From: A Grudko Date: Sun Jan 13, 2002 4:11am Subject: Re: CELLULAR DETECTOR - Original Message - > MICRO-CELLULAR DETECTOR > Detection range: 5 Mhz - 2.6 Ghz Mmmm - more psudo technical "Janglish". Now I'm even more sceptical about the Star Tac scrambler. Sounds like a diode detector I had in the mid 80's, possibly crossed an RF cellphone ring detector. > ... risky 5 mhz to 2.5 ghz radio frequencies within reach ( hidden transmissions of > your conversations) created by your cellular telephone. I'd like to see a better explanation of the 'risk' before I fork out $480. > so that if the cellular phone emits a hidden hidden? > transmission of your > conversation, when it is in stand-by mode ( when it should not transmit > data) data? >, the Micro- Detector will adopt adopt? > the RF emitted by the cellular phone > This is an equipment that can detect and alert you about the most simple to > the most sofisticated tappings of cellular telephones as intruder microphones. Hey, jma, now you throw away most of those 2 tons of equipment > When the batteries of cellular telephones are removed during > meetings, this is no guarantee that the conversation that is taking place > is not being transmitted to a third party No battery? > since with today?s technology it > is very easy to place a microphone that transmitts at a distance of up to > 500 m. With the Micro- Detector you are able to confirm, after you have > removed the batteries, that no cellular phone is transmitting a > confidential conversation I think we can confirm that a cellphone with no power source is not transmitting without having to buy any toy. Andy Grudko D.P.M., Grad I.S, (S.A.) - Grudko Associates - www.grudko.com , Est. 1981 International business intelligence and investigations - ICQ 146498943 Johannesburg (+27 11) 465 9673 - 465 1487 (Fax), Pretoria (+27 12) 244 0255 - 244 0256 (Fax) SACI, WAD, CALI, SAMLF, UKPIN, AFIO (OS), IWWA, PRETrust, AmChamCom When you need it done right - first time 4534 From: A Grudko Date: Sun Jan 13, 2002 11:56am Subject: Re: Re: Cellular Scramblers - Original Message - > Go to CDMA and you're safe from virtually anything not covered > by a Title III court order served on the service provider. More acronyms... Who or what are CDMA? Andy Grudko D.P.M., Grad I.S, (S.A.) - Grudko Associates - www.grudko.com , Est. 1981 International business intelligence and investigations - ICQ 146498943 Johannesburg (+27 11) 465 9673 - 465 1487 (Fax), Pretoria (+27 12) 244 0255 - 244 0256 (Fax) SACI, WAD, CALI, SAMLF, UKPIN, AFIO (OS), IWWA, PRETrust, AmChamCom When you need it done right - first time "Richard Milhouse Nixon was the first US president whose name contains all the letters from the word "criminal." The second? William Jefferson Clinton" 4535 From: Miguel Puchol Date: Sun Jan 13, 2002 2:45pm Subject: Re: Re: Cellular Scramblers Hi Andy, CDMA = Code Division Multiple Access. It's used in cellular systems in the U.S. Qualcomm is rumoured to have bought some of Dolphin's licenses for European TETRA, to install CDMA systems instead. They already use it in their GlobalStar satphone network - I think they designed it if my memory serves me right... Take a look at a simple comparison between TDMA (used by GSM for example) and CDMA at: http://home.san.rr.com/denbeste/cdmatdma.html All the best, Mike ----- Original Message ----- From: "A Grudko" To: Sent: Sunday, January 13, 2002 6:56 PM Subject: Re: [TSCM-L] Re: Cellular Scramblers > - Original Message - > > Go to CDMA and you're safe from virtually anything not covered > > by a Title III court order served on the service provider. > > More acronyms... Who or what are CDMA? > > Andy Grudko > D.P.M., Grad I.S, (S.A.) - Grudko Associates - www.grudko.com , Est. 1981 > International business intelligence and investigations - ICQ 146498943 > Johannesburg (+27 11) 465 9673 - 465 1487 (Fax), Pretoria (+27 12) 244 > 0255 - 244 0256 (Fax) > SACI, WAD, CALI, SAMLF, UKPIN, AFIO (OS), IWWA, PRETrust, AmChamCom > When you need it done right - first time > "Richard Milhouse Nixon was the first US president whose name contains all > the letters from the word "criminal." The second? William Jefferson Clinton" > > > > > > > ======================================================== > TSCM-L Technical Security Mailing List > "In a multitude of counselors there is strength" > > To subscribe to the TSCM-L mailing list visit: > http://www.yahoogroups.com/community/TSCM-L > > It is by caffeine alone I set my mind in motion. > It is by the juice of Star Bucks that thoughts acquire speed, > the hands acquire shaking, the shaking is a warning. > It is by caffeine alone I set my mind in motion. > =================================================== TSKS > > Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ > > > 4536 From: Justin T. Fanning Date: Sun Jan 13, 2002 3:44pm Subject: Re: Re: Cellular Scramblers I don't understand why the encryption isn't done in the phone's own software. Most modules offered by various companies approach from the analogue prospective, but when you consider the phone itself is a miniature computer, why aren't companies producing modified OS ROMs that encrypt after the speech encoding stage. It would take just a few extra CPU cycles to push the byte value of the encoded audio through a cypher. (Taken to the extreme, you could even have handsets exchanging keys at the beginning of each call!) Providing you didn't modify the GSM/CDMA packet structure only the packet payload, this would seem a far more secure & simplistic approach than external analogue hardware. JF 4537 From: James M. Atkinson Date: Sun Jan 13, 2002 11:19pm Subject: Re: Re: Cellular Scramblers The problem is two-fold. First of all, when you ENCRYPT a signal you are breaking it down into a digital form, then mixing in a "key" and in so doing profoundly changing both the nature and structure of the original signal. Then the encrypted data is converted back into it digital; form for transmission. The problem with encrypting the signal is that you loose bandwidth, and you can either take the performance hit, increase bandwidth, or perform some black magic to "fake out" the missing bandwidth. SCRAMBLING on the other hand does not profoundly change both the nature and structure of the original signal. Instead we add a signal, shift a signal, subtract a signal, sync a signal, or some variation thereof. In some cases of "advanced scrambling" we can chop up the signal in both the time and frequency domain, and then move the sequence around, but not actually change the structure of the content (just make it annoying to the eavesdropper). Now with cellular telephones simply swapping keys would do nothing more then amuse the eavesdropper. What you would have to do is preload each phone with a matching set of ciphering keys, then at the beginning of the call (and at several points during the call) the phones negotiate which keys they will use. Since no key is EVER transmitted over the air (only and index or key bank address number is used in the negotiation). Since the only two people or phones (we hope) have the matching key banks in the two phones, the two users should be a very high level of privacy. Next we need a strong ciphering algorithm (without backdoors), and a data stream randomizing engine just prior to, and just after the encryption engine. On top of these we need constantly refreshed ciphering keys issued by a trusted source, and kept under rigid security. All of this is expensive, complicated, and moderately time consuming. When people want secure communications they should go to their hardwired lines, and not use a phone with an antenna unless they have some wicked good ciphering (not SCRAMBLING... but ENCRYPTION). -jma At 9:44 PM +0000 1/13/02, Justin T. Fanning wrote: >I don't understand why the encryption isn't done in the phone's own >software. Most modules offered by various companies approach from the >analogue prospective, but when you consider the phone itself is a >miniature computer, why aren't companies producing modified OS ROMs >that encrypt after the speech encoding stage. It would take just a >few extra CPU cycles to push the byte value of the encoded audio >through a cypher. (Taken to the extreme, you could even have handsets >exchanging keys at the beginning of each call!) Providing you didn't >modify the GSM/CDMA packet structure only the packet payload, this >would seem a far more secure & simplistic approach than external >analogue hardware. > > >JF -- -------------------------------------------------------------------------------------------------- The First, The Largest, The Most Popular, and The Most Complete TSCM, Bug Sweep, Spy Hunting, and Counterintelligence Site on the Internet. -------------------------------------------------------------------------------------------------- James M. AtkinsonPhone: (978) 546-3803 Granite Island GroupFax: (978) 546-9467 127 Eastern Avenue #291http://www.tscm.com/ Gloucester, MA 01931-8008mailto:jmatk@t... -------------------------------------------------------------------------------------------------- People sleep peaceably in their beds at night only because rough men stand ready to do violence on their behalf. - George Orwell -------------------------------------------------------------------------------------------------- 4538 From: A.Lizard Date: Sun Jan 13, 2002 4:32pm Subject: re: Cellular Scramblers At 08:44 PM 1/13/02 +0000, you wrote: >Message: 3 > Date: Sat, 12 Jan 2002 21:40:52 -0800 > From: Hawkspirit >Subject: Cellular Scramblers > >Anyone know how effective these scramblers are? > >CELLULAR SCRAMBLER > > > >SPECIFICATIONS >Circuit size: 50 mm ´ 35 mm ´ 5 mm >Audio range: 300 up to 3000 Hz >Telephone lines: Cellular >Consumption: 5 Vdc, 80 mA of the battery >Stand-by consumption: 5 Vdc, 80 mA of the battery > >Selling Price: $5800 >Prod. Code: HS-7000 > > > >Security level: III ( High security) >Hop rate: up to 150 times per second It would be more cost-effective for you to get a laptop, a cellular modem, and download a free copy of PGPfone from http://www.pgpi.org . You can decide for yourself whether or not the security level is better from the clear and explicit information presented there on how it works. The advice "don't bet your life on it" is appropriate in either the device you describe or the one I am suggesting you consider instead. Plus, of course, you can use the laptop to play Solitaire or run Excel or read this mailing list via modem connection from when you aren't transmitting SECRET messages. :-) A.Lizard ************************************************************************ new voicemail number,ask if you need it. Personal Web site http://www.ecis.com/~alizard Disaster prep info: http://www.ecis.com/~alizard/y2k.html Littleton Killings: http://www.ecis.com/~alizard/littleto.html backup address (if ALL else fails) alizard@o... IF YOU USE PGP, UPGRADE NOW! A major bug has been discovered in PGP, the new version with the bug fixed is available NOW. PGP 6.5.8 key available by request,keyserver,or on my Web site For e-mail privacy, download PGP from http://www.pgpi.org PGPfone v1.02 and v2.1 available for secure voice conferencing, get your own (W9x,NT,Mac) at http://www.pgpi.org/products/nai/pgpfone/ ************************************************************************ 4539 From: William Knowles Date: Mon Jan 14, 2002 1:53am Subject: Re: Cellular Scramblers On Sat, 12 Jan 2002, Men in black helicopters forced Hawkspirit to write: > Anyone know how effective these scramblers are? > > CELLULAR SCRAMBLER > > SPECIFICATIONS > Circuit size: 50 mm ´ 35 mm ´ 5 mm > Audio range: 300 up to 3000 Hz > Telephone lines: Cellular > Consumption: 5 Vdc, 80 mA of the battery > Stand-by consumption: 5 Vdc, 80 mA of the battery > > Selling Price: $5800 > Prod. Code: HS-7000 > > This scrambling system is used by top entities and companies, > where nowadays information is the most valuable asset. > > These cellular scramblers are sold only by pairs. So effectively we're talking about $11,600? If you are going to pick two of these bad boys up, I have a friend selling airport concessions at Kandahar Airport. I hear rumblings that Afghanistan is supposed to be the next hot tourist destination! - WK *==============================================================* "Communications without intelligence is noise; Intelligence without communications is irrelevant." Gen Alfred. M. Gray, USMC ================================================================ C4I.org - Computer Security, & Intelligence - http://www.c4i.org *==============================================================* 4540 From: David Alexander Date: Mon Jan 14, 2002 3:24am Subject: column titles for Steve How about "Is something bugging you ?" "Scope me in" "Don't sweep it under the carpet" "Sweep dreams" "News sweep" "For the recording" David Alexander M.INSTIS Global Client-Server, Communications & Infrastructure Director Bookham Technology plc DDI: 01235 837823 Mobile: 0779 988 1284 David.Alexander@B... ======================================================================= This e-mail is intended for the person it is addressed to only. The information contained in it may be confidential and/or protected by law. If you are not the intended recipient of this message, you must not make any use of this information, or copy or show it to any person. Please contact us immediately to tell us that you have received this e-mail, and return the original to us. Any use, forwarding, printing or copying of this message is strictly prohibited. No part of this message can be considered a request for goods or services. ======================================================================= Any questions about Bookham's E-Mail service should be directed to postmaster@b.... 4541 From: Justin T. Fanning Date: Mon Jan 14, 2002 3:49am Subject: Re: re: Cellular Scramblers I was thinking along similar lines when I wrote my last post about modifying the on board software. It would be much simpler to wire a handheld/pocket PC running Windows CE (or similar) to a cell phone for use as an external (analogue) crypto device (and for a fraction of the cost of a dedicated unit). A cell phone & pocket PC would easily fit into the same pocket and used in conjunction with a personal hands free kit would look totally normal to any observer. Of course, if you are communicating only to known parties, you could dump the cell phone all together and get a PCMCIA cellular card (http://www.nokia.com/phones/cellularcard/index.html and http://www.nokia.com/phones/cardphone2_0/index.html) for your pocket PC and plug your personal hands free directly into the PC and simply establish GSM data calls between the pocket PC's using PGPfone or the voice over IP encryption software of your choice. I think it was commercially silly that Nokia didn't use an established OS in their 9110/9210 range of "communicator" phones, but instead went with a proprietary OS. I think it's only a matter of time until we see pocket pc's running Windows CE and other common OS's and cell phones merge, then strong mobile crypto will simply become the norm, making the whole concept of a cellular wiretap of limited use. You would still get the raw pen register & location data, but not the call audio. Once your already operating in the digital domain, adding a strong crypto engine is extremely easy and can of course all be done in software at little to no cost. Just before I finish, I note Nokia is about to release a phone with a built in digital camera, 640 x 480 still capture with store & forward capability the Nokia 7650 (http://www.nokia.com/phones/7650/index.html) I believe similar technology has been in use in Asia for some time, but this will be the first mainstream release of it in the west. I wonder if these will start turning up on sweeps concealed in other devices with modified lenses or used as the transport end of a remote camera setup... JF --- "A.Lizard" wrote: > > At 08:44 PM 1/13/02 +0000, you wrote: > >Message: 3 > > Date: Sat, 12 Jan 2002 21:40:52 -0800 > > From: Hawkspirit > >Subject: Cellular Scramblers > > > >Anyone know how effective these scramblers are? > > > >CELLULAR SCRAMBLER > > > > > > > >SPECIFICATIONS > >Circuit size: 50 mm ´ 35 mm ´ 5 mm > >Audio range: 300 up to 3000 Hz > >Telephone lines: Cellular > >Consumption: 5 Vdc, 80 mA of the battery > >Stand-by consumption: 5 Vdc, 80 mA of the battery > > > >Selling Price: $5800 > >Prod. Code: HS-7000 > > > > > > > >Security level: III ( High security) > >Hop rate: up to 150 times per second > It would be more cost-effective for you to get a laptop, a cellular modem, > and download a free copy of PGPfone from http://www.pgpi.org . You can > decide for yourself whether or not the security level is better from the > clear and explicit information presented there on how it works. The advice > "don't bet your life on it" is appropriate in either the device you > describe or the one I am suggesting you consider instead. > > Plus, of course, you can use the laptop to play Solitaire or run Excel or > read this mailing list via modem connection from when you aren't > transmitting SECRET messages. :-) > > A.Lizard > ************************************************************************ > new voicemail number,ask if you need it. > Personal Web site http://www.ecis.com/~alizard > Disaster prep info: http://www.ecis.com/~alizard/y2k.html > Littleton Killings: http://www.ecis.com/~alizard/littleto.html > backup address (if ALL else fails) alizard@o... > IF YOU USE PGP, UPGRADE NOW! A major bug has been discovered in PGP, the > new version with the bug fixed is available NOW. > PGP 6.5.8 key available by request,keyserver,or on my Web site > For e-mail privacy, download PGP from http://www.pgpi.org > PGPfone v1.02 and v2.1 available for secure voice conferencing, get > your own (W9x,NT,Mac) at http://www.pgpi.org/products/nai/pgpfone/ > ************************************************************************ > > > ======================================================== > TSCM-L Technical Security Mailing List > "In a multitude of counselors there is strength" > > To subscribe to the TSCM-L mailing list visit: > http://www.yahoogroups.com/community/TSCM-L > > It is by caffeine alone I set my mind in motion. > It is by the juice of Star Bucks that thoughts acquire speed, > the hands acquire shaking, the shaking is a warning. > It is by caffeine alone I set my mind in motion. > =================================================== TSKS > > Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 4542 From: Miguel Puchol Date: Mon Jan 14, 2002 10:23am Subject: Re: re: Cellular Scramblers Hi Justin, > Of course, if you are communicating only to known parties, you could > dump the cell phone all together and get a PCMCIA cellular card > (http://www.nokia.com/phones/cellularcard/index.html and > http://www.nokia.com/phones/cardphone2_0/index.html) for your > pocket PC and plug your personal hands free directly into the PC > and simply establish GSM data calls between the pocket PC's using > PGPfone or the voice over IP encryption software of your choice. That would be a nice setup - the problem I see is that PocketPCs (with the possible exception of the iPAQ) have rather limited processors and memory, and coding, scrambling, encrypting & sending audio via the network protocol stack (and viceversa) would probably make them spontaneously combust. In any case, the GSM encryption algorithm is reasonably secure for the average user, but as wisely pointed out, not against a court order (or unauthorised tap), or someone with enough resources. > I think it was commercially silly that Nokia didn't use an established > OS in their 9110/9210 range of "communicator" phones, but instead went > with a proprietary OS. I think it's only a matter of time until we > see pocket pc's running Windows CE and other common OS's and > cell phones merge, then strong mobile crypto will simply become the > norm, making the whole concept of a cellular wiretap of limited use. > You would still get the raw pen register & location data, but not the > call audio. Once your already operating in the digital domain, adding > a strong crypto engine is extremely easy and can of course all be done > in software at little to no cost. The Nokia 9210 uses a Crystal EPOC OS, which can be programmed via the free SDK provided by Nokia, which includes C++ and Java environments. Even so, this phone is also RAM and processor limited, so intensive tasks tend not to run too well. > Just before I finish, I note Nokia is about to release a phone with a > built in digital camera, 640 x 480 still capture with store & forward > capability the Nokia 7650 (http://www.nokia.com/phones/7650/index.html) > I believe similar technology has been in use in Asia for some time, > but this will be the first mainstream release of it in the west. I > wonder if these will start turning up on sweeps concealed in other > devices with modified lenses or used as the transport end of a remote > camera setup... Other solutions already exist for this, although more cumbersome. I expect any such unit found on a sweep will be a very nice and expensive gift :-) Cheers, Mike 4543 From: Hawkspirit Date: Mon Jan 14, 2002 11:39am Subject: Re: Theory (brought to mind by Comsec C3I discussion) Jim, As I have mentioned before I really don't care for digital test equipment for analog testing because of resolution losses due to quantizing. So my comment here are relative to my Tektronix 1503. It has been my experience with TDR, that the off hook steady state bias of 48 volts DC is the best case live line status for TDR measurement. At this time the 48 volts is a non interfering steady state DC bias. Inducing line current will not change the impedance parameters along the loop ( until it triggers the CO terminating card into off hook status) or improve TDR resolution. If you cross over into off hook status, then you have to deal with dial tone and source signals which is a problem. I don't know if taking fast time slice frames is really going to give you any resolution improvement. I currently don't have the capability to take triggered time slice measurements, but when I have used this technique it provided minimum resolution because of the shortness of interval. I prefer normal TDR real time renewal pulses and their averaging displays. As far as I know, termination card status will not radically effect the impedance vs distance line characteristic of the loop. A termination card is only a problem when it is sending back signals i.e. dial tone, voice, data. The only thing this technique (crossover measurement) might do is buy you better TDR resolution by limiting terminating card interference but I don't see how. You may shift the signal source impedance by activating the terminating card at the CO but once again, a TDR charts impedance at points of distance along the wire. Termination is but another impedance point to be described by its status at the time of measurement . Roger www.bugsweeps.com At 9:18 AM -0800 1/11/02, Hawkspirit wrote: >From: "James M. Atkinson" > >"What I am in interested in the electrical behavior of a line during >the loop relay seizing the line, and releasing it, and more >specifically the "overshoot" areas of the signal. >I am also interested in the frequencies that appear right at the >moments of making, and then of breaking the line." > >Jim, Could you amplify on this, what kind of line behavior, in what form of >result, would indicate what form of intercept? Thanks, Roger Sure, First I apply a slowly increasing resistance to the line until I seize the line. I repeat this several times until I have a fairly good calculation of the amount of current i need to get flowing to size the line, and the delay between the current draw and the seizure. I then sync my TDR to the circuit so that I start pounding the line with TDR pulse as I approach the seizing current. I then disregard the TDR pulses gathered just prior to the seize so that I am actually looking at TDR pulses during the zero crossing (when it should be really quiet). I can usually grab several hundred usable "pings" during the transition period, and have found it helpful for each "ping" to have a slightly offset rise/fall time or pulse width. The whole goal is to force a predictable zero crossing, and shoot pings into the line during the zero crossing. I start with a 5 pico second ping (using a high energy 90 volt tunnel diode), and slowly increase the rise time and/or pulse width to several milliseconds as I look down the line. I am not using a "sampling" circuit, but actually digitizing and capturing the TDR wave forms directly into a laptop in real time. This way I can see "mouse feces" laying against the wire, and can see any kind of resistive, inductive, or capacitive breach with some extreme resolution. The further down the line I am looking the less the resolution and the wider the pulses. If I can get two lines on the same cable I can ping on one line, and listen to the crosstalk of the signal on the other pair, I can also split the pairing and shoot them that way as well (while in transition). Either way the goal is to locate where the twisting of the pair has been compromised, and not just look for resistive faults. Most sweep methods are obsessed with finding resistive devices in series with the line, or some variation thereof. Sadly, the methods used to find resistive devices are worthless in finding something that is capacitively or inductively isolated (most professional eavesdropping devices are 10-40+ megaohms of impedance, or isolated in such a way that a regular TDR is worthless). The "virgin pair' vs "split pair" TDR will find any kind of inductive coupling on the line (of more then one loop), but you have to do it during the zero crossing. Inductive loading of less then one loop (such as in the case of a linear ferrite pickup) your going to have sweep more then the two wires your looking at (you need a total of four conductors, plus a good ground). Crosstalk analysis will detect any kind of separation or disturbance of the pairs of more then a mm, or even disturbance of the wire insulation (but you have to do it during the zero crossing). It's also helpful to "listen in" to the line with both an audio amp, AND a spectrum analyzer. After you have performed your regular non alerting phone sweep... disconnect the load (or phones), then "listen" to the line with a high impedance audio amp (like Kaisers 1059 or Alan's uAmp), then slowly tune something like the SCD-5 across the line. Next connect your AUDIO (100 Hz to about 10 kHz) spectrum analyzer to the line (though a transient limiter, impedance matching filter, and pre-amp) and look for any kind of control or command tones such as DTMF-C, 2100 Hz, etc (typically appearing as crosstalk). Then switch your your RF spectrum analyzer (though a transient limiter, impedance matching filter, and pre-amp) and look for any kind of RF present on the line. Hint: if someone attaches a transmitter to the line some of the RF will bleed back over the line and you will be able to see it.... however your going to have to "tune" the line to see it reliably. The determine how much current draw you need to seize the line card (remember the phone system works on current draw, not voltage) and bounce some TDR pulses down the line during the zero crossings to see what a regular wet line TDR might miss. The key in all of this is your ability to match the impedance of the line during the transition. This is not just a case of "cranking up the voltage", but one of "tuning up the TDR circuit" though a variable capacitor/varistor and resistor/inductor. You want a near perfect coupling between the TDR (or pulse generator) and the line. To look at it another way, consider that the line is an antenna, and you want a perfect impedance match between a radio, the feed line, and the antenna so you can maximize the signal your giving off or collecting. If you simply crank up your transmit power, but have a bad feed line all you will end of doing is heating up some wire. On the other hand if the feed line has a near perfect match to the radio, and the antenna has a near perfect mach to the feed line all kinds of wonderful things can be done. If you go one step further and fiddle with the antenna and use it at its precise resonant frequency you can work the world with just a small amount of power. Along the same lines if you filter out all the thunder-lizards, tune up your antenna, use good feed lines, and have a good LNA on the antenna you can hear extremely low poer things many thousands of miles away. Now, we take this and apply it to sweeping phone lines: First we find the "quietest time" on the line, which is during the transition point (the loop voltage and dial tone is our thunder lizard). Next we match the impedance of our TDR to the line impedance. Then we "tune" the line by bouncing TDR pulses down the line (with various pulse widths and rise times) while we tweak a capacitor/varactor for clean return (sort of like adjusting an SWR meter). The end result is a super precise series of pulses, clean TDR wave forms, and the exact position of anomalies along the line (including mouse feces touching the line). -jma 4544 From: James M. Atkinson Date: Mon Jan 14, 2002 1:38pm Subject: 2002 Darwin Awards It's that time again! The awards this year are classic. These awards are given each year to bestow upon (the remains of) that individual, who through single-minded self-sacrifice, has done the most to remove undesirable elements from the human gene pool. 5th RUNNER-UP Goes to a San Angelo, California man who died when he hit a lift tower at the Mammoth Mountain ski area while riding down the slope on a foam pad. The 22-year old David Hubal was pronounced dead at Central Mammoth Hospital. The accident occurred about 3a.m., the Mono County Sheriff's department said. Hubal and his friends apparently had hiked up a ski run called Stump Alley and undid some yellow foam protectors from lift towers, said Lt. Mike Donnelly of the Mammoth Lakes Police Department. The pads are used to protect skiers who might hit towers. The group apparently used the pads to slide down the ski slope and Hubal crashed into a tower. It has since been investigated and determined the tower he hit was the one with its pad removed. 4th RUNNER-UP Goes to Robert Puelo, 32, was apparently being disorderly in a St. Louis market. When the clerk threatened to call the police, Puelo grabbed a hot dog, shoved it into his mouth and walked out without paying. Police found him unconscious in front of the store. Paramedics removed the six-inch wiener from his throat where it had choked him to death. 3rd RUNNER-UP Goes to poacher Marino Malerba of Spain, who shot a stag standing above him on an overhanging rock and was killed instantly when it fell on him. 2nd RUNNER-UP "Man loses face at party." A man at a West Virginia party (probably related to the winner last year, a man in Arkansas who used the ..22 bullet to replace the fuse in his pickup truck) popped a blasting cap into his mouth and bit down, triggering an explosion that blew off his lips, teeth, and tongue. Jerry Stromyer, 24, of Kincaid, bit the blasting cap as a prank during the party late Tuesday night, said Cpl. M.D. Payne. "Another man had it in an aquarium hooked to a battery and was trying to explode it." "It wouldn't go off and this guy said I'll show you how to set it off." He put it into his mouth, bit down and it blew all his teeth out and his lips and tongue off, Payne said. Stromyer was listed in guarded condition Wednesday with extensive facial injuries, according to a spokesperson at Charleston Area Medical Division. "I just can't imagine anyone doing something like that," Payne said. 1st RUNNER-UP Doctors at Portland University Hospital said an Oregon man shot through the skull by a hunting arrow is lucky to be alive and will be released soon from the hospital. Tony Roberts, 25, lost his right eye last weekend during an initiation into a men's rafting club, Mountain Men Anonymous (probably known now as Stupid Mountain Men Anonymous) in Grant's Pass, Oregon. A friend tried to shoot a beer can off his head, but the arrow entered Robert's right eye. Doctors said that had the arrow gone 1 millimeter to the left, a major blood vessel would have been cut and Roberts would have died instantly. Neurosurgeon Doctor Johnny Delashaw at the University Hospital in Portland said the arrow went through 8 to 10 inches of brain with the tip protruding at the rear of his skull, yet somehow managed to miss all major blood vessels. Delashaw also said that had Roberts tried to pull the arrow out on his own he surely would have killed himself. Roberts admitted afterwards that he and his friends had been drinking that afternoon. Said Roberts, "I feel so dumb about this." No charges have been filed, but the Josephine County district attorney's office said the initiation stunt is under investigation. Now THIS YEAR'S WINNER. (The late) John Pernicky and his friend, (the late) Sal Hawkins, of th great State of Washington, decided to attend a local Metallica concert at the George Washington amphitheater. Having no tickets (but having had 18 beers between them), they thought it would be easy to "hop" over the nine foot fence and sneak into the show. They pulled their pickup truck over to the fence and the plan was for Mr. Pernicky, who was 100-pounds heavier than Mr. Hawkins) to hop the fence and then assist his friend over. Unfortunately for (the late) Mr. Pernicky, there was a 30-foot drop on the other side of the fence. Having heaved himself over, he found himself crashing through a tree. His fall was abruptly halted (and broken, along with his arm) by a large branch that snagged him by his shorts. Dangling from the tree with a broken arm, he looked down and saw some bushes below him. Possibly figuring the bushes would break his fall, he removed his pocket knife and proceeded to cut away his shorts to free himself from the tree. Finally free, Mr. Pernicky crashed into holly bushes. The sharp leaves scratched his ENTIRE body and now, without the protection of his shorts, a holly branch penetrated his rectum. To make matters worse, on landing, his pocket knife penetrated his thigh. Mr. Hawkins, seeing his friend in considerable pain and agony, threw him a rope. Intended pull him to safety by tying the rope to the pickup truck and slowly driving away. However, in his drunken haste/state, he put the truck into reverse and crashed through the fence landing on his friend and killing him. Police arrived to find the crashed pickup with its driver thrown 100 feet from the truck and dead at the scene from massive internal injuries. Upon moving the truck, they found John under it half-naked, scratches on his body, a holly stick in his rectum, a knife in his thigh, and his shorts dangling from a tree branch 25-feet in the air. ... Congratulations gentlemen, you win... -- -------------------------------------------------------------------------------------------------- The First, The Largest, The Most Popular, and The Most Complete TSCM, Bug Sweep, Spy Hunting, and Counterintelligence Site on the Internet. -------------------------------------------------------------------------------------------------- James M. AtkinsonPhone: (978) 546-3803 Granite Island GroupFax: (978) 546-9467 127 Eastern Avenue #291http://www.tscm.com/ Gloucester, MA 01931-8008mailto:jmatk@t... -------------------------------------------------------------------------------------------------- People sleep peaceably in their beds at night only because rough men stand ready to do violence on their behalf. - George Orwell -------------------------------------------------------------------------------------------------- 4545 From: James M. Atkinson Date: Mon Jan 14, 2002 9:17pm Subject: Estimate Worksheet Updated For those list members who are interested in such things... I have just updated and uploaded our current "Estimate Worksheet" to the website, and would be happy to get comments and feedback from the list concerning it. It can be found at: http://www.tscm.com/estimate.html -jma -- -------------------------------------------------------------------------------------------------- The First, The Largest, The Most Popular, and The Most Complete TSCM, Bug Sweep, Spy Hunting, and Counterintelligence Site on the Internet. -------------------------------------------------------------------------------------------------- James M. AtkinsonPhone: (978) 546-3803 Granite Island GroupFax: (978) 546-9467 127 Eastern Avenue #291http://www.tscm.com/ Gloucester, MA 01931-8008mailto:jmatk@t... -------------------------------------------------------------------------------------------------- People sleep peaceably in their beds at night only because rough men stand ready to do violence on their behalf. - George Orwell -------------------------------------------------------------------------------------------------- 4546 From: Guy Urbina Date: Mon Jan 14, 2002 11:59am Subject: Steve's column name Hi Steve, Here's mine off the top of my head....... "Sigint suggestions" "Wired wisdom" best regards, -Guy 4547 From: tek492p Date: Mon Jan 14, 2002 11:13pm Subject: Re: attacking CCS To the group -- I agree 100% with Steve Uhrig. For more information about CCS, go to the top of the "Messages" page, and do a "search" on CCS. Jack 4548 From: Justin T. Fanning Date: Sat Jan 15, 2028 3:07am Subject: Re: Steve's column name Hi Steve, how about "Bugger off!" "Stop bugging me!" "The bug swatter" "Bug eyed" "Bug spray" "A Bug's life" Hope this helps ... JF 4549 From: Dave Emery Date: Tue Jan 15, 2002 1:36am Subject: Re: Re: Theory (brought to mind by Comsec C3I discussion) On Mon, Jan 14, 2002 at 09:39:14AM -0800, Hawkspirit wrote: > Jim, > activating the terminating card at the CO but once again, a TDR charts > impedance at points of distance along the wire. Termination is but another > impedance point to be described by its status at the time of measurement . > Roger > www.bugsweeps.com As an engineer with an academic interest in TSCM but no actual practical experiance in that business but with significant rf and measurement experiance in various other areas over the years including design of high speed digital PC boards and networking devices and EMI control, I have to say that what you have to say makes much more sense to me than what Jim says. I cannot see why the status of line card relays or their modern solid state equivalent at the end of a transmission line should make any difference at all in the echos bounced back from discontinuities in the line in response to a pulse that has not even reached the end of the wire at the time the echoes are measured and recorded. Simple physics and the speed of light suggest otherwise. I suppose, just as you say, that various AC signals on the line might contaminate the measurement with various sorts of noise (but most tones and signalling found on a phone line are very very low in frequency compared to the echoes seen on a TDR). But the presence or absence of a particular terminating network should make no difference. There is a technique that has seen increasing use with cabling in communications systems where there are frequency selective networks that make traditional unit impulse based TDR impractical - FFT based sweep probing. This operates by injecting a swept carrier and measuring the complex return signal precisely (eg amplitude and phase). From the actual return signal and known exciting signal it is actually possible to derive - using a FFT - much the same impedance versus distance chart as a classical radar like TDR yields. I suppose that for such slow sweeps of a line it would be helpful to have a well behaved termination or even no termination on the other end, but unless I am confused it seems to me that TSCM techs use classical unit impulse type TDR radars rather the swept CW techniques (which are more like SAR radar). But one of the reasons I read the TSCM list is to learn of the technology used by actual practitioners in the field and perhaps I miss some subtlety of Jim's technique and the theory behind it. -- Dave Emery N1PRE, die@d... DIE Consulting, Weston, Mass. PGP fingerprint = 2047/4D7B08D1 DE 6E E1 CC 1F 1D 96 E2 5D 27 BD B0 24 88 C3 18 4550 From: Steve Uhrig Date: Tue Jan 15, 2002 8:45am Subject: Re: Theory - TDR Once upon a midnight dreary, Dave Emery pondered, weak and weary: > I cannot see why the status of line card relays or their modern > solid state equivalent at the end of a transmission line should > make any difference at all in the echos bounced back from > discontinuities in the line in response to a pulse that has not > even reached the end of the wire at the time the echoes are > measured and recorded. Simple physics and the speed of light > suggest otherwise. I haven't been following the thread, so if my response seems out in left field, it probably is. The ideal situation when using a TDR in TSCM is to have the TDR set to the impedance of the line under test (not many machines have the ability to set this parameter), then to see anything on the line you want an impedance mismatch --- of the fault or whatever you are looking for -- to be as miserable as possible. The most difficult thing to see on a TDR is a splice with perfect impedance match. The easiest thing to see is the grossest mismatch, like a short or an open. Zero impedance or infinite impedance. Re terminating at the CO -- seems a moot point since there is a lot of garbage, like loading coils, between the our end of the line and the CO, which we cannot read through. Speed of light -- in free space -- is different than in a conductor. You can't use the same formulas without introducing a correction factor called Velocity of Propogation (VOP), or velocity factor to the old buzzards. 1 is the speed of light. Speed in a conductor is something less than the speed of light, so you set the VOP on the TDR to whatever it is for the particular line under test, always a factor less than zero. 0.88, or 0.66 are typical for different types of coax, for example. Especially if you are trying to get a precise distance from the TDR to a fault, you need an accurate velocity factor. Some people leave the TDR set to a fixed value all the time, like .66 as a default for twisted pair phone line. It doesn't matter a whole lot in many cases, as the machine can measure a lot more accurately than you can. You can't precisely measure a line up a wall, down a hallway, between floors and all around, to where hundredths of a point of velocity factor matter. Velocity factor is different for each different type of cable. If you are running new cable, it will be listed in the manufacturer's spec sheet for the cable. I insist on marking it on the spools of all cable we have in stock, so I don't have to remember it or look it up later if all I want to do is see how much string is left on the spool. And once the cable leaves the factory and enters the real world, the velocity factor starts changing. Not by much, or quickly, but a 10 year old piece of coax running up the tower will read noticeably different than what the spec says it should be for Andrews Type XYZ hardline. If all this is completely irrelevant to the subject being discussed before I stuck my nose in, I apologize. Anyone who has the time -- there is a need for a good TDR tutorial specifically for TSCM, starting at the "see Spot Run" level. The few other people whpo have written books have gone down in history and helped many people. Glenn's stuff and Ted Swift's stuff are good examples. Steve ******************************************************************* Steve Uhrig, SWS Security, Maryland (USA) Mfrs of electronic surveillance equip mailto:Steve@s... website http://www.swssec.com tel +1+410-879-4035, fax +1+410-836-1190 "In God we trust, all others we monitor" ******************************************************************* 4551 From: Date: Tue Jan 15, 2002 1:17pm Subject: re Steves column. " The Straight Line On Surveillance" " The Straight Line on Surveillance Technology" ,as in direct line from horse's mouth, ,as in " Don't cross this legal line,re do's and dont's' ,as in " line of privacy rights" ,as in phone line That's all i can come up with at this moment, although, i think the list members have some good ideas. Maybe ,a different title every week! That sounds interesting! HAVE A GREAT DAY !!! 4552 From: Rafail Kapustin Date: Tue Jan 15, 2002 0:43pm Subject: Re: Re: Attacking CCS? Yes, exactly that Hi everyone, I would like to thank Steve for very detailed reply regarding CCS equipment - it will save starters in a field like me from making a mistake. Thank you Rafail --- Steve Uhrig wrote: > Once upon a midnight dreary, david_johnrobinson > pondered, weak and weary: > > > Two things hit me regarding this listing; A) so > what is new? this > > stuff has been out there advertised for years. B) > Why does every > > one immediatly jump and say CCS? > > Because some of us have been around a long time and > have seen > this stuff over and over and over. I'm talking > longer than some > of the players in this industry have been alive and > longer than > practically anyone in the industry has been in > business. > > > Let me put my cards on the table, I was the > operations > > manager for CCS for a time here in London > > Then pardon me for being forthright, but either you > were > incredibly naive or you are a crook. > > > and they realy do not deserve the bad mouthing > they get from > > the group, > > See comment above. If you really believe this, I > will go with > naive. > > > OK so most of the stuff they provide is "crap" > from a > > professional point of veiw, but to most of their > clients it's > > exactly what they want > > One could make the same argument about illegal drugs > or > abortion. That doesn't justify it. > > > Any one wanting professional equipment would > /should come to > > professional suppliers like our company Department > Q who only > > deal with Government level bugs , covert equipment > and GSM > > tracking. > > Now I will change my opionion back to crook. > > If you only deal with 'Government level bugs', why > are you > inviting anyone to come to you. Do you claim to be > supplying > 'Government level bugs' to anyone? In the unlikely > event you > supply anything at all, I would expect it would be > to anyone > *other* than the government. > > Remember, there are a (very) few people around who > actually work > in these technologies, with government clients on a > daily basis, > and cannot be fooled. Most of them are smarter than > me and keep > their mouths shut. I speak my mind. > > > I don't think it is CCS for several reasons > > > > For all the reasons you mention, it absolutely fits > the pattern > of CCS. Lie to someone with money, schmooze them, > pump up their > egos and convince them they will make outrageous > profits dealing > with CCS. The ignorant fool (and ANYONE who deals > with CCS/G-COM > in ANY way is an ignorant fool) hands CCS five or > six figures > for the 'privilege' of acquiring their absolutely > worthless but > impressive boxes of nonfunctional bells and > whistles. At that > point the relationship, such as it was, is over > unless CCS feels > they can extract/extort even more money from the > ignorant fool. > > In this case apparently, and I have seen it more > times than I > could count, the ignorant fool private labeled the > crap because > he wants the other ignorant fools who might buy it > to think he > manufactured it. CCS doesn't care. They got their > money. They > probably charged the guy extra for private labeling > it, which in > itself is funny because CCS was the original king of > > repackaging and slapping their name on standard > products from > other manufacturers and claiming it as their own. > > CCS cheated the guy pushing this private labeled > crap, because > he was an ignorant fool and had more money than he > had brains. > ANYONE who does any homework on CCS would never deal > with them > on any level. > > > a CCS licence costs $150.000 with no stock. > > A CCS 'license' or 'distributorship' or whatever > they choose to > call it costs precisely as much money as they can > extract from > the ignorant fool who gets involved with them. They > (CCS) are > very good at developing financial information on > their victims, > and this is how much they charge. > > Same with 'exclusive' rights to distribute CCS's > vaporware in a > particular country. I had the distinct pleasure at a > trade show > in New Delhi some years ago of introducing three > 'exclusive > distributors for all of India' to each other. Each > had paid, as > I recall, sums between the rupee equivalent of USD > $50,000 and > $200,000 for the alleged privilege of having an > 'exclusive' > representation for CCS in all of India. None > received anything > in return. Nada. > > If I called them tomorrow, I could purchase the > exclusive rights > to distribute their products in any country you > could name, and > I likely would be the 50th person to purchase the > exclusive. > > You were a member of the den of thieves. You know > how the game > is played. You just have to pretend to defend them > to justify > stealing money from your victims. > > If you led the victim (ignorant fool) to believe > something which > was not true, either from a product representation > standpoint or > from an equipment performance standpoint, then you > committed > fraud. Whether you believe it or not, some day there > will be a > day of judgement, and you will have to provide an > accounting, > before man possibly and to God definitely, for your > actions. You > do have the opportunity to escape those penalties > and erase the > slate, and if you wish to discuss this issue only > via PRIVATE > email with me I will be glad to do so. > > > If you want to worry, and it seems you do , try > talking to > > professional covert suppliers - if you call us a > spy shop you > > had better duck > > You already provided substantial incontrovertible > testimony that > you are a crook, and your likely fictitious claims > indicate you > still are operating in the mode you learned from > CCS. Therefore > you fit this list's generic, and my personal, > definition of a > spy shop. > > This month is 30 years I have been manufacturing > electronic > surveillance and intelligence gathering products for > government > agencies. Do some research and you will find that is > true. > > === message truncated === __________________________________________________ Do You Yahoo!? Send FREE video emails in Yahoo! Mail! http://promo.yahoo.com/videomail/ 4553 From: James M. Atkinson Date: Tue Jan 15, 2002 10:41pm Subject: Face the Storms and Smile A little girl walked to and from school daily. Though the weather that morning was questionable and clouds were forming, she made the daily trek to the elementary school. As the afternoon progressed, the winds whipped up, along with thunder and lighting. The mother of the little girl felt concerned that her daughter would be frightened as she walked home from school and she herself feared that the electrical storm might harm her child. Following the roar of thunder, lightning, like a flaming sword, would cut through the sky. Full of concern, the mother quickly got into her car and drove along the route to her child's school. As she did so, she saw her little girl walking along, but at each flash of lightning, the child would stop, look up, and smile. Another and another were to follow quickly and with each, the little girl would look at the streak of light and smile. When the mother's car drew up beside the child she lowered the window and called to her, "What are you doing? Why do you keep stopping?" The child answered, "I am trying to look pretty. God keeps taking my picture." May God bless you today as you face the storms that come your way. And don't forget to smile. -- -------------------------------------------------------------------------------------------------- The First, The Largest, The Most Popular, and The Most Complete TSCM, Bug Sweep, Spy Hunting, and Counterintelligence Site on the Internet. -------------------------------------------------------------------------------------------------- James M. AtkinsonPhone: (978) 546-3803 Granite Island GroupFax: (978) 546-9467 127 Eastern Avenue #291http://www.tscm.com/ Gloucester, MA 01931-8008mailto:jmatk@t... -------------------------------------------------------------------------------------------------- People sleep peaceably in their beds at night only because rough men stand ready to do violence on their behalf. - George Orwell -------------------------------------------------------------------------------------------------- 4554 From: Date: Wed Jan 16, 2002 2:30am Subject: California's Wiretap Bill Scrapped California's Wiretap Bill Scrapped SACRAMENTO, Calif. (AP) - Gov. Gray Davis' proposal to expand state wiretapping laws has been dropped after state attorneys reviewing the plan said it exceeded federal law. The bill would have allowed state and local authorities to obtain wiretaps through state courts and permit them to conduct surveillance on e-mail and Internet communications. President Bush signed legislation late last year that broadened federal wiretapping activities but the law did not expand authority at the state level. Davis spokesman Steve Maviglio said the legislation was dropped Tuesday after lawmakers learned of the opinion by the Legislative Counsel's office. Maviglio said the Davis camp may try to reintroduce the bill later this year. Under state law, authorities need a court order to tap a phone line. The proposed legislation would have allowed ``roving'' wiretaps that can follow a person from one number to the next. The plan was the centerpiece of Davis' State of the State address last week. AP-NY-01-16-02 0706EST 4555 From: zack <10-33@c...> Date: Wed Jan 16, 2002 8:52pm Subject: Record device Due to experiences which have occurred within the past few days, I would like to enlist this list for some information. I am looking for a modest price recording device which would record phone conversations as soon as I pick up the phone, taking into account I also use the same line for Internet use. ( long play with time/date ). PS..... I live in a state with one party only knowledge as to recording. Thanks visit http://www.copscops.com Washington DC Police Department http://mpdc.dc.gov/main.shtm "Our enemies have made the mistake that America's enemies always make. They saw liberty and thought they saw weakness. And now, they see defeat. " George W Bush President of the United States of America God Bless The USA http://www.copscops.com/blessusa.htm 4556 From: James M. Atkinson Date: Wed Jan 16, 2002 9:28pm Subject: Legal Office Sinks Davis' Wiretap Bill http://www.latimes.com/news/local/politics/cal/la-000004144jan16.story?coll=la%2Dnews%2Dpolitics%2Dcalifornia January 16, 2002 RESPONSE TO TERROR Legal Office Sinks Davis' Wiretap Bill Security: The proposal is dropped after legislative counsel finds 'roving' tracking of calls illegal. By MIGUEL BUSTILLO and NANCY VOGEL, TIMES STAFF WRITERS SACRAMENTO -- Gov. Gray Davis' proposal to let state and local police obtain roving wiretaps on suspected criminals was dropped from the legislation containing it Tuesday after the legislative counsel's office concluded that it was illegal. The proposal, a centerpiece of Davis' State of the State address last week, had been welcomed by some law enforcement leaders but criticized by civil libertarians and some liberals. Davis unveiled the idea at the outset of a reelection bid in which he faces challenges from three Republicans--former Los Angeles Mayor Richard Riordan, Secretary of State Bill Jones and investor Bill Simon Jr.--each vying for the GOP nomination to take on the Democratic incumbent. Asked to size up the chances of a roving-wiretap bill passing now, Assemblyman Fred Keeley (D-Boulder Creek) said: "I think none. There is no opportunity, because whether the Legislature has the will or not, our attorney is telling us it is moot because we lack the authority." Although aides to the governor challenged that interpretation, the legislative counsel said that a state law authorizing roving wiretaps for state and local prosecutors and police would exceed the authority federal wiretapping law gives states, and would thus be invalid. President Bush signed legislation in October that broadened federal wiretapping abilities to target suspected terrorists, but that law did not expand states' powers to allow roving wiretaps at the local level, the counsel concluded. Davis spokesman Steve Maviglio acknowledged that Assemblyman Carl Washington (D-Paramount) dropped roving wiretaps from his legislation Tuesday after hearing the legal opinion, but said the Davis administration would continue to work with the lawmaker, and may attempt to have it reinstated later this year. Maviglio said the Davis administration contacted local district attorneys and the Justice Department before making the proposal public, and was informed it was within the state's powers. George Vinson, Davis' security advisor, added that changes to federal law are still in flux, and that state lawmakers should eventually be able to pass legislation this year permitting roving wiretaps on suspected terrorists. With conventional wiretaps, police must obtain a judge's order authorizing them to listen in on a specific phone number. Roving wiretaps allow them to follow a suspect from number to number. Vinson said the administration may agree to back an alternative proposal that would would still require police to go to a judge any time they wanted to expand their wiretap authority but would speed up that process. Legal Questions Only One of Plan's Problems Some constitutional authorities joined with the legislative counsel in questioning Davis' approach. Erwin Chemerinsky, a USC professor of constitutional law, said Davis appeared to have acted without the benefit of careful legal analysis. The legal questions about Davis' wiretap proposal are only part of its difficulties. It also has been criticized by civil libertarians and some Democrats in the Assembly and Senate, who are wary of its proposed expansion of police power. As a result, some lawmakers on Tuesday predicted that the proposal is unlikely to become law. Assemblyman Washington, who was carrying the measure sponsored by Los Angeles County Sheriff Lee Baca and Dist. Atty. Steve Cooley, and whose bill Davis has seen as the best opportunity for expanded wiretap authority--had to pare back his bill just to get it out of the Public Safety Committee, which he chairs. Washington's bill, AB 74, initially would have allowed state and local authorities to obtain roving wiretaps through state courts, and also would have allowed them to conduct surveillance on e-mail and Internet communications. Law enforcement leaders argue that wiretap laws have failed to keep up with technology, and that criminals can now sidestep surveillance by switching mobile phones and using e-mail and Internet chat rooms to communicate. A roving wiretap would allow police to keep up with the times and the criminals, they say. Authorities must now obtain court orders to tap specific phone numbers, which they say puts them at a disadvantage in an age when criminals can buy cheap prepaid cell phones at convenience stores. "The world of terrorism in terms of criminal planning and strategizing has clearly shown law enforcement that these people are pretty clever," Baca said in an interview. "They will use one cell phone, turn it off, come back with another phone, turn that one off . . . conducting their transactions on dozens of mobile phones. Our current system prevents us from following that conversation without going back into court." Roving wiretaps and e-mail surveillance have come under fire, however, since Davis proposed them last week. It was because of that criticism that Washington requested the legal opinion from the legislative counsel. Once he received it, he announced that his bill would no longer authorize roving wiretaps. Several lawmakers also objected to the provisions of Washington's bill that would extend wiretapping to e-mail and the Internet, arguing that the privacy of countless innocent people would be infringed. Washington then scratched those sections from his measure as well. Assemblyman Keeley was among those who raised doubts about the idea of police and prosecutors screening e-mail. During a spirited committee hearing, he questioned the prosecutors and police who supported that proposal, and they conceded that they were still developing ways to screen e-mail without unduly intruding on personal privacy. "These are the types of scattershot investigative tools that result in the widespread loss of personal privacy," said Francisco Lobaco of the American Civil Liberties Union, which opposed the bill. Having pared back his legislation Tuesday, Washington's bill now would only slightly expand local wiretapping powers to target suspected terrorists planning to use anthrax or other "weapons of mass destruction." Its main purpose is to allow local police and prosecutors to continue to obtain wiretaps beyond next year, when their power to do so under state law is set to expire. Slight Expansion Is All Most Lawmakers Expect Such a law, several lawmakers said, is as strong as is likely to pass in the Capitol this year, particularly after the counsel's office opinion. Chemerinsky called the legislative counsel's analysis a "very strong opinion" showing that state and local governments cannot engage in wiretapping except as permitted by federal law. Chemerinsky and others have questioned the need for expanded state wiretapping powers, noting that local authorities can already partner with the federal government to conduct surveillance on suspected terrorists if needed. A recent report by the state Department of Justice showed that California law enforcement requested 88 wiretap orders in 2000. Judges granted every request. The wiretaps cost an average of $56,767 and resulted in the arrests of 271 people. Of those, 17 were convicted. Most were used in drug investigations and involved home phones, cellular phones and pagers. For information about reprinting this article, go to http://www.lats.com/rights -- -------------------------------------------------------------------------------------------------- The First, The Largest, The Most Popular, and The Most Complete TSCM, Bug Sweep, Spy Hunting, and Counterintelligence Site on the Internet. -------------------------------------------------------------------------------------------------- James M. AtkinsonPhone: (978) 546-3803 Granite Island GroupFax: (978) 546-9467 127 Eastern Avenue #291http://www.tscm.com/ Gloucester, MA 01931-8008mailto:jmatk@t... -------------------------------------------------------------------------------------------------- People sleep peaceably in their beds at night only because rough men stand ready to do violence on their behalf. - George Orwell -------------------------------------------------------------------------------------------------- 4557 From: James M. Atkinson Date: Wed Jan 16, 2002 9:32pm Subject: Los Alamos Scientist Criticizes FBI in Book [(grumble, grumble)... Lee should still be in prison (grumble, grumble). See what happens when investigators gets caught lying trying to make a case? (grumble, grumble) -jma] http://www.washingtonpost.com/wp-dyn/articles/A52000-2002Jan15.html Los Alamos Scientist Criticizes FBI in Book Lee Calls Copied Tapes 'Crown Junk' By Walter Pincus Washington Post Staff Writer Wednesday, January 16, 2002; Page A08 Former Los Alamos scientist Wen Ho Lee maintains he was selected for prosecution because of his ethnic background and asserts that the computer tapes he downloaded, which were the basis of his guilty plea, were not the "crown jewels" of nuclear weapons building, but "largely the crown junk." In his newly published autobiography, "My Country Versus Me," written with the help of Helen Zia, Lee acknowledges that his downloading of computer tapes was a security violation. But he blames the multi-year FBI investigation of his activities and his jailing in solitary confinement for nine months on espionage charges partly on Washington hysteria and spineless bureaucrats. Most of all, the Taiwan-born Lee writes, "Had I not been Chinese, I never would have been accused of espionage and threatened with execution." Lee's book, however, does not totally explain why he downloaded computer codes associated with nuclear weapons designs in 1993-94, and again in 1997. In fact, he focuses his attention on the earlier download and not at all on those of 1997. As he did in earlier interviews, he said in his book that the downloading in the 1993-94 period was done "to protect my files, to make a backup copy." He adds, as he did just before his guilty plea to the surprise of his own lawyers, that he had "made more than one backup copy, actually." Why more than one backup? Because, he writes, "there were no lab rules against making copies -- most prudent people keep copies of their important documents." He also said he had "lost some important codes before, when the [Los Alamos computer] operating system changed, and I didn't want that to happen again." But, as Los Alamos senior scientists testified at Lee's trial, and another newly published book on the Lee case, "A Convenient Spy," repeats, Los Alamos scientists in the highly classified X Division where Lee worked were repeatedly offered opportunities to copy their own work in case of computer failure, "day by day, even computer stroke by computer stroke," one said recently. Reporters Dan Stober and Ian Hoffman provide another reason for Lee's downloading. He might have wanted to use the data in a future job, either with a Taiwan company called Asiatek, which has close ties to that country's defense ministry, or some other company. As for the computer codes themselves, called the "crown jewels" of the nuclear weapons business by one of the nuclear lab's senior scientists, Lee called them "the crown junk" and "the biggest nuclear weapons secret that [Los Alamos National Laboratory] and the government have to hide. "The cornerstone of nuclear deterrence," Lee writes, "is to scare the rest of the world into thinking that our weapons are bigger, stronger, faster, and far more destructive than theirs." And while saying that statement is true, Lee goes on to say, "the science of nuclear weapons hasn't progressed much" since the end of the Cold War and the test ban treaty. He says scientists like himself still at the U.S. weapons labs "spend their time figuring out what to do with rusty, old nuclear bombs." The stockpile stewardship program, "fixing old bombs and digging up old test data" in trying to keep U.S. nuclear weapons safe and reliable, is "like eating leftovers for dinner, [but] it's better than nothing." Much of the preliminary testimony and motions in court went Lee's way, particularly because of the work of his two lead lawyers, John Cline and Mark Holscher. But when the decision came before trial to accept an agreement that included pleading guilty to one count of mishandling classified information, Lee writes that Cline and Holscher told him he had a 95 percent chance of winning "if it goes to trial, but a five percent chance that we could lose. If we lose, you could face life in prison. Are you willing to take that risk?" Saying "it was not worth the risk of spending the rest of my life in prison," Lee said he agreed, since losing the right to vote, own a gun, run for public office or serve on a jury was "less of a sacrifice . . . than to risk a prison sentence." © 2002 The Washington Post Company -- -------------------------------------------------------------------------------------------------- The First, The Largest, The Most Popular, and The Most Complete TSCM, Bug Sweep, Spy Hunting, and Counterintelligence Site on the Internet. -------------------------------------------------------------------------------------------------- James M. AtkinsonPhone: (978) 546-3803 Granite Island GroupFax: (978) 546-9467 127 Eastern Avenue #291http://www.tscm.com/ Gloucester, MA 01931-8008mailto:jmatk@t... -------------------------------------------------------------------------------------------------- People sleep peaceably in their beds at night only because rough men stand ready to do violence on their behalf. - George Orwell -------------------------------------------------------------------------------------------------- 4558 From: Steve Uhrig Date: Wed Jan 16, 2002 9:45pm Subject: Re: Record device Once upon a midnight dreary, zack pondered, weak and weary: > Due to experiences which have occurred within the past few > days, I would like to enlist this list for some information. I > am looking for a modest price recording device which would > record phone conversations as soon as I pick up the phone, > taking into account I also use the same line for Internet use. > ( long play with time/date ). PS..... I live in a state with > one party only knowledge as to recording. Very easy problem. Connect a tape recorder to your phone line via any standard method, and start the recorder manually when you make or receive a call you wish to record. Since you are in a one party consent state, you are OK as the one party, and it would only be your own calls you would be recording, so you merely can start the machine yourself when needed. That way, you won't fill the tape needlessly with Internet noise/data instead of voice. Steve ******************************************************************* Steve Uhrig, SWS Security, Maryland (USA) Mfrs of electronic surveillance equip mailto:Steve@s... website http://www.swssec.com tel +1+410-879-4035, fax +1+410-836-1190 "In God we trust, all others we monitor" ******************************************************************* 4559 From: Hawkspirit Date: Wed Jan 16, 2002 10:18pm Subject: Electronic Harassment Sweepers http://www.siin.com/invres.html This is our most recommended service for clients who are serious about solving their EH problems permanently. This service while being the most expensive is the best and most cost effective. You will receive at least 2 experts. One will be a scientist with experience and understanding of electronic harassment, the science behind it and defensive measures. You will also receive an investigative research specialist, our IR Specialists have experience and training in many aspects such as surveillance, counter-surveillance, investigative sciences, law, psychology, undercover operations, and computer security. You will never receive an inexperienced team, we field train all of our staff and test them regularly. What you get essentially is two experts that will locate, eliminate, and document your situation to ultimately solve your problem. The initial portion of this service is conducted covertly. Due to the secure nature of our methods we do not publish how our covert activities are carried out. Rest assured that no one will know of our activities or our arrival. Once we announce our presence to the client, we begin a thorough and extensive test of your residence, you and appropriate individuals, vehicles, personal electronics, computers and appropriate areas. On the conclusion of the testing we will inform you of our findings. We take detailed case history, speculative and factual statements from appropriate parties. Once we determine the source of the Electronic Harassment, we will take appropriate countermeasures. You will also receive a report (including a CAD rendering of your residence) detailing our tests, findings and "hotspots". Using a combination of our state-of-the-art equipment, counter-surveillance techniques and hands-on approach we will detect almost any signal between DC to Infrared, this includes: · DC ELF pulse · AC ELF pulse · Low Hz audio to Ultrasonic levels · Microwave signals (1GHz to 20GHz) & >20GHz pulses · LF to UHF RF signals (DC to 20GHz) (Linear or Digital) · Laser, Infrared, visible light spectrum · Soliton and Scalar waves · EMP · AM/FM transmissions · High energy static fields · High voltage ion fields · Plasma radiation · Nuclear radiation (includes X-rays, Gamma, Beta and Alpha) This also includes detection of tracking devices, bugs, wireless surveillance equipment, and other electronic radiation signal emitting devices. We can also detect metallic and semi-metallic devices. 4560 From: Ray Van Staden Date: Wed Jan 16, 2002 10:09pm Subject: Demonstration - Combat Terrorism The Leaders of the world are asking for your support to combat terrorism and we're encouraging to demonstrate against them next Friday, at 15:00. It is a well-known fact that the Taliban are against alcohol consumption and think it is sinful to look at a naked woman. Therefore, Friday at 15:00, women should run naked through the office while men chase them with a beer in their hands. This is the best way to show our disgust for the Taliban and will hopefully help us in detecting the terrorists among us (anybody who doesn't do as proposed will be deemed a terrorist and denounced to the World). Your efforts are much appreciated in the name of a free, democratic world. [Non-text portions of this message have been removed] 4561 From: Matthew Paulsen Date: Thu Jan 17, 2002 2:28am Subject: RE: Re: Record device Careful with this, in some states this may be illegal, check with your lawyer before proceeding. -----Original Message----- From: Steve Uhrig [mailto:steve@s...] Sent: Wednesday, January 16, 2002 7:45 PM To: TSCM-L@yahoogroups.com Subject: [TSCM-L] Re: Record device Once upon a midnight dreary, zack pondered, weak and weary: > Due to experiences which have occurred within the past few > days, I would like to enlist this list for some information. I > am looking for a modest price recording device which would > record phone conversations as soon as I pick up the phone, > taking into account I also use the same line for Internet use. > ( long play with time/date ). PS..... I live in a state with > one party only knowledge as to recording. Very easy problem. Connect a tape recorder to your phone line via any standard method, and start the recorder manually when you make or receive a call you wish to record. Since you are in a one party consent state, you are OK as the one party, and it would only be your own calls you would be recording, so you merely can start the machine yourself when needed. That way, you won't fill the tape needlessly with Internet noise/data instead of voice. Steve ******************************************************************* Steve Uhrig, SWS Security, Maryland (USA) Mfrs of electronic surveillance equip mailto:Steve@s... website http://www.swssec.com tel +1+410-879-4035, fax +1+410-836-1190 "In God we trust, all others we monitor" ******************************************************************* Yahoo! Groups Sponsor ADVERTISEMENT ======================================================== TSCM-L Technical Security Mailing List "In a multitude of counselors there is strength" To subscribe to the TSCM-L mailing list visit: http://www.yahoogroups.com/community/TSCM-L It is by caffeine alone I set my mind in motion. It is by the juice of Star Bucks that thoughts acquire speed, the hands acquire shaking, the shaking is a warning. It is by caffeine alone I set my mind in motion. =================================================== TSKS Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service. [Non-text portions of this message have been removed] 4562 From: Justin T. Fanning Date: Thu Jan 17, 2002 3:39am Subject: Re: Record device In the CCITT phone system (see See ITU-T G.165 etc.) all non voice calls are proceeded with a short burst of 2100 Hz to switch off the Line Echo Canceler. I don't believe the US Bell system uses such a standard, but you may find it's an option on your modem/fax, or the receivers modem/fax. This could then be incorporated into your recording device to not record calls preceded with 2100 Hz. Of course the other solution is to use DSL/Cable etc and segregate the data off the voice line & get higher speed always on to boot! JF --- zack wrote: > > Due to experiences which have occurred within the past few days, I would > like to enlist this list for some information. I am looking for a modest > price recording device which would record phone conversations as soon as I > pick up the phone, taking into account I also use the same line for > Internet use. ( long play with time/date ). PS..... I live in a state with > one party only knowledge as to recording. > > Thanks > > visit http://www.copscops.com > Washington DC Police Department http://mpdc.dc.gov/main.shtm > > "Our enemies have made the mistake that America's enemies always make. They > saw liberty and thought they saw weakness. And now, they see defeat. " > > George W Bush > President of the United States of America > > God Bless The USA > http://www.copscops.com/blessusa.htm > > ======================================================== > TSCM-L Technical Security Mailing List > "In a multitude of counselors there is strength" > > To subscribe to the TSCM-L mailing list visit: > http://www.yahoogroups.com/community/TSCM-L > > It is by caffeine alone I set my mind in motion. > It is by the juice of Star Bucks that thoughts acquire speed, > the hands acquire shaking, the shaking is a warning. > It is by caffeine alone I set my mind in motion. > =================================================== TSKS > > Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/