DHS to set up policies for monitoring Twitter, Facebook – Computerworld

Computerworld – When the U.S. Department of Homeland Security receives information about potential threats to the U.S., agents may turn to social networking sites like Facebook and Twitter.

Caryn Wagner, undersecretary of the DHS, told an audience Monday at the National Symposium on Homeland Security and Defense in Colorado Springs that the agency began to draw up guidelines for monitoring social networking sites after the sites were heavily used during government uprisings in the Middle East and North Africa this year.

According to an Associated Press report Tuesday, federal agents are still mulling over how to best pull intelligence from social media sites and determine whether it is valid or Web chatter.

“We’re still trying to figure out how you use things like Twitter as a source,” said Wagner, according to the AP report. “How do you establish trends and how do you then capture that in an intelligence product?”

The DHS, whose mission is to protect the country from terrorist attacks, isn’t actively monitoring Facebook or Twitter. However, when the agency receives a tip about a potential threat, agents will scour public sites for information.

via DHS to set up policies for monitoring Twitter, Facebook – Computerworld.

U.S. warns that Anonymous, LulzSec could up their game – Computerworld

Hacker groups such as Anonymous and Lulz Security may need to be monitored more closely in the event they are assisted by other hackers with higher skill levels and decide to strike critical infrastructure.

The warning comes from the National Cybersecurity and Communications Integration Center (NCCIC), which is part of the U.S. Department of Homeland Security.

“Some members of LulzSec have demonstrated moderately higher levels of skill and creativity that include using combinations of methods and techniques to target multiple networks,” according to the six-page advisory. “This does not take into account the possibility of a higher-level actor providing LulzSec or Anonymous more advanced capabilities.”

Anonymous and a splinter group known as LulzSec have wreaked havoc against government and business websites and servers, from low-level defacement of websites up to more sophisticated actions such as stealing sensitive data.

The agency categorized the attacks as “rudimentary” and associated with youths known as “script kiddies” for their use of simple tools to hack. But law enforcement agencies in countries such as the U.S., U.K., Spain and the Netherlands have made arrests in attempts to stem their activities.

via U.S. warns that Anonymous, LulzSec could up their game – Computerworld.

International online child pornography ring busted – CNN.com

Seventy-two people have been charged in an online global child pornography ring that originated in Louisiana, in what is described as the largest prosecution of its kind, Attorney General Eric Holder announced Wednesday.

Dubbed Operation Delego, the federal law enforcement action began in December 2009, targeting more than 500 people around the world allegedly participating in Dreamboard, a members-only online bulletin board that officials say was created and operated to promote pedophilia and encourage the sexual abuse of very young children.

“Utilizing sophisticated techniques in an attempt to avoid law enforcement detection, Dreamboards’ members allegedly traded graphic images and videos of adults molesting young children, often violently, and created a massive private library of images of child sexual abuse,” Holder said at a Justice Department news conference also attended by Department of Homeland Security Secretary Janet Napolitano, Immigration and Customs Enforcement Director John Morton and other officials.

via International online child pornography ring busted – CNN.com.

Sony’s Security Problems Could Take Years to Fix – NYTimes.com

It’s been a tough couple of months for Sony. The company’s PlayStation Network was breached by hackers in late April and now several other units of the company have suffered broad security breaches.

In the last week alone, half a dozen Sony Web sites and servers, including some in the United States and Brazil, have been breached. On Monday a group of hackers calling themselves LulzSec posted proprietary Sony source code on file-sharing Web sites.

Although the members of LulzSec have gone after other organizations in the past, including Fox.com and PBS.org, the attacks against Sony have been unrelenting.

“These attacks are a combination of Sony’s lax security and a number of groups being very vigilant about breaking in to show how powerful they can be,” explained Frank Kenney, vice president of global security at Ipswitch, a company used to securely transfer files online. “What Sony has to do is re-examine their entire security system including the type of code they are using and the type of servers; they have to acknowledge that their brand is at stake.”

Mr. Kenney said that no server was impervious to hackers, but a company like Sony, with millions of credit cards and users’ personal information on file, had a responsibility to ensure protection “equivalent to the Department of Homeland Security’s servers is in place.” He said that the fact that dozens of Sony Web sites and servers had been breached indicated it was clearly a companywide problem.

“Any type of environment can be breached, but Sony has to come up with a plan that not only protects their infrastructure, but also convinces their customers that their credit cards and personal information is safe,” Mr. Kenney said.

via Sony’s Security Problems Could Take Years to Fix – NYTimes.com.

Mozilla resists request by US gov’t to remove piracy feature – The China Post

Mozilla, the non-profit developer of the Firefox Web browser, is holding off on complying with a government request to remove a software tool meant to circumvent federal efforts at curbing Internet piracy.

 

Immigration and Customs Enforcement, part of the Department of Homeland Security (DHS), has been seizing the Internet addresses of sites accused of piracy, so that visitors can’t reach them by typing in those domain names. The sites, however, still exist under other addresses.

The MafiaaFire tool for Firefox, developed by an outside party but available through Mozilla, seeks to automatically match seized names with the alternate addresses, similar to a mail-forwarding service, so that visitors can reach the sites.

Mozilla General Counsel Harvey Anderson said the DHS asked Mozilla to remove MafiaaFire from a site where Firefox users can add functions to the browser.

via Mozilla resists request by US gov’t to remove piracy feature – The China Post.

Mozilla resists request by US gov’t to remove piracy feature – The China Post

Mozilla, the non-profit developer of the Firefox Web browser, is holding off on complying with a government request to remove a software tool meant to circumvent federal efforts at curbing Internet piracy.

 

Immigration and Customs Enforcement, part of the Department of Homeland Security (DHS), has been seizing the Internet addresses of sites accused of piracy, so that visitors can’t reach them by typing in those domain names. The sites, however, still exist under other addresses.

The MafiaaFire tool for Firefox, developed by an outside party but available through Mozilla, seeks to automatically match seized names with the alternate addresses, similar to a mail-forwarding service, so that visitors can reach the sites.

Mozilla General Counsel Harvey Anderson said the DHS asked Mozilla to remove MafiaaFire from a site where Firefox users can add functions to the browser.

via Mozilla resists request by US gov’t to remove piracy feature – The China Post.

Top Secret America: Local agencies help collect data on Americans – The Denver Post

Today’s story, along with related material on The Post’s website, examines how Top Secret America plays out at the local level. It describes a web of 4,058 federal, state and local organizations, each with its own counterterrorism responsibilities and jurisdictions. At least 935 of these organizations have been created since the 2001 attacks or became involved in counterterrorism for the first time after 9/11.

The months-long investigation, based on nearly 100 interviews and 1,000 documents, found that:

Technologies and techniques honed for use on the battlefields of Iraq and Afghanistan have migrated into the hands of law enforcement agencies in America.

The FBI is building a database with the names and certain personal information, such as employment history, of thousands of U.S. citizens and residents whom a local police officer or a fellow citizen believed to be acting suspiciously. It is accessible to an increasing number of local law enforcement and military criminal investigators, increasing concerns that it could somehow end up in the public domain.

Seeking to learn more about Islam and terrorism, some law enforcement agencies have hired as trainers self-described experts whose extremist views on Islam and terrorism are considered inaccurate and counterproductive by the FBI and U.S. intelligence agencies.

The Department of Homeland Security sends its state and local partners intelligence reports with little meaningful guidance, and state reports have sometimes inappropriately reported on lawful meetings.

The need to identify U.S.-born or naturalized citizens who are planning violent attacks is more urgent than ever, U.S. intelligence officials say. This month’s FBI sting operation involving a Baltimore construction worker who allegedly planned to bomb a Maryland military recruiting station is the latest example. It followed a similar arrest of a Somali-born naturalized U.S. citizen allegedly seeking to detonate a bomb near a Christmas tree lighting ceremony in Portland, Ore.

There have been nearly two dozen other cases just this year.

“The old view that ‘if we fight the terrorists abroad, we won’t have to fight them here’ is just that — the old view,” Homeland Security Secretary Janet Napolitano told police and firefighters recently.

via Top Secret America: Local agencies help collect data on Americans – The Denver Post.

U.S. Immigration and Customs Enforcement Seizes Websites Suspected of Piracy, Counterfeiting – WSJ.com

Federal authorities have shut down more than 70 websites in one the broadest actions yet against companies the government suspects of selling counterfeit or pirated products.

Visitors to the affected sites–which offer such diverse goods as scarves, golfing gear and rap music–are greeted with a notice stating their domain names have been seized by U.S. Immigration and Customs Enforcement. The notice cites penalties for willful copyright infringement and trafficking in counterfeit goods.

An ICE spokeswoman confirmed that the agency executed court-ordered seizure warrants against a number of domain names, but declined additional comment. “As this is an ongoing investigation, there are no additional details available at this time,” she said.

The agency, a unit of the Department of Homeland Security, has been moving on multiple fronts to crack down on sales of goods it contends violate U.S. companies’ trademarks and copyrights.

In August, for example, officials from ICE and the Department of Justice charged 11 people with trafficking in items such as fake designer clothing, handbags and jewelry that were allegedly smuggled from China and offered for sale through eight shops in San Francisco’s Fisherman’s Wharf. In June, ICE seized the domain names of nine websites accused of letting users watch streamed versions of first-run movies.

via U.S. Immigration and Customs Enforcement Seizes Websites Suspected of Piracy, Counterfeiting – WSJ.com.

U.S. Launches Three-Day ‘Cyber Storm’ Response Test | News & Opinion | PCMag.com

The Department of Homeland Security (DHS) this week kicked off a three-day test of its cyber response capabilities. The exercise, dubbed Cyber Storm III, is a cooperative effort that will simulate more than 1,500 different types of threats against critical government systems.

“Securing America’s cyber infrastructure requires close coordination with our federal, state, international and private sector partners,” DHS Secretary Janet Napolitano said in a statement. “Exercises like Cyber Storm III allow us to build upon the significant progress we’ve made in responding to evolving cyber threats.”

via U.S. Launches Three-Day ‘Cyber Storm’ Response Test | News & Opinion | PCMag.com.

Biometric identification faces real-world hurdles – USATODAY.com

Released Friday by the National Research Council, the ” Biometric Recognition: Challenges and Opportunities” report headed by Hewlett-Packard chief Joseph Pato concludes all biometric recognition technologies are “inherently fallible.”

“A lot of things possible on a TV series just don’t work that way in real life,” says panel member Bob Blakley of researcher Gartner, in Stamford, Conn. “While there are lots of good uses for biometric recognition, there are lots of ways to create systems that waste time, cost too much and don’t work very well.”

Fingerprints are the best-known example of a biometric recognition marker — a physical trait that can serve to identify people reliably, such as facial features, voice, signature and even walk. “Biometric recognition has been applied to identification of criminals, patient tracking in medical informatics, and the personalization of social services, among other things,” notes the report.

Federal agencies such as the FBI and Department of Homeland Security are funding research in improved biometric screening, but the report cautions they’re not doing basic research into whether the physical characteristics involved are truly reliable or how they change with aging, disease, stress or other factors. None look stable across all situations, the report says. Deployment of biometric screening devices at airports (which is not currently planned), borders or elsewhere without understanding the biology or the population being screened may lead to long lines, false positives and missed opportunities to catch criminals or terrorists, suggests Blakley.

via Biometric identification faces real-world hurdles – USATODAY.com.