FEATURE The spying game
Transcription
FEATURE The spying game
NET95.f_spy2 31/1/02 12:52 pm Page 46 FEATURE The spying game 46 April 2002 NET95.f_spy2 31/1/02 12:52 pm Page 47 The spying game FEATURE THE SPYING GAME You can track almost anyone in under an hour using the Net. Dan Oliver investigates the world of online espionage S A KID, the back pages of comic books held hidden delights. For a few weeks’ pocket money you could get your hands on top-secret Russian X-ray glasses that could penetrate walls and clothing or a telescope that could capture movement on the moon. Technology was wonderful. Days would seem like weeks as you waited for your goodies until the blessed moment when they arrived and you opened them, only to be greeted with the tattiest pieces of crap you had ever laid eyes on. The glasses were plastic and had little cardboard lenses with pinholes cut in the middle and the telescope was like looking through two panes of glass; we’d been had! That was then, though, when becoming a spy was mere flight and fancy. Now all you need is the Internet and you can track people down, monitor what they do online, buy the kind of spy equipment that should not be available to the general public and even become the unfortunate victim of a cyberstalker yourself. Right now, someone could be tracking you online or if you’re using a PC, they could be logging every keystroke you enter and grabbing screenshots of the content you are viewing on the Net. Don’t freak out just yet, though, because in order for someone to want all this information about you, you’ve either done something quite bad or someone is really, really interested in who you are and what A you’re doing. To be honest, most of us are too dull to merit this kind of attention from anyone but this doesn’t mean these things aren’t happening every day. Tracking resources During the Jill Dando murder trial, it emerged that someone had used the online service 192.com to search for the BBC presenter’s home address. This was then followed by calls for such services to be banned but the information they contain is available to anyone with the time and inclination to find it; all the Internet does is make it a lot easier to get your hands on. Tim Burchell works for UK Private Investigators, a member of the World Association of Professional Investigators, and he uses the Net every day to legitimately track people around the world. “We have been using the Net for five years now,” Burchell tells . “It’s an invaluable tool. Using the Net we can find out all kinds of information on individuals and businesses. I think many people in the UK are ignorant to the power of the Internet.” There’s a big difference between the resources available to the general public and those made available to people willing to spend hundreds of pounds tracking someone online, but a little searching and an applied knowledge of how to use online tools and you can find almost anyone. “Using the right tools and understanding how the Net works, anyone can track most J April 2002 47 NET95.f_spy2 31/1/02 12:53 pm Page 48 FEATURE The spying game J IS CYBER SNOOPING A PROBLEM? In 1997, the problem of harassment was recognised in the UK and the Protection from Harassment Act 1997 was introduced. It was estimated that within the first year of the Act’s introduction around 200 cases would be reported; the actual figure was more than 6,000. As the number of Net users in the UK continues to rise, the problem of cyberstalking is increasing but no official figures are available and finding a police officer at your local station that even knows what cyberstalking is will be pretty unlikely. people down within minutes,” explains Burchell. “The trick is knowing which tools to use and how to use them.” Private investigators don’t just make checks on the people they are tracking down and, as Burchell explains, one of the major issues when taking on a new job is to ensure there are no illegal activities taking place. “We are always very careful not to conduct investigations on behalf of anyone with an illegal motivator,” he adds. It is clear that the UK’s criminal fraternity has been utilising the Net for longer than law enforcement agencies but Burchell believes the UK is catching up. “I think the Police in the UK are taking a lead from the American law enforcement agencies, namely the FBI, in using the Net for keeping tabs on illegal activity,” Burchell says. “If their work prevents people being ripped off or catches paedophiles then it is extremely good news. However, if their work intrudes into private individuals lives, then no, it is most definitely not a good thing.” With well-publicised uses of the Internet to spy on individuals, a new term - cyberstalking – has been born out of the numerous stories. Cyberstalking is a pretty broad umbrella under which a number of acts, not all of them criminal offences, fall and people are becoming more and more aware of their vulnerability online. Never one to miss an opportunity to involve the Net in a storyline, even soap operas have bought into the cyberstalking hype. There has recently been a story revolving around a young character being stalked via a chat room in none other than Coronation Street. None of this scare mongering can be healthy for the Internet but the fact that cyberstalking has made it on to prime time television is a clear illustration that there is a problem here that needs more investigation. Spying online To illustrate how easy it is to track someone down using the Net we decided to use a number of techniques available with some alarming results. Having visited a random Web-based forum, we simply took a sample email address from the message board. To find more info, we went to groups.google.com and entered the email address in the search window. All newsgroup postings (we assumed that, as a Net user, they had contributed to newsgroups at some point) We now knew our target was a man with a liking of Formula 1 PREVENTING SNOOPS AND STALKERS 1 Use various email addresses. Always keep your personal email address secret from all those but your friends and family. 2 The idea that anyone can search your newsgroup postings may have come as a shock but you can stop Google archiving your message by typing ‘x-noarchive: yes’ into the x-header field. You can also just place this string as the first line in the body of your message. However, this will not prevent your messages from being archived if they are copied or referenced in a reply to your message. 3 Be very careful when identifying yourself online. Don’t use screen names that have sexual connotations. Try and choose a gender-neutral handle. 4 When chatting or posting to a message board/newsgroup, do not reveal any personal information that you wouldn’t want a stranger to have access to, such as your name, address, or other identifying information. submitted by the owner of the email address were returned. From reading these postings (there were around 50) we learnt the full name of the person we were searching and the city where they lived. Not only did we discover this information but we could also build up a profile from the newsgroups that our target visited. We now knew our target was a man, with a liking for Formula 1 racing and who drove a Ford Puma. Not only did we have all this information but we could also discover his IP address from his newsgroup postings that could be used maliciously by hackers or to trace his ISP and cause him problems there. All this information can be found in a matter of minutes just by searching the Net. By using more powerful tools such as infobel.com and 192.com you can find even more information. Infobel.com is a company that produces telephone and professional directories on the Internet and on CD-ROM; its online service is free. We now entered our target’s name into the infobel.com search engine and although the site features many UK residents, our target was not on the database – we decided to subscribe to the 192.com service to see if we could find our target there. 192.com has a number of different options available for both casual users and businesses. Around £30 will secure you access to the electoral roll for the UK with the addresses of everyone registered to vote at your Emails can still be archived if they’re copied in a reply to your message J 48 April 2002 www.netmag.co.uk NET95.f_spy2 31/1/02 12:53 pm Page 50 FEATURE The spying game J fingertips. With this tool you can find almost anyone in the land. Having entered our target’s name, we got around 20 results back and had to search until we found the extra information we had learnt in the newsgroups – in this case, the town where he lived. This took a matter of minutes. From one posting within an online forum we had discovered the identity of the man, his address, his interests, his phone number, his IP address (via a service such as www.neowebscript.com/ tests/lookup.nhtml) and the fact he drove a Ford Puma. We then decided to go for some bigger fish such as football players and TV presenters and found many of them – again with handy maps supplied to where they live. This information, used in conjunction with some of the tools we managed to purchase online, (see ‘Spying Kit’, below) could get us well on the way to our first News of the World exclusive, if we were that way inclined. With no training in tracking someone down online, and using tools known to many Net users, we managed to find a number of people with very little information to go by, within an hour of getting online – but just how widespread is the use of such techniques? “My perception is that the problem of Internet crimes such as cyberstalking is growing and under-reported,” explains Neil Addison, barrister and creator of www.harassment-law.co.uk. “As the use of the Internet increases, criminal activity will SPYING KIT AVAILABLE ONLINE You can report any cyber crime you have been the victim of at www.cybersnitch.net increase also. The police now recognise that the use of threatening and harassing messages sent by mobile phones is increasing and becoming a serious problem for victims.” Having seen cases of harassment from both sides, Addison knows what drives people to pursue someone online and also the effects it has on the victim. He believes that prevention and common sense are HANDY TRUSTER LIE DETECTOR £69.99 If you’re the kind of person that watches a James Bond film and then finds that you can’t stop dreaming about all his cool toys for weeks, then your credit card could well be maxed when you see some of the goodies you can buy for your own spying pleasure. went online to see what was on offer We tried this in the office and it worked! You can either speak to people directly using the detector or connect it to your mobile phone. The Truster creates a voice profile of the subject and makes an automatic analysis of speech flow. Taking all these aspects of a person’s voice into account, the Truster can work out just how much truth there is in their words. www.boysstuff.co.uk. WQV- 3 CASIO WRIST CAMERA £219.99 We have been reliably informed that the Casio Wrist Camera is merely a gimmick and not the kind of thing that would be useful to spies because it doesn’t capture images in a high enough resolution. To be honest, we don’t care – it looks cool and it’s a camera in a watch. www.gizmos-uk.com ADAPTOR BUG AND RADIO RECEIVER ADAPTOR BUG: £34.99 RECEIVER: £39.99 GO-SCOPE £19.99 You may look like a pervert wandering around with this little telescope attached to your eye but the Go-Scope is super compact and super powerful. Originally designed and developed for military use, the Go-Scope is now available to the general public and if you ever feel the need to inspect things a little closer, then this is the tool for you. www.boysstuff.co.uk. 50 April 2002 It looks like a plug but it’s really a high-powered bug that transmits up to 300 metres away. There is also no need to worry about changing batteries as the bug is powered via the mains. The bug inside the adaptor will transmit any sounds within a 30-feet radius, to a receiver up to 300 metres away. You also need an FM receiver to tune into your bug’s frequency. www.gizmos-uk.com www.netmag.co.uk NET95.f_spy2 31/1/02 12:53 pm Page 51 The spying game FEATURE essential in these circumstances. “Do not delete anything, however unpleasant it may be, keep it so it can be used as evidence,” Addison continues. “Do not respond to cyberstalking messages and use your common sense. If I walked up to you in the street and asked for your details (phone number, address and so on) you’d wonder why. Use the same caution on the Net.” Cyber crime? As it stands, there are currently no figures for cyberstalking in the UK because it is not technically classed as a crime. “At the moment, with the way in which crime is reported, there isn’t a recording system that shows us the crimes that have been committed over the Internet,” explains Stuart Hyde, cyber crime expert and chief superintendent with the West Yorkshire police. “One of the difficulties is that a lot of crime is committed using the Internet as opposed to on the Internet. Those offences can be Cyberangels.org is a great place to go to read up on cyberstalking traditional crimes as well as high-tech ones.” This grey area leads to many police officers not knowing how to deal with someone that claims to have been a victim of an Internet crime. “The law is extremely effective but perhaps not the legal system,” Addison explains. “Often the police do not know how to handle such cases and try to avoid them. Also, if a cyberstalker is outside England and Wales the legal position is not as clear as it should be.” asked Stuart Hyde what he would advise anyone that had suffered cyberstalking to do and rather than point people to their local bobbies, he pointed a little farther afield. “There is a site (www.cybersnitch.net) available to people to report crime online that is based in the US. It’s a high-tech crime reporting system and it links into investigators both in the US and UK and anyone can use it,” says Hyde. “If people are having difficulty, the best approach is to go straight to their ISP and usually they can block the incoming email. Our advice would be preventative although most forces now have the capability of detecting.” This ‘capability of detecting’ came under fire at the fifth annual Parliamentary ISPA (Internet Service Providers’ Association) forum in the House of Lords. Rachel Basger, J COVERT SPY CAMERA £149.95 THE SPY CALCULATOR £19.99 We didn’t know whether to laugh or take this product seriously when we took it out of the box. The wireless spy camera has a thirtymetre range (great) featuring both a colour picture and audio (good) and comes in a specially modified book with a big camera hole in the spine that wouldn’t fool a short-sighted monkey (bad). www.gizmos-uk.com Is it ethical? Probably not but we’ve all wanted to know what people say once we have left a room before and the spy calculator makes this easy. Simply place it in a room and it will pick up whatever conversation is taking place and transmit it to your very own receiver with earphones at distances up to 100 feet away. The powerful microphone is housed in a fully working, silver-metallic finish calculator but it’s the biggest calculator we’ve seen this side of the 80s but what do you expect for £19.99 with batteries supplied, too? www.boysstuff.co.uk INTERCEPTOR 3000 £99.99 We’d better start by saying that, as you read this, anyone could have bugged the room you are in and be listening in on you. Fear not, though, because the Interceptor 3000 is a bug-detecting device, capable of detecting virtually any kind of transmitter. This device is used by the big-name stars, allegedly. www.gizmos-uk.com www.netmag.co.uk LISTEN THROUGH WALL DEVICE £199.99 So you want to hear what’s going on next door, do you? Well, this wall contact listening device is capable of listening to sound through 30cm of solid concrete. The kit comes in three parts and is ready to use straight from the box. Simply place against the wall and listen. A word of advice, though, don’t flick the microphone with the volume up full to see if it works! www.gizmos-uk.com April 2002 51 NET95.f_spy2 31/1/02 12:53 pm Page 52 FEATURE The spying game J WHAT IF YOU’VE BEEN STALKED? If you know the offender, send the stalker a written warning, making it clear that the attention you are receiving is unwanted and ask it to stop. After this, never respond to any further contact from the stalkers. You should report the incident to the system administrator of both your Internet Service Provider (ISP) and the ISP of the person giving you grief. Be sure to forward a complete copy of the mail, including the headers, to the ISP sysadmin as they can ascertain who is harassing you from this information. Most sysadmins will not hesitate to cancel the account of anyone using their ISP to send abusive mail. If your ISP does not take your complaint seriously or refuses to cancel the account of the person harassing you, then we suggest you dump them and find a more caring ISP. 52 April 2002 regulatory manager at World Online claimed that information officers had asked for on suspects was inappropriate and claimed that ‘the police have often been clueless’. “Last year at the fifth annual Parliamentary ISPA Forum, the police were slagged off somewhat for our preparedness, so we are having to address this issue,” Hyde tells . “It’s quite possible to trace stalkers and there’s a lot of training taking place with officers on how to identify people using the Net.” There is a feeling that there needs to be one place for people to report cases of cyber snooping, and other crimes, online but the stumbling block is under whose authority it would fall and how cases would be dealt with. “You’d need a filtering system and someone to decide who dealt with each case,” says Hyde. “There’s also a difficulty that most offences can travel around the world before they actually land anywhere. There are different jurisdictions and time zones involved.” It’s clear that officers like Stuart Hyde would like nothing more than to address cyber crime but it will take a major involvement from the Home Office and a long time to perfect. The fear among many people is that it will take one case that captures the imagination of the media and the public as much as a Coronation Street story line before something is done to address cyber snooping. Barrister Neil Addison fears the worst: “I hope it’s not the case but I think that it could take something that no one can ignore before the Home Office or the National Crime squad takes over the responsibility for dealing with such cases.” UK PRIVATE INVESTIGATORS Why not pay a visit to UKPI and discover the kind of services you can purchase from private detectives in the UK? www.ukprivateinvestigators.com HARASSMENT LAW Neil Addison’s site provides a wealth of information on both on and offline harassment law and he also links to a range of other great resources on the Net. www.harassment-law.co.uk CYBERANGELS If you’ve been a victim of cyberstalking or want to learn more about it and how to protect yourself, this IUS resource is a great place to visit. www.cyberangels.org TOPSECRETSOFTWARE.COM This site features many unique computer and Internet spy, surveillance, security and monitoring packages for business and private PC users. www.topsecretsoftware.com SNAP SHOT SPY Snap Shot Spy monitors computer and Internet activities by taking screenshots, while working in the PC’s background and is completely undetectable by the user. www.virtual-imagination.com KEY LOGGER 192.com can be used to track down people via the electoral register and Directory Enquiries AMERICANS ARE MENTAL: IT’S OFFICIAL It’s nice to know that when someone retires from the law enforcement agency in the US, they go into socially responsible jobs. Jobs like stalking women and tapping phones all so that the chances of a rich weirdo getting a date are increased. US Web site Coincidence Design (www.coincidence design.com) claims that it has a team of top investigators from various agencies that will stalk a woman with the objective being to set up a coincidental meeting. It believes that it can find out all those gems that you can use to make yourself seem like a lady’s perfect gentleman and all for $54,000. The perfectly above-board people behind the Web site are keen to point out that security is key to their activities and that these activities are totally legal. SPYING LINKS This handy device records all of the keystrokes, visited Web sites and programs used on a computer, with time and date, in a handy password-protected log file. hop.clickbank.net/hop.cgi?serpant/ pcspy 192.COM If you’re looking for someone in the UK, then 192.com is a great resource that not only enables you to find people but you can also access maps, a route finder and a list of public telephone locations should you ever need it. www.192.com HOME OFFICE Why not pay a visit to the Home Office Web site and drop them a line voicing your concerns over Internet crime and cyberstalking? www.homeoffice.gov.uk/webwork/ contact.htm GADGETS AND GIZMOS BOYSSTUFF.CO.UK The first thing that springs to mind is that the Web site is a hoax but then it is based in the US and, at the time of writing, we retain a child-like naivety that makes us want to believe people. We do think they may still actually be waiting for their first job, though. These two Web sites sell a full line of spying equipment, some of which are more serious than others. You’ll be amazed at some of the spy goodies you can buy from right here in the UK. www.gizmos-uk.com www.boysstuff.co.uk www.netmag.co.uk