wednesday.”

The indictment gives the public a much clearer look at the type of data Martin allegedly stole. And next to Edward Snowden, whose security clearance limited the documents he took to mostly training materials, it appears Harold Martin’s reach went far further into the national intelligence community.

Martin is charged with 20 counts of having unauthorized possession of classified material. The government alleges that over this long intelligence career, the 51-year-old took material from the NSA, the National Reconnaissance Office, U.S. Cyber Command, and even the CIA.

Some of the items allegedly taken, according to text from the indictment, include:

A 2008 CIA document containing information regarding foreign intelligence collection sources and methods, and relating to a foreign intelligence collection target.

A USCYBERCOM document, dated August 17, 2016, discussing capabilities and gaps in capabilities of the US military and details of specific operations.

A description of the technical architecture of an NSA communications system.

An outline of a classified exercise involving real-world NSA and US military resources to demonstrate existing cyber intelligence and operational capabilities.

Martin’s first court appearance is set for February 14. If found guilty, he faces up to 200 years in prison. More here.

***

Meanwhile, Putin is allegedly considering returning Edward Snowden to the United States as a goodwill gesture. If so, it is a double game as Putin would never do anything out of kindness without something attached. If Snowden does stand trial for treason/espionage or theft, the United States would then have to offer up classified material and reveal sources and methods which is likely what Russia wants. The Kremlin extended the visa for Snowden until 2020.

*** Image result for edward snowden

In part from NBC: Snowden’s ACLU lawyer, Ben Wizner, told NBC News they are unaware of any plans that would send him back to the United States.

“Team Snowden has received no such signals and has no new reason for concern,” Wizner said.

Snowden responded to NBC’s report on Twitter and said it shows that he did not work with the Russian government.

“Finally: irrefutable evidence that I never cooperated with Russian intel,” Snowden said. “No country trades away spies, as the rest would fear they’re next.”

Snowden’s Russian lawyer, Anatoly Kucherena, reacted to the report with dismay.

“There are no reasons to extradite Edward Snowden to the U.S.,” Kucherena said, according to TASS, the state-owned news agency. “This is some kind of speculation coming from so-called US special service sources. I think this topic was and remains on the political plane in the U.S., but it’s American special services that are puppeteering this story with sporadic information plants.”

“There is not the slightest reason to raise or discuss this topic in Russia,” Kucherena said.

Russia, he said, does not sell people. “The Snowden issue cannot be a bargaining chip on any level, neither political nor economic,” he said, according to the news agency.

Former deputy national security adviser Juan Zarate urged the Trump administration to be cautious in accepting any Snowden offer from Russian President Vladimir Putin.

“For Russia, this would be a win-win. They’ve already extracted what they needed from Edward Snowden in terms of information and they’ve certainly used him to beat the United States over the head in terms of its surveillance and cyber activity,” Zarate said.

Does DHS Secretary Kelly Know RAPS?

Posted on February 10, 2017February 10, 2017 by Denise Simon

My friend Tom Del Beccaro explains in his summary at Forbes how the Federal government maintains primacy over the states for immigration law and item 8 U.S. Code Section 1182, which the liberal court chose never to previously challenge.

In spite of the 9th Circuit 3 judge panel ruling maintaining the stay on the Trump Executive Order for the travel restraining order, there is much work to do administratively as this continues to be challenged.

The data is private and protected:

Once the information is entered into the system, RAPS generates an appointment notice for the collection of fingerprints used to complete criminal and background checks and to create Employment Authorization Documents (EADs), as appropriate. The applicant will appear at a USCIS service center to provide fingerprints and confirm application information.

RAPS then automatically initiates several background security check processes: Federal Bureau of Investigation (FBI) Name Check, United States Visitor and Immigrant Status Indicator Technology (US-VISIT) and DHS’ Automated Biometric Identification System (IDENT), Customs and Border Protection (CBP) TECS, FBI Fingerprint, and the ENFORCE Alien Removal Module (EARM) (for a full discussion of the background check process, see Section 5.1). RAPS also stores the results of security checks.

Image result for USCIS Asylum Office

When a new application is entered into RAPS, it is forwarded to a USCIS Asylum Office for interview and adjudication. Asylum Offices use RAPS to schedule an asylum interview to evaluate the claim of asylum status and to conduct various aspects of case maintenance such as address changes, updates of information pertaining to dependent claimants, to record preliminary and final decisions, and to generate decision documents. An individual who files for asylum may include in his or her application any spouse or child who is within the United States and appears for the asylum interview. This is because a grant received by the principal asylum applicant is conveyed to the spouse and children included in the family group if the spouse/child is in the U.S. and not otherwise barred from a grant of asylum.

RAPS is a comprehensive case management tool that enables USCIS to handle and process applications for asylum pursuant to Section 208 of the Immigration and Naturalization Act (INA) and applications for suspension of deportation or special rule cancellation of removal pursuant to NACARA § 203. DHS offices worldwide can access RAPS as a resource of current and historic immigration status information on more than one million applicants. DHS officials can use RAPS to verify the status of asylum applicants, asylees, and their dependents to assist with the verification of an individual’s immigration history in the course of a review of visa petitions and other benefit applications as well.

RAPS Typical Transaction

A typical transaction begins when an individual initiates the process to apply for asylum by completing and filing Form I-589, Application for Asylum and for Withholding of Removal, with a USCIS Service Center, or in certain circumstances directly with an asylum office. Service Center personnel receive the application in person or via mail and manually enter, most, but not all, of the information from a new application into RAPS.

As set forth in Section 451(b) of the Homeland Security Act of 2002, Public Law 107-296, Congress charged USCIS with the administration of the asylum program, which provides protection to qualified individuals in the United States who have suffered past persecution or have a well-founded fear of future persecution in their country of origin as outlined under INA § 208 and 8 CFR § 208. USCIS is also responsible for the adjudication of the benefit program established by Section 203 of the Nicaraguan Adjustment and Central American Relief Act (NACARA § 203) (discussed in more detail in Section B below), in accordance with 8 CFR § 240.60 and the maintenance and administration of the credible fear and reasonable fear screening processes, in accordance with 8 CFR §§ 208.30 and 208.31. USCIS developed RAPS and APSS in order to carry out its obligations in administering these benefit programs.

Functions

RAPS and APSS track case status and facilitate the scheduling of appointments and interviews and the issuance of notices (including receipt notices, appointment notices, and decision letters) at several stages of the adjudication process. USCIS Asylum Offices use RAPS and APSS to:

record decisions and to generate decision documents such as approval, dismissal, or rescission of an asylum or NACARA § 203 application,
denial of an asylum application,
administrative closure of an asylum application, or
referral of an asylum or NACARA § 203 application to Executive Office of Immigration Review (EOIR).

The systems also initiate, receive, and record responses for national security and background check screening and prevent the approval of any benefit prior to the review and completion of all security checks. Finally, the systems provide fully developed and flexible means for analyzing and managing program workflows and provide the Asylum Program with statistical reports to assist with oversight of production and processing goals.

Read more from the two DHS documents here and here.

Image result for DHS Secretary

***

GAO Raps DHS for Failure to Get Security Data from Visa Waiver Countries

One of the requirements for allowing visa-free entry of tourists from countries in the Visa Waiver Program (VWP) is that those governments share with us information on nationals with terrorism links and/or criminal histories. According to a report of the Government Accountability Office (GAO) issued in May 2016, the Department of Homeland Security (DHS) has obtained those agreements with most of the countries, but more than a third of the agreements have not been implemented, and no data have been received from them.

In addition, Congress has required reports from DHS on implementation of the VWP with each of the participating countries, but GAO found that DHS has failed to provide many of those reports when due.

The recommendation of agency (GAO-16-498) is that, “DHS should (1) specify time frames for working with VWP countries on the requirement to implement information-sharing agreements and (2) take steps to improve its timeliness in reporting to Congress on whether VWP countries should continue in the program.”

FAIR has consistently pointed to the VWP as a national security threat and called for its termination. This GAO report underscores the security flaw and finds that it is exacerbated by cavalier implementation by DHS

Putin Financing Marine Le Pen’s Presidential Run

Posted on February 10, 2017February 10, 2017 by Denise Simon

Marine Le Pen’s links to Russia under US scrutiny

Ms Le Pen’s Front National party has made no secret of the fact that it has taken foreign loans to help bankroll its presidential campaigns because, it has argued, French banks refuse to stump up the funds.

But in light of allegations of Russian interference in the US election of Donald Trump, scrutiny has now turned to Ms Le Pen, who is polled to reach the final round of France’s presidential elections in May.

In an extract of a letter dated November 28 to James Clapper, who heads up 17 American intelligence organisations and agencies, he notes that the Front National “publicly acknowledged that it had received a $9.8 million loan from a Russian bank with links to the Kremlin, allegedly brokered by a sanctioned Russian Duma deputy, according to French press reporting.”

The bank in question was First Czech Russian Bank (FCRB) in Moscow. Mr Turner goes on: “In February 2016, the FN asked Russia for a $30 million load to fund the FN leader Marine Le Pen’s 2017 campaign. More here from the Telegraph.

FITSANAKIS: France’s primary intelligence agency warned the country’s government this week that Russia has launched a secret operation to try to influence the outcome of the upcoming French presidential election in favor of the far right. According to the Paris-based weekly newspaper Le Canard Enchaîné, France’s Directorate-General for External Security (DGSE) has notified the country’s leadership that a covert operation by the Kremlin is already underway, and is expected to intensify in the run-up to April’s election. The spy agency allegedly believes that Russian efforts aim to promote Marine Le Pen, leader of the ultra-right National Front. Le Pen wants to curb immigration to France and remove the country from the European Union.

In an article published on Wednesday, Le Canard Enchaîné said the DGSE’s warning has alarmed the Élysée Palace. The paper also said that French President François Hollande, who chairs the country’s defense council, has decided to devote the entire agenda of the council’s next meeting to the subject of Russia’s alleged interference in the election. Anonymous sources told the paper that, according to a classified DGSE report, Russian spy agencies are using automated systems designed to “fill the Internet with tens of millions” of articles, images and memes that support the National Front candidate. Additionally, several news media that are controlled by Moscow will try to discredit Le Pen’s rivals for the presidency. At the same time, websites such as WikiLeaks —which some American commentators accuse of working with Moscow— will publish leaked information designed to damage Le Pen’s competitors.

The Le Canard Enchaîné allegations sound very similar to accusations leveled against the Kremlin by American intelligence agencies and by members of the United States Democratic Party. However, these allegations have not been supported by concrete evidence, and Russia denies that it had any involvement in last November’s presidential election in the US, which was won by Donald Trump.

*** Meanwhile…. As top U.S. commanders are sounding the alarm of the forgotten war in Afghanistan due to the terror factions operating there including the even more deadly Taliban, Russia is legitimizing them to counter NATO. Are the Western leaders nurturing relationships with the Kremlin good with that as coalition countries have troops in Afghanistan?

Image result for russia taliban

In part from The Hill:

“The Russian involvement this year has become more difficult,” Gen. John Nicholson told the Senate Armed Services Committee. “First, they have begun to publicly legitimize the Taliban. This narrative that they promote is that the Taliban are fighting Islamic State and the Afghan government is not fighting Islamic State and that, therefore, there could be spillover of this group into the region. This is a false narrative.”

“I believe its intent is to undermine the United States and NATO,” he later added.

Nicholson was testifying about the current situation in Afghanistan, which he called a stalemate that he needs a few thousand more troops to break.

Among the challenges in the country are the actions of external actors such as Pakistan, Iran and Russia, Nicholson said.

He said Russia’s meddling in Afghanistan started in 2016 and continues to increase.

In addition to spreading a narrative that the Taliban is fighting the Afghan branch of the Islamic State in Iraq and Syria (ISIS), Russia has also organized a series of meetings to discuss the future of Afghanistan without inviting the Afghan government, Nicholson said. More here.