ThinkProgress Logo

Stories tagged with “hacking

Security

How the Upcoming Iranian Election Is Already Being Fought Online

While tensions in Syria dominate headlines about the Middle East, a quiet digital battle is brewing in Iran as the June 14 presidential election approaches.

Yesterday, the Basij force of the Iranian Revolutionary Guard claimed its websites were being targeted in a wave of cyberattacks:

“Due to the impending vote, elements of the global arrogance have launched a new round of cyberattacks against Basij websites, particularly Basij.ir.”

According to local Iranian news sources, the Basij.ir site was down for part of the day on Wednesday (May 1) and a spokesman for the group claimed its sites faced many attacks in the past three years. However, the Basij is more well known for being the aggressors in cyberattacks. In 2011 it launched a cyberattack against the “enemies” of Iran and has actively recruited hackers to boost its ranks.

Iran had over 8 million internet users in 2009 and online communications including social media and email was key to galvanizing and organizing opposition in the last Iranian Presidential election and the protests that followed. Since then, the regime has cracked down harder than ever on online communications with aggressive surveillance and filtering in what President Obama decried as an “Electronic Curtain” in 2012. Internet access was disrupted before the 2012 parliamentary elections and at other times Iranian authorities have blocked specific web services, such as Google.

While the regime cracked down on tools like virtual private networks (VPNs) many Iranians use to avoid government internet controls in March, hacktivists outside the country are helping provide alternatives to further keep online communications channels open. One group, ASL19 — an interdisciplinary lab named after Article 19 of the Universal Declaration of Human Rights that upholds the right to freedom of expression and access to information — specifically aims to “empower Iranians to communicate freely and engage in dialogue with minimal threat to personal safety.” The group reportedly helps a million Iranians a day avoid network censorship by distributing open source evasion program Psiphon.

But the regime has even been working on an internal intranet, often dubbed the “halalternet” that would be completely closed off from the larger global internet system, and is reportedly very close to being deployed on a broad scale. Chinese technology company Huawei reportedly provided the Iranian government the technological infrastructure for the intranet, and according to Reuters, attempted to sell Iranian internet providers “lawful interception” surveillance tech that they later “acquired.”

Security

Everything You Need To Know About The Cybersecurity Bill Privacy Advocates Are Warning You About


The House started considering the controversial Cyber Intelligence Sharing and Protection Act of 2013 (CISPA) on Wednesday and is expected to vote today — just two days since the White House threatened to veto the bill after it passed out of the House Intelligence Committee by an 18-2 vote in a closed session last week. Now a passionate policy debate is taking place about the importance of protecting civil liberties while solving a very real problem: How to allow government to provide threat intelligence information to victims of cyber attacks.

CISPA was reintroduced in February to immediate backlash from civil liberties groups, with the petition site cispaisback.org warning “the bill that would end our online privacy — is back in Congress despite public outrage and warnings from experts.” Only Reps. Jan Schakowsky (D-IL) and Adam Schiff (D-CA) voted against the proposal in committee citing the same privacy concerns and issues related to maintaining civilian control over private sector data that led the White House kill a similar proposal after it passed the House in 2012 with a veto threat much like the one currently employed.

By most assessments, privacy protections and regulatory definitions in CISPA have some gaping holes — even many security experts agree. And given the track record of government transparency surrounding surveillance tech, privacy and civil liberty advocates are understandably suspicious. The relationship between the civil liberties community, government, and telecommunications companies remains tainted by the Bush-era National Security Agency warrantless wiretapping program which led to legislation giving retroactive immunity to companies that cooperated. Clapper v. Amnesty, a case questioning the constitutionality of the wiretaps, was dismissed earlier this year due to lack of proper standing — leaving the question of their legality unresolved. So when faced with a broadly written law that could involve the NSA, it was no surprise that progressive and libertarian groups alike came out in opposition to CISPA after it was reintroduced this legislative cycle. And it looks like their concerns have have not been mitigated.

Read more

Security

U.S. Considers Stronger Action Over Chinese Cyber-Espionage After Major Newspapers Breached

Wen Jiabao

The Associated Press reports the U.S. is weighing a tougher response to Chinese cyber-espionage following the revelation this week that both the New York Times and the Wall Street Journal were hacked — allegedly by hackers backed by the Chinese government:

“Two former U.S. officials said the administration is preparing a new National Intelligence Estimate that, when complete, is expected to detail the cyberthreat, particularly from China, as a growing economic problem. One official said it also will cite more directly a role by the Chinese government in such espionage.

The official said the NIE, which reflects the views of the nation’s various intelligence agencies, will underscore the administration’s concerns about the threat, and will put greater weight on plans for more pointed diplomatic and trade measures against the Chinese government. The two former officials spoke on condition of anonymity because they were not authorized to discuss the classified report.”

A New York Times story on Wednesday revealed a four month assault against the company starting after a Times investigation into the billions accumulated by Chinese Prime Minister Wen Jiabao’s family during his tenure. The Times systems were compromised, with hackers obtaining all Times employee passwords and access to 53 employee personal computers. One Times journalist, John Schwartz, noted that story explained a lot of recent security measures, including random password resets.

The hackers typically worked regular Beijing hours, according to Mandiant, the security company hired by the Times to investigate, and while chief security officer Richard Bejtlich cautions “If you look at each attack in isolation, you can’t say, ‘This is the Chinese military,’” the Times analysis identifies the Chinese government as the likely culprit.

The Wall Street Journal announced it was the victim of a similar series of attacks Thursday, noting that the hackers appeared interested in sources and information, not financial details. Chinese Embassy spokesman Geng Shuang responded to the allegations made in both stories. “It is irresponsible to make such an allegation without solid proof and evidence,” he said. “The Chinese government prohibits cyberattacks and has done what it can to combat such activities in accordance with Chinese laws.”

Read more

LGBT

Anonymous Hacks Ugandan Government In Retaliation For Anti-LGBT Policies

This image was posted as part of Anonymous' hack.

The hacking group Anonymous hacked two websites of the Ugandan government today, objecting to its anti-gay policies, including continued consideration of a “Kill The Gays” bill that would elevate the punishment for homosexuality to the death penalty. Attacking the website of the prime minister and Justice Law and Order Sector, the hackers issued the following statement about their motivations:

Today’s hack and deface of the Ugandan Prime Minister’s site was the latest in a long list of actions against the government and infrastructure of Uganda for crimes against LGBT people. [...]

We will not stand by while LGBT Ugandans are victimized, abused and murdered by a ruthless and corrupt government. #TheEliteSociety and #Anonymous will continue to target Ugandan government sites and communications until the government of Uganda treats all people including LGBT equally and with respect, dignity and immediately ends the arrest and harassment of LGBT.[...]

The government of Uganda will not stop us or LGBT people from standing up to their hatred and fighting against their abuses. To: Uganda → Equal treatment for ALL people, or you can expect us again.

Another message appeared on the Office of the Prime Minister, including an image from Uganda’s recent celebration of Pride:

You have been warned, repeatedly to expect us.

Your violations of the rights of LGBT people have disgusted us. ALL people have the right to live in dignity free from the repression of someone else’s political and religious beliefs. You should be PROUD of your LGBT citizens, because they clearly have more balls than you will ever have.

Real Ugandan Pride is demonstrated in standing up to oppression despite fearing the abuse, torture and murder inflicted on LGBT at the hands of the corrupt government.

Climate Progress

The Real Scandal: The Endless Effort to Smear Climate Scientists

This year has already witnessed multiple events that break climate records: the drought in East Africa, the worst drought in Texas’ recorded history, and record breaking storms and floods in the US south. Those events, anticipated by climatologists decades ago, should remind us that those who persecute and harass scientists, or mendaciously misrepresent their actions and findings, have no sense of decency.

by Stephan Lewandowsky, in a Conversation cross-post

Emails from the University of East Anglia’s Climatic Research Unit have once again been hacked and released on the internet. The timing is similar to the “climategate” scandal of 2009, with emails published just before an important UN climate conference. Does this mean the science is in doubt? Quite the opposite, says Stephan Lewandowsky.

An ambulance pulls up behind you. You know it’s an ambulance because you can read AMBULANCE in your rear view mirror. But you can also read it when you look at the vehicle directly; because the human visual system has the ability to quickly correct complete inversions or left-right reversals of letters. In fact, a complete inversion is easier to read than letters that are rotated only partially.

This human ability to process complete inversions more quickly than just partial distortions, alas, lends itself to exploitation by ruthless propagandists who seek to create a chimerical world in which up is down, left is right, and good is smeared as evil.

Nowhere is this more apparent than in the netherworld of attacks on climate scientists.

CLICK HERE TO READ MORE OR COMMENT

Read more

Alyssa

Infrastructure And The Feminist Blogosphere

I’ve been particularly struck in the past couple of days by two great pieces, one by S.E. Smith on Tiger Beatdown and one by Courtney Martin in the Nation, about the challenges of doing work in the feminist blogosphere. It’s not so much the testaments to the truly evil things people write to and about women on the Internet, though I agree with S.E. that it cannot be reaffirmed enough: if you’re not the person who is being threatened, the extent of the awfulness can take time to sink in. But both pieces brought up different aspects of a similar problem: how costly infrastructure is, and how difficult it can be to maintain.

S.E. writes:

This is something else people don’t talk about, very often; the fact of the matter is that if you run a feminist or social justice site, you will be hacked. Probably on multiple occasions, especially if you start to grow a large audience. Some of these hackings are just your usual cases of vandalism, people testing servers to see if they can do it, not with any specific malice directed at you. Others are more deliberate, more calculated, and they come with taunting and abuse.

Many feminist sites stay on services like Blogspot because of the higher security they may offer; people who host their own sites do so in awareness that if they aren’t very knowledgeable about technology, they need someone who is for when they get hacked, and it’s not if, but when. Readers often don’t notice because it flashes by, or it causes problems with the backend, the site management, not the front end. Sometimes they do, when hackers inject malicious code that changes the appearance of the front page, or attempts to load malware on the computers of visitors, or just takes the site down altogether, sometimes with a message making it clear that it’s personal.

And Courtney explains the cost, and what it means for expansion:

Like Feministing, Racialicious, a destination for online readers interested in racial justice, spends its revenue—which comes from intermittent fundraising drives and limited ads—on tech and hosting fees and other basic maintenance. “Strains have been starting to show and most of them are financial in nature,” explains editor Latoya Peterson. “Simply put, a good blog takes a lot of time. It’s really easy to spend so much time on Racialicious and then realize you haven’t pulled in any paid work for that week, so rent is going to be rough next month. A lot of people get so burned out in the process of producing, creating and engaging, that the emotional tolls are super high.” Despite running a popular and well-respected site that draws about a quarter of a million readers per month, Peterson loses money every year as she doesn’t get paid and is, in her words, “on the hook” for the expenses…

Currently, most online feminist organizations are structured as nonprofits—obliging them to fundraise from private donors and foundations that still generally don’t understand the ways in which the internet are being used to make social change. Emily May, founder and director of Hollaback, which is building an international movement against street harassment using mobile technology, online advocacy and on-the-ground organizing, says, “We’ve had to hustle really hard for every dollar, in part because most foundations just don’t have a portfolio that we can fit into.” Their budget last year was $81,256 cash and $114,113 in in-kind services, according to May, and most of it came from unusual sources, like the Instructional Telecommunications Foundation and an older male donor who admitted to “hating the internet,” but loved the idea of women in solidarity, fighting back against violence in public spaces….

Tiger Beatdown’s Sady Doyle solicited donations from readers when she was in danger of losing her apartment. As Doyle has made a name for herself with smart, outspoken feminist analysis, the “real pay,” as she puts it, has come from freelance writing and speaking opportunities. Today, she pays contributors to Tiger Beatdown a modest stipend out of her own pocket, but recognizes the need for more systemic support: “If specifically feminist media is going to be marginalized by media as a whole (and it really has been), we have an obligation as a community to do what we can to ensure that there are spaces where it is provided, and that the role of the public intellectual is financially supported outside of the academy.”

I have to admit, I’m thankful every day that I work at an institution that’s big enough to hire a ninja-like webtech team that makes sure we’re up and running smoothly (almost) every day, though of course code pushes do wonky things occasionally. But not every blog is going to want to become part of a larger institutional structure, and not every blog can. And not every blog and not every blogger can wait for foundations to make cultural changes and recognize the importance of Internet publishing. I wonder if it might make sense to try to jump-start an independent fund specifically to provide infrastructure support to the progressive, and specifically feminist blogosphere to handle some server costs and to provide free or low-cost hacking response and tech support (and open-source resources for beginners on both topics), and freeing up folks to raise money they can spend paying contributors and expanding the range of their content. I’d kick in a recurring contribution for something like that. And given the success of something like Womanthology’s fundraising campaign, I think and hope others would, too.

Alyssa

‘Neuromancer’ Book Club Part I: Digital Tourism, And Present As Future

This post contains spoilers through the first two sections of Neuromancer. For next week, we’ll read section three.

When Conan O’Brien spoke at Harvard’s commencement in 2000, he joked about a number of predictions he’d made in a (presumably fake) high school graduation speech 15 years earlier:

I would like to make several predictions about what the future will hold: “I believe that one day a simple Governor from a small Southern state will rise to the highest office in the land. He will lack political skill, but will lead on the sheer strength of his moral authority. I believe that Justice will prevail and, one day, the Berlin Wall will crumble, uniting East and West Berlin forever under Communist rule. I believe that one day, a high speed network of interconnected computers will spring up world-wide, so enriching people that they will lose their interest in idle chit chat and pornography.

I start our discussion of William Gibson’s Neuromancer because it’s impossible to read this novel, published the year I was born, without thinking about what he thought the internet might look like and what it actually does—for most of us, anyway. I’m intrigued by the novel’s description of the internet as like”

Cyberspace. A consensual hallucination experienced daily by billions of legitimate operators, in every nation, by children being taught mathematical concepts . . . A graphic representation of data abstracted from the banks of every computer in the human system. Unthinkable complexity. Lines of light ranged in the nonspace of the mind, clusters and constellations of data. Like city lights, receding. . . .

I think for some people, that’s true. But I think for most folks, the internet just makes their world a little bigger instead of a lot larger, it makes their world easier to handle rather than turning it surreal. On the other hand, most of us aren’t actually innovators, we’re not plugged in actively testing the limits of what our enabling technologies can do and what societal rules suggest we ought to want to do. Our personal geography is not like Ninsei, where, as Case tells us, “burgeoning technologies require outlaw zones, that Night City wasn’t there for its inhabitants, but as a deliberately unsupervised playground for technology itself.” Reading a novel’s a form of tourism.
Read more

Politics

Did A Top GOP Staffer For Sen. Grassley Cover Up Evidence Of News Corp Hacking In The U.S.?

A News Corp. whistleblower allegedly gave sensitive documents to Grassley's Senate Finance investigator Nick Podsiadly in 2006. Above, Podisadly addresses a conference.

A top investigator for the Senate Finance Committee, working under Sen. Chuck Grassley (R-IA), may have had smoking gun evidence of News Corp’s hacking activity. While News Corp’s British subsidiaries have received the most media attention for systematically hacking the cell phone and personal records of private citizens, the public still has heard little of allegations relating to similar conduct perpetrated by News Corp against its American competitors. ThinkProgress has learned that not only did a sensitive tip come to Grassley’s office about News Corp’s cyber attacks against other American companies, but authorities may have failed to look into the matter partially because a staffer named Nick Podsiadly allegedly never followed through on his promise to the whistleblower.

In December 2006, Robert Emmel, an account executive in News Corp’s profitable marketing division called News America Marketing, mailed Grassley’s office a 58-page document detailing News Corp’s unfair business practices. News America Marketing had won incredibly lucrative contracts away from a New Jersey-based firm called Floorgraphics not too long after Floorgraphics caught someone with a News Corp I.P. address illegally accessing password-protected information on the company’s computer system. As critics have pointed out, the alleged hacking attempts by News America Marketing seem to mirror information-stealing tactics used by News Corp’s British newspapers, including the now-defunct News of the World tabloid.

In 2006, Grassley was chairman of the Senate Finance Committee, and Emmel had gone to the committee looking for help. According to court filings, Grassley investigative staffer Nick Podsiadly had spoken with Emmel and told him that the committee would consider its own inquiry into the matter or he would refer the documents to the Justice Department. Podsiadly was Emmel’s best hope. After he submitted the sensitive information about his employer to the Senate Finance Committee, Emmel signed a non-disclosure agreement with News Corp, and was dismissed from the company the following month. News Corp unleashed a slew of lawyers against Emmel, which eventually forced the man into bankruptcy. As the New York Times has reported, News Corp more or less extinguished allegations of corporate espionage with $655 million in various settlements and buy-outs to competitors. (In-store marketing companies Valassis and Insignia claimed that News Corp had used similar tactics against them.)

Podsiadly, as it turned out, may have never opened an inquiry or passed along Emmel’s tip to the Department of Justice. A spokeswoman for Grassley explained to the Guardian that ongoing litigation prevented the committee from action:

A spokeswoman for the finance committee said nothing would be done with any documents sent by Emmel until the litigation over them had ended. Emmel today remains under a court-imposed injunction that forbids him from disclosing anything from these documents. “I cannot comment,” he said.

Phil Hilder, Emmel’s attorney, is not buying the committee’s excuse for not investigating the matter. “What litigation? I’m not sure at the time there was any litigation that they were referring to.” Hilder explained that to his knowledge the tip was never referred to the Department of Justice either. “I have no idea what if anything Mr. Podsiadly did with the information,” said Hilder, a former federal prosecutor.

Perhaps Grassley’s spokeswoman was hoping that the Guardian, a London-based paper, would be unaware of standard congressional procedures. Ongoing litigation, or even the threat of litigation, never prohibits a congressional committee from opening an investigation.

Mort Rosenberg, the author of Investigative Oversight and a number of manuals for conducting congressional inquiries, dismissed the Grassley excuse in an interview with ThinkProgress. “Congress has huge powers over what it decides to investigate,” Rosenberg explained. In some cases, when the Department of Justice is already looking into a criminal matter, Congress will avoid engaging in an investigation. But overall, Rosenberg said outside litigation never prevents a committee from opening an inquiry.

ThinkProgress spoke to Beth Levine, a spokeswoman for Grassley, who said the documents are not currently under Grassley’s purview because he is no longer the chairman or ranking member of the Senate Finance Committee. Asked if Podsiadly ever referred the whistleblower documents to the Justice Department or began a congressional inquiry into the matter when he received them in 2006, Levine responded, “I don’t know the answer to that question.” Further requests to Podsiadly and Grassley staff for more information have gone unanswered. Read more

Alyssa

‘Burn Notice’ Open Thread: Leadership Styles And Nasty Hackers

A programming note: the Louie thread will be up later this afternoon. I had some scheduling complications last night.

I doubt that Michael’s actually over his obsession with the people who burned him, even after Max promises him, “We broke them into people. We ground them into dust. It’s over.” But it’s interesting this week to see Michael take his dilemma, his halfway home status with the CIA, and his ongoing attraction to working with Sam and Fiona, and to solve that problem, at least this time, by luring Max into working with him. When Michael gets asked to look into the antics of a singularly nasty hacker, Michael calls on Max to help him get into her phone lines. “If I get busted using NSA resources to help a burned spy with an unproven mission, I’ll get shipped off to Siberia,” Max complains. “And my wife hates the snow.” But he does it anyway — and pays a high and unexpected price.

Michael isn’t a typical charismatic leader — he can be tense, obsessive, and focused on his own problems to the exclusion of other people’s desires. But his being burned, and the needs that resulted out of that, created circumstances in which other people could pursue their own goals and interests. It’s a different kind of leadership. If that function ever comes to an end, it remains to be seen if Sam and Fiona can stay in Michael’s life in the same way, or if Jesse or someone else will supplant Michael in their lives and in Miami. But now, with Max dead and Michael framed, it looks like we’re back to the same old game, which is too bad. Burn Notice needs to make a transition, and if they’re going to back away from that, it’s unfortunate.

Beyond those larger questions, one thing I think is a bit odd about this episode is the stock evil hackeress villain. The whole hackers are “all about using their brains to dominate and control” thing strikes me as partially true. And maybe that resonates with folks who are freaked out by the antics of Anonymous, or who are annoyed by the Sony shutdown but otherwise don’t know much about hacker culture, or whatever. There are, of course, hackers who do really bad, malevolent things. But treating them as criminals who happen to have a lot of technological skills, missing the clever, playful sides of hacking strikes me as a weirdly old-school characterization. As does portraying them as folks who do IRL things like kidnapping petty criminals with aspirations, which is a really easy way to get yourself traced and treated to the full wrath of law enforcement. In a world with things like the Sony hack or Adrian Lamo’s role in Wikileaks, this storyline feels like it’s an inverse of over-the-top action storylines: it’s actually thinking too small.

Alyssa

If We Remake ‘WarGames,’ Who’s The Enemy?

For one thing, the computers will be smaller.

I tend toward suspicion on remakes in general, but when it comes to WarGames, I actually think it makes a lot of sense. Even if nuclear weapons and mutually assured destruction no longer hold pride of place in our foreign policy challenges (though they’re hardly irrelevant), the Internet’s obviously become much, much more important in a more direct way, whether it’s Egypt cutting off the internet during the revolution earlier this year, the perceived importance of Twitter in getting information out of and supporting protest in Iran, Chinese hacking into American institutions, or the Obama administration’s efforts to create internet and cell phone networks it can make available to dissidents that won’t be vulnerable to shutdowns by their government.

So the interesting thing is who the intrepid teenage hackers encounter out there, and what the consequences of their actions are. Maybe they make contact with budding dissidents somewhere in the Middle East without being aware they’re real and, pretending to be agents of the U.S. government, promise support they don’t actually think they’ll have to deliver, only to find themselves on the hook for a revolution that’s actually taking place? There’s a lot to explore there about responsibility and identity on the internet now that it’s a social and widely-used tool.

Switch to Mobile
ThinkProgress Signup Overlay Skip and Continue to ThinkProgress Skip and Continue to ThinkProgress

Sign Up