Kenya's Ingenious Solution To Cybercrime: Register Every Wi-Fi User And Device With The Government

Privacy

from the criminal-masterminds dept

Good news! Kenya has developed an ingenious, foolproof plan to put an end to the menace of cybercrime as we know it: they’ll soon be requiring that all Wi-Fi users register with the government before going online. Since most of us realize that hacking or tricking Wi-Fi authentication systems is impossible, and, as we all know, criminals aren’t capable of stealing other peoples’ Wi-Fi credentials, Kenya will be at the very forefront of landing a killing blow on internet-based crime as we know it for decades to come. It’s simply amazing that someone didn’t come up with this idea sooner.

The new head of Kenya’s Communications Authority, Francis Wangusi, last week stated in a speech that Kenya has taken over chairmanship of Association of Regulators of Information and Communications for Eastern and Southern Africa (ARICEA), a body that fights cybercrime within member nations. A new mandate of the group will require that every single Wi-Fi device in each and every member nation be registered with KENIC for the good of internet users everywhere:

“He added that Kenyans will also be required to register their mobile devices with Kenya Network Information Centre (KENIC) in new rules aimed at fighting cyber- crime. “We will license KENIC to register device owners using their national identity cards and telephone numbers, the identity of a device will be known when it connects to Wi-fi,” said Mr Wangusi at the ARICEA annual general meeting Tuesday in Nairobi. CA is also committed to conduct a detailed study on the depth of web hackings in the country. Wangusi said cyber-attacks are on the rise with the banking sector suffering most, followed by government officials.”

Other reports seem to indicate the well-formed plan could just involve users having to plug in a passport or other ID number before being able to access the internet whatsoever:

“We are considering the idea of ensuring the Public Wi-Fi is not accessed without a log in. The logging in of the public domain will require one?s passport number, ID Number or telephone number,” he said. “The unique number of a device is identified on the internet but we can?t identify who is owning it, if you don?t use the right identification numbers. That?s why we insist on logging in the Public Wi-Fi with personal credentials. This will help us in securing the cyber space, in case of cybercrimes,? he said.”

Since MAC spoofing apparently doesn’t exist in the alternate dimension I’m currently writing this story from, it should be relatively easy to get everybody voluntarily registered while constantly monitoring and thwarting any attempt to bypass the system. Similarly, since fighting the ambiguous menace known as “cybercrime” is never used as a pretense to expand government surveillance and brick-and-mortar oppression, Kenya will likely spearhead this bold new assault on internet skulduggery without any negative repercussions whatsoever for the public at large. Amazing!

Filed Under: cybersecurity, kenya, registration, wifi

With 'Pregnant Woman Mode,' Chinese Router Maker Begins Marketing To Paranoids

Too Much Free Time

from the clogged-chakras dept

For more than a decade we’ve noted that while there’s no hard scientific evidence proving that Wi-Fi is a health hazard, that hasn’t stopped an endless parade of folks from declaring war on the humble technology. Numerous schools have been sued for trying to install Wi-Fi networks, and some schools have even banned Wi-Fi entirely based on nothing more than a gut feeling. The campaign against Wi-Fi is generally waged by those professing to be “electromagnetically sensitive,” even though most provocation trials to date have suggested these individuals can’t actually identify when a “harmful” Wi-Fi agent is in the room.

Given that there are now entire towns full of the electromagnetically sensitive, it seems only fitting that some hardware vendors would begin marketing to them. One Chinese router manufacturer by the name of Qihoo has been recently promoting a new router that features a “pregnant woman” mode that the company promises delivers around 70% less radiation than a traditional router (or the device’s other settings). The company clearly comes out and says it’s basically marketing to paranoids (or, to be more compassionate, individuals with likely undiagnosed psychosomatic illnesses), and isn’t basing their claims on any actual science:

“We are targeting people who are afraid of radiation”, he said. However, in a statement to South China Morning Post, Qihoo acknowledged that no definitive link has been made between Wi-Fi signals and poor health. “We aren?t scientists. We haven?t done many experiments to prove how much damage the radiation from Wi-Fi can cause. We leave the right of choice to our customers.”

They are, however, engineers who are very familiar with the effects of radiation, but the fact that they couldn’t be bothered to support the claim with any actual research or data should tell you plenty. Not surprisingly, Qihoo competitor Xiaomi wasn’t too impressed with this new product line:

“The so-called pregnancy mode [of Qihoo?s router] is just a marketing tactic. Wi-Fi usage is safe, so please rest assured when using it [Xiaomi?s router]. We firmly oppose, and feel ashamed of, those who create rumours and arouse instability for business purposes.”

Qihoo’s response? Basically the implication that the company will be proven righteous when the nation’s moms begin dropping dead from 802.11n exposure:

“We will wait and see who has a more profound understanding of Wi-Fi routers, me or our competitors.”

Lovely. If hard science is going to be an afterthought (or more accurately no thought at all), it seems pretty obvious to me what the next step in wireless router marketing is. We should begin selling routers that promise to magically protect all users’ chakras and clogged meridians, while giving the customers’ aura and spirit a bright, shiny luster that lesser routers simply can’t match.

Filed Under: dangers, electromagnetic sensitivity, fud, marketing, pregnant woman mode, routers, wifi, wireless
Companies: qihoo, xiaomi

AT&T Explores Giving Away Free Wireless Data If Users 'Interact' With Brand Partners

Wireless

from the well-look-at-that dept

For a few years now AT&T has taken heat for its “Sponsored Data” program, which lets certain companies pay AT&T an extra fee to let consumers access their content without it impacting their wireless data usage allotment. Critics have repeatedly charged that the program immediately creates an uneven playing field for small companies, independent and non-profits, who may not be able to afford the toll. While it’s clear the plan violates net neutrality, consumers have been fortunate in that corporate interest in the idea so far appears to be minimal.

In an interesting twist, AT&T appears to now be cooking up a new program called “Data Perks” that gives consumers free, additional wireless data should they “interact” with AT&T partner brands in a specific fashion. Leaked information on the program suggests it’s being run by AT&T’s Sponsored Data partner Aquto, who explains AT&T’s new project as such:

“Aquto CEO Susie Riley told VentureBeat that to many brands it?s a lead generation campaign. Subscribers are rewarded with data when they sign up for services, learn about new products, discover new apps, or click through and purchase something at a brand?s e-commerce site. If for example, an AT&T customer bought a DVD from a participating brand, they might be awarded with a gigabyte of data that they could use to browse any site, anywhere on the web, Riley said. Subscribers accumulate their data credits in their Data Perks account, then transfer the data into their AT&T wireless account when they want.”

So far that sounds more neutrality friendly than the company’s Sponsored Data effort, as it’s opt in and doesn’t tilt the mobile Internet playing field in any obvious fashion. Of course this is AT&T — the same company that’s been busted time and time again for business models that trample neutrality and consumer rights — so we’ll have to see if there’s any nasty caveats when the program launches next Tuesday. AT&T might be engaging in semantics here (exempting some content from the cap, versus giving away “free” data if users “interact” with a brand). With the FCC’s new net neutrality rules taking effect this week (you know, the ones AT&T is suing twice to overturn), it seems possible that AT&T would tread carefully

Maybe.

While the FCC’s new neutrality rules don’t cover data caps and zero rating specifically, when they take effect on Friday there is at least a complaint mechanism for those who find a specific business model obviously anti-competitive. As such, ISPs can still violate neutrality, but as noted previously, they just have to be extra-clever about it, dressing it up as an innovative business model and a great boon for consumers (see T-Mobile’s Music Freedom). We’ll see next week if AT&T’s actually developing a sound business model for once — or if it’s just being extra clever.

Filed Under: advertisements, brands, interact, net neutrality, sponsored data
Companies: at&t

Wireless Carriers Sue Over Berkeley's Cell Phone Radiation Warnings

Wireless

from the premature-encapsulation dept

While there have been arguments for years now about whether or not cellphones cause cancer, the general consensus tends to be that cell phones emit so little radiation as to generally be safe. That’s not to say that you might not run into a problem should you duct tape a dozen cell phones to your face, and I won’t go so far as some to declare there’s absolutely no risk, as that would certainly be quick to draw the ire of the Internet’s “electromagnetically sensitive,” whom I’ve found to have incredible hearing. But studies that have claimed a cancer risk have fairly consistently been contradicted by studies that claim the opposite, and agencies like the FCC state they consistently monitor the latest studies and have found cell radiation is not something that should keep you up at night:

“Some health and safety interest groups have interpreted certain reports to suggest that wireless device use may be linked to cancer and other illnesses, posing potentially greater risks for children than adults. While these assertions have gained increased public attention, currently no scientific evidence establishes a causal link between wireless device use and cancer or other illnesses. Those evaluating the potential risks of using wireless devices agree that more and longer-term studies should explore whether there is a better basis for RF safety standards than is currently used. The FCC closely monitors all of these study results. However, at this time, there is no basis on which to establish a different safety threshold than our current requirements.”

Still, Maine, San Francisco, and numerous other states and municipalities have pushed for new labels on cellular devices warning consumers about the potential cancer risk, much to the chagrin of the wireless industry. The problem isn’t that many towns and cities are worried about the possible risk, it’s that they choose to enact ordinances before the science fully supports them. That recently occurred in Berkeley, where the local government passed an ordinance (pdf) that requires all cellular devices sold to prominently feature the following warning:

“To assure safety, the Federal Government requires that cell phones meet radio frequency (RF) exposure guidelines. If you carry or use your phone in a pants or shirt pocket or tucked into a bra when the phone is ON and connected to a wireless network, you may exceed the federal guidelines for exposure to RF radiation. This potential risk is greater for children. Refer to the instructions in your phone or user manual for information about how to use your phone safely.”

The nation’s biggest industry association, the CTIA, has since filed a lawsuit (pdf) against the city of Berkeley that claims, among other things, that the ordinance violates wireless carrier First Amendment rights. That’s pretty much a standard claim used by all telecom lawyers as part of “throw it at the wall to see what sticks” effort (they’re using it to fight net neutrality, too). But the suit also correctly notes how the government’s guidelines are well above where any actual health impact might actually occur:

“The lawsuit said the instructions falsely imply that the federal guidelines are safety limits. The Federal Communications Commission has stated, based on ?overwhelming? scientific authority, that exceeding its radiation-exposure guidelines ?does not pose a safety concern,? because the standards are set 50 times lower than the danger levels, CTIA?s lawyers said. “According to the federal government, no cell-phone model approved for sale in the United States creates a safety concern,” the suit said.

And while I’m probably the last person to buy what comes out of the CTIA’s mouth, the idea that municipalities should wait for real science before terrifying the local populace and building a nation of paranoids generally seems like a good idea. You get massively more radiation from all manner of technology from microwaves and computer monitors to light bulbs, so if municipalities really want to rush ahead and affix extra labels every potential radiation threat under the sun (including the sun itself), they really ought to get busy. And if you really need to worry about radiation, as XKCD recently noted, there’s far better repositories for your anxiety.

Filed Under: berkeley, cell phones, lawsuit, mobile phones, radiation
Companies: ctia

New Leak Shows NSA's Plans To Hijack App Store Traffic To Implant Malware And Spyware

(Mis)Uses of Technology

from the a-spy-in-the-house-of-apps dept

Proving there’s nowhere spy agencies won’t go to achieve their aims, a new Snowden leak published jointly by The Intercept and Canada’s CBC News shows the NSA, GCHQ and other Five Eyes allies looking for ways to insert themselves between Google’s app store and end users’ phones.

The National Security Agency and its closest allies planned to hijack data links to Google and Samsung app stores to infect smartphones with spyware, a top-secret document reveals…

The main purpose of the workshops was to find new ways to exploit smartphone technology for surveillance. The agencies used the Internet spying system XKEYSCORE to identify smartphone traffic flowing across Internet cables and then to track down smartphone connections to app marketplace servers operated by Samsung and Google.

In addition to discovering that phone ID info, along with geolocation data and search queries, was being sent without encryption, the researchers also found that clearing the app cache failed to remove DNS information — which could allow others to reconstruct internet activity. Citizen Lab has informed the makers of UC Browser of its many vulnerabilities, something the Five Eyes intelligence agencies obviously had no interest in doing.

But IRRITANT HORN went beyond simply delivering malicious implants to unsuspecting users. The Five Eyes agencies also explored the idea of using compromised communication lines to deliver disinformation and counter-propaganda.

[The agencies] were also keen to find ways to hijack them as a way of sending “selective misinformation to the targets’ handsets” as part of so-called “effects” operations that are used to spread propaganda or confuse adversaries. Moreover, the agencies wanted to gain access to companies’ app store servers so they could secretly use them for “harvesting” information about phone users.

As is the case with each new leak, the involved agencies have either declined to comment or have offered the standard defensive talking points about “legal framework” and “oversight,” but it’s hard to believe any legal mandate or oversight directly OK’ed plans to hijack private companies’ servers for the purpose of spreading malware and disinformation. And, as is the case with many other spy programs, IRRITANT HORN involves a lot of data unrelated to these agencies’ directives being captured and sifted through in order to find suitable targets for backdoors and implants.

Filed Under: app stores, google play, irritant horn, man in the middle, nsa, surveillance
Companies: apple, google

South Korea's New Law Mandates Installation Of Government-Approved Spyware On Teens' Smartphones

Too Much Free Time

from the please-spy-on-our-behalf,-thx! dept

Considering the extent of its (most web-related) censorship efforts, South Korea must consider itself fortunate to be next-door neighbors with North Korea. Any time another censorship effort arrives, all the government has to say is, “Hey, at least we’re not as bad as…” while pointing its index fingers in an upward/roughly northerly direction.

It blocks sites and web pages with gusto, subverting its own technological superiority by acting as a Puritanical parental figure. Not that it helps. Every time the government ropes off one area, citizens carve out another. Four years ago, it attempted to pass a law making government-approved computer security software installation mandatory, supposedly in hopes of heading up the enlistment of citizens’ computers into botnet armies.

Now, it’s telling parents they must install government-approved and crafted spyware on the smartphones of any children under the age of 19.

The app, “Smart Sheriff,” was funded by the South Korean government primarily to block access to pornography and other offensive content online. But its features go well beyond that.

Smart Sheriff and at least 14 other apps allow parents to monitor how long their kids use their smartphones, how many times they use apps and which websites they visit. Some send a child’s location data to parents and issue an alert when a child searches keywords such as “suicide,” ”pregnancy” and “bully” or receives messages with those words.

Last month, South Korea’s Korea Communications Commission, which has sweeping powers covering the telecommunications industry, required telecoms companies and parents to ensure Smart Sheriff or one of the other monitoring apps is installed when anyone aged 18 years or under gets a new smartphone. The measure doesn’t apply to old smartphones but most schools sent out letters to parents encouraging them to install the software anyway.

No one appears to have taken a close look at the inner workings of “Smart Sheriff” at this point, but a similar app known as “Smart Relief” also allows parents to monitor their children’s smartphone activities and sends alerts triggered by any of the 1,100+ words on its watchlist.

Some terms it monitors (both in text messages and searches) would obviously raise concerns in parents.

Threat, kill, shut up, violence, destroy, handicap, crazy, prostitute, garbage, thief, porn, suicide, pregnancy, inn, obscene, sex, sexual crime, sexual relationship, prostitution, motel, beer, rape, adultery, run away from home, outcast, invisible person, don’t have friends, jealousy, lonely, stress, don’t want to live, loser, complaint, help, worry, menstruation, adoption, divorce, rape, homosexual love, single parent, IS, terrorism, poison…

Other trigger terms seem to do nothing more than give parents a reason to lock their kids up until they’re old enough to move out:

Girl I like, boy I like, dating, boyfriend, girlfriend, breakup…

This new mandate is obviously creating a chilling effect. Some have noted the Smart Sheriff app may give government agencies access to minors’ communications, all under the pretense of helping parents out. Nearly 80% of South Korean schoolchildren (teens and elementary students) own smartphones. That’s a whole lot of communications potentially being delivered to law enforcement and intelligence agencies (if not also to schools and service providers).

As a result, smartphones are now no longer viewed as essential equipment by teenagers.

To get around the regulations, some students say they will wait until they turn 19 to get a new phone.

“I’d rather not buy a phone,” said Paik Hyunsuk, 17. “It’s violation of students’ privacy and oppressing freedom.”

Open Net Korea, which has tracked South Korean censorship efforts for years, has a translation of the law’s stipulations, which not only requires installation of government-approved spyware apps, but also stipulates cell phone providers actively hassle parents who don’t seem to be taking the mandated monitoring seriously.

Article 37-8 (Methods and Procedures for Providing Means to Block Media Products Harmful to Juveniles, etc.)

(1) According to Article 32-7(1) of the Act, a telecommunication business operator entering into a contract on telecommunications service with a juvenile under the Juvenile Protection Act must provide means to block the juvenile’s access to the media products harmful to juveniles under the Juvenile Protection Act and the illegal obscene information under Article 44-7(1)1 of the ICNA (“Information harmful to juveniles”) through the telecommunication service on the juvenile’s mobile communications device such as a software blocking information harmful to juveniles.

(2) Procedures prescribed below must be followed when providing the blocking means under (1):

At the point of signing the contract:
a. Notification to the juvenile and his/her legal representative regarding types and features of the blocking means; and
b. Check on the installation of the blocking means.

After closing the contract:

Monthly notification to the legal representative if the blocking means was deleted or had not been operated for more than 15 days.

So, not only is it censorware and spyware, but it’s also apparently nagware — with telecom reps calling or emailing every month to remind parents to perform their duties as proxy surveillance operatives for the South Korean government.

Filed Under: mobile phones, smart sheriff, smartphones, south korea, spyware, teenagers, teens