Live data from Hacker News

GCHQ intercepted webcam images of millions of Yahoo users worldwide

theguardian.com

171–180 of 323 posts

Re: GCHQ intercepted webcam images of millions of Yahoo users worldwide

#171

Earlier quoted context omitted.

Yes, because for political purposes, a compromising photo has far better blackmail value than other data.

But you can't use that blackmail tool without revealing that you were spying illegally. Revealing that would be worse for the blackmailer than the blackmailee.

Who said you have to reveal that you were spying illegally?

Just saying "we have this on you", this being something that can stop a career of a politician, or break his marriage, for example, will paralyse most people. And of course they make psychological assesments about who are most vulnerable and most likely to respond well to blackmail.

Second, you don't have to reveal anything. It's not like the agency himself has to do the blackmail and declare who they are and what they did. They can delegate that to some associate, who might not even know who is giving him commands. Or they can do it with anonymous messages ("We have this picture of you. You don't know who we are, but vote that on this law").

Re: GCHQ intercepted webcam images of millions of Yahoo users worldwide

#172
-- Top comment on Reddit [0]:

'This clearly violates both EU and British law.

It's simple: Parliament and the CPS can no longer ignore GCHQ's abuses and the entirely inadequate 'oversight' regime of the Intelligence and Security Committee.

Brooks et al. go on trial for allegedly hacking celebrities' voicemail messages, but Cabinet ministers walk free after approving secret suspicion-less dragnet recording of millions of webcam chats? This precedent can't stand. It's time we demand prison sentences for everyone who knew about this and did nothing to stop it.

Relevant British law is the Regulation of Investigatory Powers Act, Part II, Section 32 -- "Authorisation of Intrusive Surveillance":

http://www.legislation.gov.uk/ukpga/2000/23/section/32

(2)Neither the Secretary of State nor any senior authorising officer shall grant an authorisation for the carrying out of intrusive surveillance unless he believes—

(a)that the authorisation is necessary on grounds falling within subsection (3); and (b)that the authorised surveillance is proportionate to what is sought to be achieved by carrying it out.

GCHQ's position was that, "...the general principle applied would be that if the accuracy of the algorithm was such that it was useful to the analyst (ie, [if] the number of spurious results was low, then it was likely to be proportionate)".

But the entire point of requiring 'proportionality' is to exclude activities which are useful, but too intrusive for the benefits gained. GCHQ's reasoning that usefulness implies proportionality is clearly false. Time for a few ministers to see the inside of a courtroom.'

--

Without being an expert on the law (and ~99.999% of the people reading this fall into the same bucket) -- I/we can assume that other clauses exist to 'defang'/'neuter' the clauses cited, the ones which were purportedly violated. And this highlights another BIG issue: a law's true intent is oftentimes indecipherable or outright deceitful.

Groundbreaking precedents have been set due to laws which were passed on false pretenses (for ex., look up the genesis story of "eminent domain") - or simply marketed as something misleading (ex. Sen. Feinstein's "FISA Improvements Act"). To me, that is the greatest form corruption in a democracy -- lawmaking with surreptitious intent.

While bills have to be massive in some circumstances (and interlinking by their very nature) -- a standardized list of simple outcomes of said law should be a requirement, and a bill should be "unit tested" the same way programs are. Actually, behaviorally tested is a better phrase. We need a tool for lawyers/lawmakers to help them express the consequences of a bill in a definitive manner. - Are there such initiatives? (please comment) Shouldn't we start one? Has the idea been floated and shot down (at EFF/Demand Progress/etc), and if so why? IMHO it would be worth the investment given the stakes (understanding the consequences of bills and laws -- even spotting excess/hidden "pork"). . I would love to read a bill as a series of behavioral test assertions, wouldn't you! :)

>>> Hopefully the stated concerns don't apply; countless suits are brought against all suspect parties (esp. high profile targets); and those responsible are served justice to the maximum extent of the law. As the hum of document shredders begins on 10 Downing Street - know that THIS is the opportunity to "make an example out of" the type of people who are responsible for the system as it exists today. It's our turn for a power play.

[0] http://www.reddit.com/r/worldnews/comments/1z33wx/uk_spy_age...

Re: GCHQ intercepted webcam images of millions of Yahoo users worldwide

#173
post #79

ISTR that in the futuristic dystopia depicted in V for Vendetta , there are government spy cameras everywhere, including in people's bedrooms. And it turns out that's not so futuristic. We're already there. The moment it became technically (Edit: and really, economically) feasible to spy on people's bedrooms, our governments leapt at the chance. I wonder what Alan Moore would have to say about that. We didn't have to…

>We didn't have to experience a crisis of social, governmental, or financial instability. September 11th and the London train bombings? No argument against how disturbing this all is, but don't feel it's accurate to say this increased surveillance wasn't caused by a crisis. It's all being done in the name of preventing terrorism, significant acts of which have occurred in the last decade both on US and UK soil. So if…

The component laws behind the crackdown, at least in the US, were written ahead of time. They'd been on executive-agency-wishlists for years. It might have taken a crisis to justify actually passing these laws. But they were not purpose-crafted programs and laws in response to particular events.

Re: GCHQ intercepted webcam images of millions of Yahoo users worldwide

#174

Earlier quoted context omitted.

I'd wager that this is one reason homosexuality has been held as taboo for so long: it can be weaponized against your enemies for leverage and power.

I don't know, that seems like a tautology - the only reason it can be weaponized against your enemies is because it's taboo.

Charlie Stross features a gay couple in one of his novels, and one of the conditions of their employment for a top secret government office is that they must be explicitly out about their homosexuality - one attends a Pride Parade once a year in order to comply with these regulations.

I thought it was a pretty clever idea.

Re: GCHQ intercepted webcam images of millions of Yahoo users worldwide

#175
post #7

i wish i could chose from a wider range of laptops without camera and microphone i own an old hp like that and i love it i never need the camera and when i need to skype i just plug the headphones

Tape works really well for disabling webcams. Microphones are a bit trickier, but if you're not against permanent damage shouldn't be too hard.

don't forget that any speaker can be reversed to function as a microphone. A bit more annoying disabling that.

Re: GCHQ intercepted webcam images of millions of Yahoo users worldwide

#176
post #20
post #17

The document estimates that between 3% and 11% of the Yahoo webcam imagery harvested by GCHQ contains "undesirable nudity". Discussing efforts to make the interface "safer to use", it noted that current "naïve" pornography detectors assessed the amount of flesh in any given shot, and so attracted lots of false positives by incorrectly tagging shots of people's faces as pornography. So, if you have to hide something,…

Reminds me of this story, the googling of which is now in my search history so I hope you're grateful. "A US card cloner forced would-be gang members to take part in group sex sessions as part of an initiation ceremony designed to weed out undercover cops, according to a detective." http://www.theregister.co.uk/2012/02/01/smut_initiation_card...

I read about something similar in a scifi novel; guess I have a pretty good idea about where the author got the idea.

Re: GCHQ intercepted webcam images of millions of Yahoo users worldwide

#177

Earlier quoted context omitted.

Oh wow. That's a good point. And my MacBook lights an LED when my webcam's active, but it doesn't for the microphone. Perhaps it should?

The LED light on the webcam is bypass-able. On many cheap laptops it is controlled in software (at the kernel level), but even on Macs where it is meant to be hardware enforced it can be bypassed: http://www.washingtonpost.com/blogs/the-switch/wp/2013/12/18... Disabling the camera LED is a fairly standard feature in malware suites. Even a lot of USB webcams control the LED from software. The LED is just a feel-good f…

This isn't quite accurate. It can't be easily disabled on most laptops. The way to disable it on Macs is extremely sophisticated, and no malware currently does that, except maybe NSA malware.

You still shouldn't really trust it, but the situation is not how you're making it sound.

Re: GCHQ intercepted webcam images of millions of Yahoo users worldwide

#178
post #106

Everyone is going on about covering your webcam, but what if I actually want to use it? I get to decide what is being sent over the network, but I still don't get to decide what the GHCQ/NSA/AIVD see by interception. Another example is Kinect, which must be turned on and uncovered because otherwise it is obviously useless. What are we going to do about that? I'm very much afraid that the real solution is probably a p…

> I'm very much afraid that the real solution is probably a political one, not a technical one.

I disagree. You can trust strong enough crypto, at least to some reasonable extent. You definitely can't trust politicians saying "nah, we're not looking at it" (or anything else they might be saying).

Post reply on HN