Sunday, September 25, 2022

Please, we will do anything. Just turn the internet back on.

Editor's note: It is possible and looking more likely all the time the internet will be brought down at some point in 2023 if only for a day or two in order for our technocratic elitist rulers to scrub everything from the internet the self-appointed tech Gods don't want the peasant slave class learning about or remembering. Then when the internet - servers - are turned back on the control of knowledge will be complete. During the shut down people will panic demanding the internet be turned back on and will accept any type of control imposed on them to get back their access to the internet. For example, some type of permanent head or ear device. The peasant slave class are already all tattooed up as the precursor to get them used to compliance. Here is evidence this might be what is in store next year. Since the internet can be traced back to its origins to the military (ARPANET) this comes as no surprise.
________  

Source: VICE

Revealed: US Military Bought Mass Monitoring Tool That Includes Internet Browsing, Email Data

The "Augury" platform includes highly sensitive network data that Team Cymru, a private company, is selling to the military. "It's everything. There's nothing else to capture except the smell of electricity," one cybersecurity expert said.

By Joseph Cox | September 22, 2022

Multiple branches of the U.S. military have bought access to a powerful internet monitoring tool that claims to cover over 90 percent of the world's internet traffic, and which in some cases provides access to people's email data, browsing history, and other information such as their sensitive internet cookies, according to contracting data and other documents reviewed by Motherboard.

Additionally, Sen. Ron Wyden says that a whistleblower has contacted his office concerning the alleged warrantless use and purchase of this data by NCIS, a civilian law enforcement agency that's part of the Navy, after filing a complaint through the official reporting process with the Department of Defense, according to a copy of the letter shared by Wyden's office with Motherboard.

The material reveals the sale and use of a previously little known monitoring capability that is powered by data purchases from the private sector. The tool, called Augury, is developed by cybersecurity firm Team Cymru and bundles a massive amount of data together and makes it available to government and corporate customers as a paid service. In the private industry, cybersecurity analysts use it for following hackers’ activity or attributing cyberattacks. In the government world, analysts can do the same, but agencies that deal with criminal investigations have also purchased the capability. The military agencies did not describe their use cases for the tool. However, the sale of the tool still highlights how Team Cymru obtains this controversial data and then sells it as a business, something that has alarmed multiple sources in the cybersecurity industry.

"The network data includes data from over 550 collection points worldwide, to include collection points in Europe, the Middle East, North/South America, Africa and Asia, and is updated with at least 100 billion new records each day," a description of the Augury platform in a U.S. government procurement record reviewed by Motherboard reads. It adds that Augury provides access to "petabytes" of current and historical data.

Motherboard has found that the U.S. Navy, Army, Cyber Command, and the Defense Counterintelligence and Security Agency have collectively paid at least $3.5 million to access Augury. This allows the military to track internet usage using an incredible amount of sensitive information. Motherboard has extensively covered how U.S. agencies gain access to data that in some cases would require a warrant or other legal mechanism by simply purchasing data that is available commercially from private companies. Most often, the sales center around location data harvested from smartphones. The Augury purchases show that this approach of buying access to data also extends to information more directly related to internet usage.

Team Cymru says on its website that its solution provides "access to a super majority of all activity on the internet."
Do you work at a company that handles netflow data? Do you work at an ISP distributing that data? Or do you know anything else about the trade or use of netflow data? We'd love to hear from you. Using a non-work phone or computer, you can contact Joseph Cox securely on Signal on +44 20 8133 5190, Wickr on josephcox, or email joseph.cox@vice.com.
"Augury is the visibility into 93% of internet traffic," another website describing the tool reads. Some clients have access to the platform under the different brand name Pure Signal RECON, according to Team Cymru's website.

The Augury platform makes a wide array of different types of internet data available to its users, according to online procurement records. These types of data include packet capture data (PCAP) related to email, remote desktop, and file sharing protocols. PCAP generally refers to a full capture of data, and encompasses very detailed information about network activity. PCAP data includes the request sent from one server to another, and the response from that server too.

PCAP data is "everything," Zach Edwards, a cybersecurity researcher who has closely followed the data trade, told Motherboard in an online chat. "It's everything. There's nothing else to capture except the smell of electricity.” (Team Cymru told Motherboard it does limit what data is returned to users but did not specify what data actually is provided to a user of the platform).

A source in the cybersecurity industry said "that's insane" when shown that sensitive information like PCAP data was available in Augury. Some private industry users appear to have less access to certain data types in Augury than those listed in the government procurement records. Motherboard granted multiple sources in this piece anonymity because they weren't authorized by their employers to speak on this issue.

Please go to VICE to continue reading.

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.

Looking into our circumstances...