From: Steve Uhrig Date: Tue Mar 12, 2002 8:42am Subject: Re: we has arrived From: David Alexander > I could cope with spending 20,000 on sweep gear. I could even cope with > growing a beard But if I have to have a hat like that to be a TSCMer, > then I'm sticking with Information Security work ! So now you know the secret to success in TSCM. Shhhhh -- we don't tell the stupid people. Dress for success. Steve ******************************************************************* Steve Uhrig, SWS Security, Maryland (USA) Mfrs of electronic surveillance equip mailto:Steve@s... website http://www.swssec.com tel +1+410-879-4035, fax +1+410-836-1190 "In God we trust, all others we monitor" ******************************************************************* 5014 From: Richard Thieme Date: Tue Mar 12, 2002 2:14pm Subject: summer on the Black Sea - what could be lovelier? Anybody ever heard of these guys??????? Subject: The International Conference "INFORMATION TECHNOLOGIES AND SECURITY -2002" held June 24-29, 2002 in Partenit - Crimea - Ukraine Dear colleagues, I am writing to invite you to attend the most valuable learning and networking experience in the security industry: The International Conference "INFORMATION TECHNOLOGIES AND SECURITY -2002" held June 24-29, 2002 in Partenit - Crimea - Ukraine. The main idea of the conference is discussion of the actual problems of globalization of information system and safety of modern information technologies, the making and development of contacts between scientists and experts in different fields of science, including technologies and mass mind formation means, social, legal and technical questions of information security, legal providing and more. Conference assumes acquaintance with ideas, approaches and concrete result of theoretical and practical problems solutions. The opportunity of advertising and exhibition actions realization will be to the conference participants. Within this context, the conference seeks to: - Information systems globalization and safety - Information protection and protection from the information - Applied aspects of information technologies safety providing More detailed information about Conference- http://www.crime-research.org/ibt/ Regards, Vladimir Golubev,Ph.D Director of the Computer Crime Problems Research Center (+380)612 639-973 (+380)612 645-715 gva@c... http://www.crime-research.org/eng/ http://cybercrime.report.ru 5015 From: D.A.Linsky Date: Tue Mar 12, 2002 4:29pm Subject: All Fired up Some people are too smart for their own good. A Charlotte NC lawyer purchased a box of 24 very rare and expensive cigars then insured them against fire among other things. Within a month he had smoked his entire stock-pile of these great cigars, without yet having made even his first premium payment on the policy and duly filed a claim against the insurance company. In his claim, the lawyer stated the cigars were lost "in a series of small fires." The insurance company refused to pay, citing the obvious Reason: that the man had consumed the cigars in the normal fashion. The Lawyer sued....and won! In delivering the ruling the judge agreed with the insurance company that the claim was frivolous. The Judge stated nevertheless, that the lawyer held a policy from the company in which it had warranted that the cigars were insurable and also guaranteed that it would insure them against fire, without defining what! is considered to be "Unacceptable Fire," and was obligated to pay the claim. Rather than endure a lengthy and costly appeal process, the insurance company accepted the ruling and paid $15,000.00 to the lawyer for his loss of the rare cigars in the "fires." NOW FOR THE BEST PART... After the lawyer cashed the check, the insurance company had him arrested on 24 counts of ARSON!!!! (Since there was a time break between the consumption of each cigar, each consumption was ruled a separate incident). The State used his own insurance claim and court testimony from the previous case against him. The lawyer was convicted of intentionally burning his insured property 24 separate times and sentenced him to 24 months in jail, ordered him to register with the local law enforcement where ever he lives as an arsonist (same classification as a sex offender since many cases of arson are actually considered sex offenses) and had to pay a $24,000.00 fine. This is a true story and was the 1st place winner in the recent Criminal Lawyers Award Contest. David Linsky SSC,Inc. dlinsky@s... http://www.securesvc.com **************************************************************************** "The truth is incontrovertible. Malice may attack it. Ignorance may deride it. But in the end, there it is. " - Winston Churchill [Non-text portions of this message have been removed] 5016 From: Hawkspirit Date: Tue Mar 12, 2002 6:50pm Subject: Spread Spectrum Demodulation While conducting an R.F. sweep at a clients residence I was able to demodulate the clients cordless phone's spread spectrum signal as he was talking using the AM slope demodulator on my spectrum analyzer. Roger Tolces www.bugsweeps.com At 12:14 PM 3/12/2002 +0000, you wrote: >Can you explain in more depth what you were using, and did to demod a >spread spectrum signal >again, please? >sincerely, >Shawn 5017 From: Steve Whitehead Date: Wed Mar 13, 2002 0:02am Subject: SA's own Watergate? "Cape Town - A quagmire of espionage and bugging, that would put a James Bond movie to shame, was uncovered in the Western Cape parliamentary building on Tuesday. Sophisticated tapping and monitoring equipment was found. Sources say the scandal that may ensue has the potential to become South Africa's own Watergate scandal. National Intelligence has already started an investigation into the matter. The former Western Cape administration under Gerald Morkel, former premier and current mayor of Cape Town, as well as the office of his former director-general (DG), Dr Niel Barnard, will be investigated. Barnard was the director-general of National Intelligence under the former NP government. Routine sweep Sources say the equipment was found during a routine sweep by the NI unit responsible for the security of government buildings. The Western Cape provincial administration is one of the tenants of the building. Western Cape Premier Peter Marais confirmed that NI was investigating. When asked to confirm whether equipment had been found, Marais said he had not yet received the final report and could not comment at this stage. He referred all other queries to his acting DG, Dr Gilbert Lawrence. Lawrence could not be reached for comment. Confidential information indicates at least three types of bugging devices were found - telephone taps, micro transmitters to broadcast conversations within offices, and equipment allowing listeners to tap into conversations from a distance. This information was confirmed by a national government source. Sources close to the investigation allege that the information gleaned from the use of the equipment was probably used to keep detailed files on politicians and officials up to date. The equipment is apparently being kept in boxes somewhere in the legislature's building. Morkel wanted office swept Barnard was approached for comment on Tuesday night, but failed to return a message left for him. Morkel said he has never been privy to information originating from bugging devices. "To tell you the truth, I asked Dr Barnard on a number of occasions to have my office swept as details of confidential conversations regularly leaked," Morkel said. When asked whether anything suspicious was ever found, Morkel said: "Not that I am aware of." Marais relieved the former DG of his position on December 5 last year and Minister for the Public Service and Administration, Geraldine Fraser-Moleketi, approved the severance package. All indications are that Fraser-Moleketi will ask the Western Cape government to launch an investigation into the incident after she heard about the NI agency's investigation. Her spokesperson, Thembela Kulu, confirmed that bugging devices were found in the provincial parliamentary building. She said, should an inquest be initiated, it would be announced at a media conference. She declined any further comment" Story at http://www.news24.co.za/News24/South_Africa/WesternCape/0,1113,2-7-830_1156038,00.html Steve Whitehead TSCM Services URL http://www.tscm.co.za E-mail : sceptre@m... Tel (012) 664-3157 Fax (012) 664-3180 International (+2712) P O Box 16063, Lyttelton, 0140, Centurion, South Africa [Non-text portions of this message have been removed] 5018 From: Mitch D Date: Thu Mar 14, 2002 8:17pm Subject: Good things come in big boxes! I just purchased a piece of equipment from Steve U @ sws,and I wanted to give Steve a double thumbs up,and 4 stars! Everything was exactly as he had indicated,there was no pressure to buy anything extra,and his knowledge of the product, and its application, is of the highest degree of excellence. I felt very confident thru every aspect of the sale,and recieved the gear without any flaws. With so many half assed/non-functional gimmicks,junk,and inferior equipment floating across the net,trade papers,auctions and used electronic distributors for sale,I can say I'm extremely pleased,I'd buy gear from Steve again,and felt like I did a deal with a "good friend" in the business,and above all made a new friend. Thanks Steve! M __________________________________________________ Do You Yahoo!? Yahoo! Sports - live college hoops coverage http://sports.yahoo.com/ 5019 From: Rick Hofmann - MICROSEARCH Date: Thu Mar 14, 2002 9:52pm Subject: Fwd: Good things come in big boxes! Mitch and group, I certainly concur with Mitch. I bought a used Icom R8500 from Steve a few years ago. When it arrived I thought he had made a mistake and sent me a new one. I would not hesitate to buy equipment from Steve. I also wanted to mention a short follow up to the Whittier College incident. I received some questions about jurisdiction and why the FBI was not called. I spoke to the ASAC for Los Angeles to get his input. Since California has its own Penal Code sections against eavesdropping it is not generally a problem if the local PD handles the investigation and does not call the FBI. It becomes a problem if the victim of the eavesdropping has some kind of federal connection. A manufacturing firm with a government contract, for example. The FBI would appreciate notification of any eavesdropping discoveries, but they may not pursue the investigation in states where there is concurrent legislation against eavesdropping. The specific FBI office with jurisdiction over Whittier is the West Covina, California office. The ASAC for Los Angeles said that office is a small one without the resources that might be needed to investigate a complicated eavesdropping case. >Subject: [TSCM-L] Good things come in big boxes! > >I just purchased a piece of equipment from Steve >U @ sws,and I wanted to give Steve a double >thumbs up,and 4 stars! > Everything was exactly as he had >indicated,there was no pressure to buy anything >extra,and his knowledge of the product, and its >application, is of the highest degree of >excellence. >I felt very confident thru every aspect of the >sale,and recieved the gear without any flaws. > With so many half assed/non-functional >gimmicks,junk,and inferior equipment floating >across the net,trade papers,auctions and used >electronic distributors for sale,I can say I'm >extremely pleased,I'd buy gear from Steve >again,and felt like I did a deal with a "good >friend" in the business,and above all made a new >friend. > Thanks Steve! > M Very truly yours, Rick Hofmann, CCO, CPP, PI16998 MICROSEARCH, LLC - Electronic Surveillance Detection - Counterespionage Post Office Box 2084 - Cypress, California 90630 714-952-3812 Fax: 714-209-0037 http://home.earthlink.net/~microsearch 5020 From: Date: Fri Mar 15, 2002 0:25am Subject: Law-enforcement DIRT Trojan released http://www.theregister.co.uk/content/55/24433.html Law-enforcement DIRT Trojan released By Thomas C Greene in Washington Posted: 14/03/2002 at 20:43 GMT Disgraced former policeman and convicted felon Frank Jones of Codex Data Systems has had his Web site hacked and his overpriced cop-spy Trojan, aptly named D.I.R.T., released to the public. One would hope that the security community will make use of the above .zip file, provided courtesy of Cryptome's John Young, examine the product and publish a tool for making a Windows box DIRT-proof easily and effectively. The .zip contains the main executable, the installer and the user's manual. It is not a working example, as the activation key is lacking. Jones has been hustling his rip-off product to LEAs (law-enforcement agencies) and military organizations as an elite crime-fighting tool. But in reality it's a common Trojan horse which permits over-zealous cops to upload files (i.e., plant incriminating evidence) on a victim's computer without any auditing mechanism which would record this criminal activity by the authorities. Thus it's been a hit in quarters where this sort of abuse is unlikely to be challenged, such as Asia, Africa and South America. 5021 From: Date: Fri Mar 15, 2002 7:20am Subject: California - Privacy of Calls Affirmed Privacy of Calls Affirmed Ruling: Court defines confidential phone conversations broadly, making lawsuits easier. By MAURA DOLAN, TIMES STAFF WRITER SAN FRANCISCO -- The California Supreme Court strengthened privacy protections Thursday by making it easier to successfully sue people who secretly tape others' phone conversations. The court decided unanimously that a conversation is confidential under state law if a party expects he or she is not being overheard or recorded. Those who secretly tape others can be liable for at least $5,000 in damages for each recording. Thursday's decision, which broadly defines what is confidential, was a defeat for the media, in particular broadcasters who have been sued for airing interviews with people who did not know they were being recorded. Media lawyers had filed a brief in the case urging the court to adopt a more narrow definition that would make it harder for plaintiffs to argue that remarks had been confidential. The ruling stemmed from a Los Angeles case involving recordings a woman made of telephone calls between her now deceased husband and his son. The son, who charged his stepmother had tried to hasten his father's death, now stands to collect as much as $120,000 for 24 phone conversations recorded by his stepmother. California has prohibited private parties from recording telephone calls without consent from all participants--only if the calls included a "confidential communication." Courts of appeal have disagreed over what constituted a confidential conversation. In their brief to the court, lawyers for media outlets including the three major television networks argued that a broad definition of confidential communication would end the use of hidden microphone and camera reporting in California. The ruling also could make it more difficult for the print media to use material from recordings provided by third parties. Jerry K. Staub, a lawyer who represented the son in Thursday's case, said disputes over secret taping also arise frequently in the course of litigation, when one side tapes another's damaging admissions without the party's knowledge and consent. "I think that is going to stop now, and that is a good thing," Staub said. If the court had ruled more narrowly, no conversation would be considered confidential unless one of the parties at the time had declared it to be so, Staub said. The state high court ruled in a dispute between J. Michael Flanagan and his stepmother, Honorine T. Flanagan in Flanagan v. Flanagan, S085594. Honorine married Michael's father, John, in 1969, and John adopted her daughter. He also had two children, including Michael, from a previous marriage. When he married Honorine, John Flanagan had an estate worth about $22 million. John was diagnosed as having prostate cancer in 1992, and his physician prescribed medicine to slow the spread of the disease. Honorine began giving her husband his monthly prescribed injections in 1993. The court said that John changed his estate plan in 1995. Instead of leaving all his property to his wife, he planned to give his grandchildren from his first marriage an interest in his property. Around that time, Honorine told her manicurist, Dale Denels, that she would pay someone to kill John, the court said. In September of that year, Honorine also told Denels that she was injecting John with water instead of his medicine. The manicurist began taping her telephone calls with Honorine and told Michael that his father's life was in danger, according to the court. The manicurist played Michael a tape of one of her conversations with his stepmother, and Michael played it for his father. John moved out of his house and moved in with Michael. A physician later concluded that John had not been receiving his prescribed medication. John changed his will to leave all his property to his two children from his first marriage. But John and Honorine reconciled in August 1996, and John again changed his will. He died of cardiovascular disease in March 1997, and Honorine "ended up with basically everything," said Staub, who represented Michael in the case. Staub said the couple had lived for years in Beverly Hills, but eventually moved to the Palm Springs area. He said John, who had earned a fortune in the mortuary business, was in his 80s when he died, and Honorine was in her 60s at that time. Honorine sued Michael and her manicurist for conspiracy, invasion of privacy and emotional distress. Michael filed a cross complaint, charging that Honorine had illegally taped all of his telephone conversations with his father after the couple reunited. During a trial in Los Angeles, Honorine said she had installed a voice-activated recorder with her husband's consent and listened to tapes of telephone calls daily. Michael testified that his stepmother had forbidden her husband to speak with him and that he considered all his calls with his father to be confidential. A jury awarded Michael $5,000 for each of 24 calls and $1.2 million in punitive damages. The trial judge eliminated the punitive damage award and reduced total compensation to $5,000. An appeals court later decided that two of three conversations played to the jury were confidential, but that none of the other conversations were protected because Michael had presented no evidence of their content. The appellate court, relying on an earlier decision, said that a conversation is confidential only if the parties had reason to expect that it would not later be divulged to someone else. In rejecting that definition, the California Supreme Court noted that the Legislature has approved a law to protect cellular phone conversations from intentional eavesdropping or recording. The Legislature chose to protect all phone conversations, not just those "where a party wanted to keep the content secret," Justice Joyce Kennard wrote for the court. "The Legislature's ongoing concern is with eavesdropping or recording of conversations, not later dissemination," Kennard wrote. She said the state's Privacy Act "protects against intentional, nonconsensual recording of telephone conversations, regardless of the content of the conversation or the type of telephone involved." Ed Green, who represented Honorine, said the Court of Appeal will now have to decide whether the telephone calls were confidential under the definition handed down Thursday. He said there was testimony at the trial that Honorine, who never faced criminal charges, "did not attempt to kill" her husband and that she never withheld his medication. If you want other stories on this topic, search the Archives at latimes.com/archives. For information about reprinting this article, go to www.lats.com/rights. 5022 From: Matthew Paulsen Date: Fri Mar 15, 2002 4:55pm Subject: RE: Law-enforcement DIRT Trojan released Full details on the DIRT trojan JOHAR can be found here: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_PSW.JOHA R.A and here: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_PSW.JOHA R.A&VSect=T and here: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_PSW.JOHA R.A&VSect=S DIRT uses the same filenames - desktop.exe, desktop.log and desktop.dll just like the psw.johar.a trojan. -----Original Message----- From: oldman@d... [mailto:oldman@d...] Sent: Thursday, March 14, 2002 10:26 PM To: TSCM-L@yahoogroups.com Subject: [TSCM-L] Law-enforcement DIRT Trojan released http://www.theregister.co.uk/content/55/24433.html Law-enforcement DIRT Trojan released By Thomas C Greene in Washington Posted: 14/03/2002 at 20:43 GMT Disgraced former policeman and convicted felon Frank Jones of Codex Data Systems has had his Web site hacked and his overpriced cop-spy Trojan, aptly named D.I.R.T., released to the public. One would hope that the security community will make use of the above .zip file, provided courtesy of Cryptome's John Young, examine the product and publish a tool for making a Windows box DIRT-proof easily and effectively. The .zip contains the main executable, the installer and the user's manual. It is not a working example, as the activation key is lacking. Jones has been hustling his rip-off product to LEAs (law-enforcement agencies) and military organizations as an elite crime-fighting tool. But in reality it's a common Trojan horse which permits over-zealous cops to upload files (i.e., plant incriminating evidence) on a victim's computer without any auditing mechanism which would record this criminal activity by the authorities. Thus it's been a hit in quarters where this sort of abuse is unlikely to be challenged, such as Asia, Africa and South America. Yahoo! Groups Sponsor ADVERTISEMENT ======================================================== TSCM-L Technical Security Mailing List "In a multitude of counselors there is strength" To subscribe to the TSCM-L mailing list visit: http://www.yahoogroups.com/community/TSCM-L It is by caffeine alone I set my mind in motion. It is by the juice of Star Bucks that thoughts acquire speed, the hands acquire shaking, the shaking is a warning. It is by caffeine alone I set my mind in motion. =================================================== TSKS Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service. [Non-text portions of this message have been removed] 5023 From: James M. Atkinson Date: Sun Mar 17, 2002 6:06pm Subject: Kids [...sounds like a typical bug sweep in New York] The boss of a big company needed to call one of his employees about an urgent problem with one of the main computers. He dialed the employee's home phone number and was greeted with a child's whispered, "Hello?" Feeling put out at the inconvenience of having to talk to a youngster, The boss asked, "Is your daddy home?" "Yes," whispered the small voice. "May I talk with him?" the man asked. To the surprise of the boss, the small voice whispered, "No." Wanting to talk with an adult, the boss asked, "Is your Mommy there?" "Yes," came the answer. "May I talk with her?" Again, the small voice whispered, "No." Knowing that it was not likely that a young child would be left home alone, the boss decided he would just leave a message with the person who should be there watching over the child. "Is there anyone there besides you?" the boss asked the child. "Yes," whispered the child, "a policeman." Wondering what a cop would be doing at his employee's home, the boss asked, "May I speak with the policeman?" "No, he's busy," whispered the child. "Busy doing what?" asked the boss. "Talking to daddy and mommy and the fireman," came the whispered answer. Growing concerned as he heard what sounded like a helicopter through the Ear piece on the phone, the boss asked, "What is that noise?" "A hello-copper," answered the whispering voice. "What is going on there?" asked the boss, now alarmed. In an awed, whispering voice, the child answered, "The search team just landed the hello-copper." Alarmed, and more than just a little frustrated, the boss asked, "What Are they searching for?" Still whispering, the young voice replied along with a muffled giggle, "ME." -- -------------------------------------------------------------------------------------------------- The First, The Largest, The Most Popular, and The Most Complete TSCM, Bug Sweep, Spy Hunting, and Counterintelligence Site on the Internet. -------------------------------------------------------------------------------------------------- James M. AtkinsonPh: (978) 546-3803 Granite Island GroupFax: (978) 546-9467 127 Eastern Avenue #291http://www.tscm.com/ Gloucester, MA 01931-8008mailto:jmatk@t... -------------------------------------------------------------------------------------------------- "...three shall be the number to count, and the number to be counted shall be three.....four shall thou not count......five is right out". - M. Python -------------------------------------------------------------------------------------------------- 5024 From: Steve Whitehead Date: Mon Mar 18, 2002 0:59am Subject: Net widens in Cape computer snooping probe "By Ashley Smith Fears of a Western Cape government spying conspiracy have deepened, with administration insiders confirming that the investigation has widened. Now allegations that sophisticated programs were used to tap into staff computers in Cape Town are being investigated. The information, gathered while the Democratic Party/ New National Party coalition was in power in the Western Cape, was then allegedly used to draw up so-called personality profiles of officials. This was done by monitoring websites they visited, emails and other private documents. The same information technology programs could also have been used to monitor the computers of politicians. The latest twist follows nearly two weeks of drama for the new ANC-NNP provincial government, which took over from the DP-NNP coalition late last year. The drama started on the evening of March 5 when Pierre Beneke, a director in former Western Cape director-general Niel Barnard's office, and two female colleagues were confronted by a policeman. He had noticed that Beneke was carrying cardboard boxes to a vehicle parked in the provincial government garage. Among unconfirmed allegations are that the items in the cardboard boxes included bugging and computer equipment. A sweep of the legislature was then conducted and further devices were allegedly found. An inquiry has been instituted" Story at http://www.iol.co.za/index.php?click_id=13&art_id=ct20020317213431443N210305&set_id=1 Steve Whitehead TSCM Services URL http://www.tscm.co.za [Non-text portions of this message have been removed] 5025 From: A Grudko Date: Mon Mar 18, 2002 6:36pm Subject: Test - please delete Test - please delete 5026 From: A Grudko Date: Mon Mar 18, 2002 6:51pm Subject: SA Judge denies covert surveillance order Independant on Line Cape Town, South Africa March 07 2002 at 02:25PM Jeanette Traverso the deputy judge-president of the Cape, on Thursday categorically denied any involvement in the covert installation of video cameras to monitor disturbances from the public gallery during the Staggie murder trial. This was Traverso's second public denial. At a special media briefing, the judge told reporters: "The false allegation that I authorised the installation is an attack on my integrity - my most precious possession that I will defend with my life. "My only concern now is to clear my name. When an allegation is made of a judge lying, it is a serious reflection on the judiciary itself, and he or she has to set the record straight - as I am doing now - or admit the lie." The judge rejected as false the allegation made recently in the Cape High Court by Senior Superintendent Daniel Lourens that she had personally authorised the installation of cameras. He said this happened during a meeting in her chambers. Lourens is attached to the SA Police Service technical support unit, and made the allegation under oath during an inquiry launched this month by Judge John Foxcroft, the judge presiding in the Staggie trial. Lourens's allegation insinuated that Traverso had lied in a joint statement last year in which both Traverso and the Cape Judge-President John Hlophe denied any involvement in, or knowledge of, the cameras. On Thursday, Traverso said she had been unable to respond earlier to recent media reports about Lourens's allegation, as Foxcroft had not yet given judgment in the case. Judgment was delivered on Wednesday Traverso said: "It is with grave reservation that I make this statement, but I believe that I am entitled to and, in the interests of the judiciary, obliged to protect my integrity." She said in September last year she chaired a security committee meeting in the place of Judge-President Hlophe, who had been away. The possible installation of cameras raised at the meeting, but Traverso said she had made it clear that she could not consent to this. Individual judges would have to decide themselves whether they wanted such devices in their courts. She said it was resolved at the meeting to send a letter to Hlophe in order to sensitise the judiciary about requests to place devices in court rooms, to monitor threats. Traverso said no such letter was in fact sent to Hlophe. She said Tommy Prins, head of the Scorpions, had informed Foxcroft last September about the secret installation of the two cameras. She said she had not been informed of Prins's meeting with Foxcroft, nor was the judge-president. Traverso met with the national director of public prosecutions, Bulelani Ngcuka, on Thursday morning, prior to the media conference. She said Ngcuka had advised her not to issue a statement about the surveillance cameras, and she told him she would "think about it". She told reporters she had made it clear to Ngcuka that she had intended to issue a press statement setting out the facts in full and thereby clearing her name. Ngcuka's spokesperson, Sipho Ngwema said Ngcuka had not asked, but only advised, Traverso not to make a statement. "Ngcuka felt it was not in the interest of justice for the judge to hold a media conference, but he only advised her." - Sapa Andy Grudko D.P.M., Grad I.S, (S.A.) - Grudko Associates - www.grudko.com , Est. 1981 International business intelligence and investigations - ICQ 146498943 Johannesburg (+27 11) 465 9673 - 465 1487 (Fax), Pretoria (+27 12) 244 0255 - 244 0256 (Fax) SACI, WAD, CALI, SAMLF, UKPIN, AFIO (OS), IWWA, PRETrust, AmChamCom When you need it done right - first time 5027 From: A Grudko Date: Mon Mar 18, 2002 7:04pm Subject: Parliament bug? Did anyone else hear a rumour that an audio/video bug was found in the SA Parliament building in Cape Town last week? Andy Grudko D.P.M., Grad I.S, (S.A.) - Grudko Associates - www.grudko.com , Est. 1981 International business intelligence and investigations - ICQ 146498943 Johannesburg (+27 11) 465 9673 - 465 1487 (Fax), Pretoria (+27 12) 244 0255 - 244 0256 (Fax) SACI, WAD, CALI, SAMLF, UKPIN, AFIO (OS), IWWA, PRETrust, AmChamCom When you need it done right - first time 5028 From: A Grudko Date: Mon Mar 18, 2002 7:13pm Subject: Re: SA's own Watergate? Please ignore my last post - I have overseas guests staying and they used my eMail address, causing this post to drop into my 'read mail' folder. I thought I was getting very few mails since they arrived! Andy Grudko D.P.M., Grad I.S, (S.A.) - Grudko Associates - www.grudko.com , Est. 1981 International business intelligence and investigations - ICQ 146498943 Johannesburg (+27 11) 465 9673 - 465 1487 (Fax), Pretoria (+27 12) 244 0255 - 244 0256 (Fax) SACI, WAD, CALI, SAMLF, UKPIN, AFIO (OS), IWWA, PRETrust, AmChamCom When you need it done right - first time 5029 From: taylorhardwood Date: Mon Mar 18, 2002 0:24am Subject: optoelectronics `hi:group I ran across a man that has a good supply of of 3000a plus units for sale new in the box while these are discontinued by optoelectronics the price is good $199+ shipping if anyone is interested I can post his name and phone tomorrow dan 5030 From: Marko Radovic Date: Mon Mar 18, 2002 9:57am Subject: ISO 17799 Hello, Does anyone know where to download ISO 17799 security standard for free? Any help is welcome! Marko __________________________________________________ Do You Yahoo!? Everything you'll ever need on one web page from News and Sport to Email and Music Charts http://uk.my.yahoo.com 5031 From: Marcel Date: Mon Mar 18, 2002 3:17pm Subject: CIA Web Site Tracks Visitors With Cookies http://www.washtech.com/news/govtit/15707-1.html -- "NEXTEL1 IT'S NOT JUST NEXTEL" Subscribe to Nextel1: http://www.groups.yahoo.com/subscribe/NEXTEL1 "NEXTEL2 FOR iDEN SOFTWARE DEVELOPERS" Subscribe to Nextel2: http://www.groups.yahoo.com/subscribe/NEXTEL2 "WIRELESS FORUM HOMELAND SECURITY GROUP" The Complete Resource for Wireless Homeland Security. Subscribe to WFHSG: http://www.groups.yahoo.com/subscribe/WFHSG [Non-text portions of this message have been removed] 5032 From: Matthew Paulsen Date: Mon Mar 18, 2002 8:44pm Subject: RE: ISO 17799 Marko, I believe that BSPL copywrites that material locally and internationally, so it has to be purchased, just like any other authored work, hence their name - British Standards Publishing Limited. You may have better luck trying Powell's Technical, half.com, ebay.com, amazon.com or other locations where someone may be trying to offload it as a used document. Could be wrong tho, best of luck. Matt -----Original Message----- From: Marko Radovic [mailto:radovic_marko@y...] Sent: Monday, March 18, 2002 7:57 AM To: TSCM-L@yahoogroups.com Subject: [TSCM-L] ISO 17799 Hello, Does anyone know where to download ISO 17799 security standard for free? Any help is welcome! Marko __________________________________________________ Do You Yahoo!? Everything you'll ever need on one web page from News and Sport to Email and Music Charts http://uk.my.yahoo.com Yahoo! Groups Sponsor ADVERTISEMENT ======================================================== TSCM-L Technical Security Mailing List "In a multitude of counselors there is strength" To subscribe to the TSCM-L mailing list visit: http://www.yahoogroups.com/community/TSCM-L It is by caffeine alone I set my mind in motion. It is by the juice of Star Bucks that thoughts acquire speed, the hands acquire shaking, the shaking is a warning. It is by caffeine alone I set my mind in motion. =================================================== TSKS Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service. 5033 From: Ngan Thai Date: Mon Mar 18, 2002 8:14pm Subject: Re: ISO 17799 In message <20020318155720.85432.qmail@w...>, =?iso-8859-1?q ?Marko=20Radovic?= writes: >Hello, > >Does anyone know where to download ISO 17799 security >standard for free? > >Any help is welcome! The ISO17799:2000 standard can be purchased from BSI's site: https://www.bspsl.com/secure/iso17799software/cvm.cfm That's also the official source of the standard. Another good (free this time) source if IT and related security is BSI's IT Baseline Protection Model: http://www.bsi.de/gshb/english/menue.htm Cheers, VS 5034 From: Wayne T Work Date: Mon Mar 18, 2002 9:32pm Subject: RE: ISO 17799 dudes, This is the US standard for what is the BSPL 799 standard. There might be a copy of this on the NIST or some derivation of this standard. Good hunting. -----Original Message----- From: Matthew Paulsen [mailto:mpaulsen6@a...] Sent: Monday, March 18, 2002 9:45 PM To: 'TSCM submissions' Subject: RE: [TSCM-L] ISO 17799 Marko, I believe that BSPL copywrites that material locally and internationally, so it has to be purchased, just like any other authored work, hence their name - British Standards Publishing Limited. You may have better luck trying Powell's Technical, half.com, ebay.com, amazon.com or other locations where someone may be trying to offload it as a used document. Could be wrong tho, best of luck. Matt -----Original Message----- From: Marko Radovic [mailto:radovic_marko@y...] Sent: Monday, March 18, 2002 7:57 AM To: TSCM-L@yahoogroups.com Subject: [TSCM-L] ISO 17799 Hello, Does anyone know where to download ISO 17799 security standard for free? Any help is welcome! Marko __________________________________________________ Do You Yahoo!? Everything you'll ever need on one web page from News and Sport to Email and Music Charts http://uk.my.yahoo.com Yahoo! Groups Sponsor ADVERTISEMENT ======================================================== TSCM-L Technical Security Mailing List "In a multitude of counselors there is strength" To subscribe to the TSCM-L mailing list visit: http://www.yahoogroups.com/community/TSCM-L It is by caffeine alone I set my mind in motion. It is by the juice of Star Bucks that thoughts acquire speed, the hands acquire shaking, the shaking is a warning. It is by caffeine alone I set my mind in motion. =================================================== TSKS Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service. ======================================================== TSCM-L Technical Security Mailing List "In a multitude of counselors there is strength" To subscribe to the TSCM-L mailing list visit: http://www.yahoogroups.com/community/TSCM-L It is by caffeine alone I set my mind in motion. It is by the juice of Star Bucks that thoughts acquire speed, the hands acquire shaking, the shaking is a warning. It is by caffeine alone I set my mind in motion. =================================================== TSKS Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 5035 From: David Alexander Date: Tue Mar 19, 2002 5:57am Subject: re: ISO 17799 standard >Does anyone know where to download ISO 17799 security >standard for free? > >Any help is welcome! > >Marko Marko This is not a 'free standard', you have to pay for a copy. I paid for mine. It is subject to copyright and illegal to make copies/supply them to other people, etc. ISO 17799 is the international adoption of the British Standard BS 7799. Note that there are 2 parts to the British Standard, and the ISO only covers part 1 at the moment. For reference, Information Security is my specialist subject. I am one of very few people qualified as a Lead Auditor of BS7799/ISO17799 worldwide. I am happy to offer brief advice and guidance. regards _______________________________ David Alexander M.INSTIS Global Infrastructure Director Bookham Technology plc Tel: +44 (0) 1327 356264 Mobile: +44 (0) 7799 881284 Fax: +44 (0) 1327 356775 http://www.bookham.com ======================================================================= This e-mail is intended for the person it is addressed to only. The information contained in it may be confidential and/or protected by law. If you are not the intended recipient of this message, you must not make any use of this information, or copy or show it to any person. Please contact us immediately to tell us that you have received this e-mail, and return the original to us. Any use, forwarding, printing or copying of this message is strictly prohibited. No part of this message can be considered a request for goods or services. ======================================================================= Any questions about Bookham's E-Mail service should be directed to postmaster@b.... 5036 From: Fernando Martins Date: Tue Mar 19, 2002 5:09pm Subject: RE: ISO 17799 This is not where you can download the standard, but some nice resources about it http://www.iso17799.hpg.ig.com.br/index.htm <- for any portuguese/brazilian around (?) http://www.all.net/books/standards/bs7799.html http://matrix0.members.beeb.net/iso-17799/ http://www.securityauditor.net/iso17799/index.htm http://www.iso17799world.com/ You can buy the standard at http://www.iso.ch or http://bsonline.techindex.co.uk/ FM » -----Original Message----- » From: Marko Radovic [mailto:radovic_marko@y...] » Sent: segunda-feira, 18 de Março de 2002 15:57 » To: TSCM-L@yahoogroups.com » Subject: [TSCM-L] ISO 17799 » » » Hello, » » Does anyone know where to download ISO 17799 security » standard for free? » » Any help is welcome! » » Marko » » __________________________________________________ » Do You Yahoo!? » Everything you'll ever need on one web page » from News and Sport to Email and Music Charts http://uk.my.yahoo.com » » » ------------------------ Yahoo! Groups Sponsor » ---------------------~--> Tiny Wireless Camera under $80! » Order Now! FREE VCR Commander! Click Here - Only 1 Day Left! » http://us.click.yahoo.com/nuyOHD/7.PDAA/yigFAA» /kgFolB/TM » » » -------------------------------------------------------------- » -------~-> » » ======================================================== » TSCM-L Technical Security Mailing List » "In a multitude of counselors there is strength" » » To subscribe to the TSCM-L mailing list visit: » http://www.yahoogroups.com/community/TSCM-L » » It is by caffeine alone I set my mind in motion. » It is by the juice of Star Bucks that thoughts acquire » speed, the hands acquire shaking, the shaking is a warning. » It is by caffeine alone I set my mind in motion. » =================================================== TSKS » » Your use of Yahoo! Groups is subject to » http://docs.yahoo.com/info/terms/ » » » 5037 From: James M. Atkinson Date: Tue Mar 19, 2002 11:05pm Subject: Teaching Math Teaching Math in 1950: A logger sells a truckload of lumber for $100. His cost of production is 4/5 of the price. What is his profit? Teaching Math in 1960: A logger sells a truckload of lumber for $100. His cost of production is 4/5 of the price, or $80. What is his profit? Teaching Math in 1970: A logger exchanges a set "L" of lumber for a set "M" of money. The cardinality of set "M" is 100. Each element is worth one dollar. Make 100 dots representing the elements of the set "M." The set "C", the cost of production contains 20 fewer points than set "M." Represent the set "C" as a subset of set "M" and answer the following question: What is the cardinality of the set "P" of profits? Teaching Math in 1980: A logger sells a truckload of lumber for $100. His cost of production is $80 and his profit is $20. Your assignment: Underline the number 20. Teaching Math in 1990: By cutting down beautiful forest trees, the logger makes $20. What do you think of this way of making a living? Topic for class participation after answering the question: How did the forest birds and squirrels feel as the logger cut down the trees? There are no wrong answers. Teaching Match in 2000: A logger sells a truckload of lumber for $100. His cost of production is $120. How does Arthur Andersen determine that his profit margin is $60? -- -------------------------------------------------------------------------------------------------- The First, The Largest, The Most Popular, and The Most Complete TSCM, Bug Sweep, Spy Hunting, and Counterintelligence Site on the Internet. -------------------------------------------------------------------------------------------------- James M. AtkinsonPh: (978) 546-3803 Granite Island GroupFax: (978) 546-9467 127 Eastern Avenue #291http://www.tscm.com/ Gloucester, MA 01931-8008mailto:jmatk@t... -------------------------------------------------------------------------------------------------- "...three shall be the number to count, and the number to be counted shall be three.....four shall thou not count......five is right out". - M. Python -------------------------------------------------------------------------------------------------- 5038 From: Ray Van Staden Date: Tue Mar 20, 2001 1:06am Subject: ZIMBABWE'S PLIGHT!!! Letter from Kerry Kay re their plight and that of John Rutherford. Subject: Zimbabwean citizen Alistair wrote the message below. May we as the adoptive parents of Jon carry on from here. I flew in to the Hospital the minute I heard to be with Jon. I did not take my diary, brief case, emergency evacuation case etc. - just wanted to get to Jon. Iain and David followed an hour later. No sooner had they arrived at the hospital we got a phone call to say our tractor driver had been beaten up. So I stayed with Jon and Iain and David returned home. The next nightmare unfolded as a group of zanu trained killer militia surrounded David and Iain in the truck. David managed to get away through the bush and with great presence of mind, switched off my computer, locked our dogs up in the house, gathered our weapons and ran back through the bush to Iain. By which time Marimo and Katsiro (self styled war vets) were threatening them through the window. The farmers had called the Police (a joke). I managed to get half way home and stopped in at a friends farm only to hear David yelling over the radio, "please someone help, red alert (i.e. Life threatening) I was in the garden helpless other than praying and crying. Then, the wonderful call on the radio, "the Police have arrived". Out leapt AK 47 wielding so called Police who then turned their guns onto Iain and David !! Between a rock and a hard place, Iain said to David, "duck" and put his foot down - the truck windscreen was smashed but they got away with their lives. Earlier that morning Alistair and I had helped the police constable "load" Jon's dead guard into the body box - he had been beaten to death (interpreted by the police as "ill - natural causes" well perhaps natural causes according to the doctrine of brutality and killing in the ruling party book) - the dead guard Darlington's eyes and mouth were open, his last words to his killers was "my boss (Jon) did not do anything wrong". I just broke down and sobbed uncontrollably for the sheer brutality of it all, killing and beating with impunity, a witch hunt to beat, rape and kill whoever supported the legitimate opposition party. It is evening and our workers have all been chased off the farm, our dogs are still locked up in our house (or killed) and our home and farm yard looted. This is a carbon copy of what happened two years ago. We have to believe that God has a plan for our beloved country - and we continue to pray. Today I allowed myself the total breakdown of all defenses - together with our wonderful friends, black and white, urban and rural, and cried and cried and cried. Tomorrow I will be strong again, and so will my family, friends and countrymen and women. For those of you in the wings, please help us avoid genocide/ethnic cleansing, whatever you want to call it. We are on the brink. With much love and chinja's, Kerry (rather devastated but not defeated!) Kay This is what you get for being a citizen of Zimbabwe. Hours of being beaten and threatened with death, one of your employees lying near by dying after being beaten for hours. The badza handle wielders are previous employees who have been taken to youth camps and politically re-educated over the last two months. Jon Jon Rutherford's supposed crime is that during the election he supported and transported MDC agents etc. He was not involved and was actually away from the farm with friends. The security guard beaten with him possibly saved his life. Jon Jon effected his escape by managing to persuade the thugs that he needed urgent medical attention and had to get him to hospital immediately. This they conceded after realizing that the man was dying. Jon Jon and his wife Emma and two young children are very lucky to be alive. She had to spend two and a half hours away from her children detained by these thugs being continually threatened with her life, before she was rescued. Letter from Kerry Kay A FOLLOW ON E MAIL CONTINUES THE STORY Subject: the mayhem continues Dearest All, some good news is that the NSPCA managed to get to our home late this afternoon, and the front door was open so the bastards had been through our home, but at least the dogs were alive. They will go back tomorrow to hopefully fetch the dogs, cats and pigs. The house hasn't been looted yet - perhaps some fat political commissar is waiting to move into our lovely home. He may move in but he won't be there long .... All our goats have been killed, the farmyard looted of all our equipment, fertiliser and fuel. However, we are alive and that's how it must stay, even if it means losing everything again as we did two years ago. We are re-grouping with all our colleagues, friends and extended families, black, white, young, old, farmworkers etc. and giving one another encouragement - we are all scattered away from our homes, but once again are "building other homes and families" all over the place. When we had to leave the farm in April 2000 for those five long months, we moved our cattle to a place of safety the other side of Harare. This morning we learned that the farmer who we have been leasing grazing from, was bludgeoned to death by the local "war vets" and squatters. His cousin phoned me today and she said it was a gruesome, brutal, savage sight to behold. How long will this evil bastard and his henchmen be allowed to continue on their retribution spree? Does the world not realise, acknowledge (especially Mbeki) that the mdc is 47 per cent of the legitimate national government - yet the brutality is being systematically metered out on all those connected with the legitimate opposition. In the high density suburbs in Marondera, black people are "being dealt with" every night for not being a part of the ruling butchery party - they are the unheard voices, the people without email access, access to the media and definitely NO recourse to law - because there is NO LAW. Whoever you are, where ever you are, get writing, phoning, lobbying for the battered silenced and mutilated majority in Zimbabwe. with love and some hope, through you, Kerry.xxx [Non-text portions of this message have been removed] 5039 From: A Grudko Date: Wed Mar 20, 2002 4:13pm Subject: CIA cookies http://www.foia.ucia.gov/ CIA Web Site Tracks Visitors With Cookies By Brian McWilliams, Newsbytes.com Monday, March 18, 2002; 2:55 PM A Web site operated by the Central Intelligence Agency is marking visitors with a unique identification tag or "cookie" that violates federal privacy guidelines and the agency's own privacy policy., according to Public Information Research, a non-profit group. The CIA's Electronic Reading Room site, which provides online access to previously released CIA documents, places a "persistent" cookie on visitors' computers when they visit the site. Designed to remain on the visitor's computer until December 2010, the cookie contains the user's Internet protocol address as well as a unique identification number, Newsbytes has confirmed. The use of persistent cookies at http://www.foia.ucia.gov was first discovered by Public Information Research, a Texas-based non-profit. A spokesperson for the CIA said the agency was still analyzing the report and had no immediate comment. In a June 2000 memorandum to all government agencies, the director of the White House Office of Management and Budget advised operators of government sites and their contractors that "the presumption should be that 'cookies' will not be used at Federal web sites." Most Web sites can log the Internet protocol (IP) address and activities of visitors without the use of cookies. But the persistent cookie at the CIA Freedom of Information Act (FOIA) site enables the agency to better track an individual visitor's search requests, according to Daniel Brandt, PIR's founder. "The keywords you put in for searching on FOIA documents can reveal a lot about you. The CIA can use these cookies to reconstruct who is interested in what. Even if you browse from several different ISPs, they can use your cookie's unique ID to tie all your searches together," said Brandt. According to the privacy policy at the CIA's Electronic Reading Room, the site does not use persistent cookies and instead only uses temporary "session cookies" that expire when the user closes his browser. A review of some federal sites today by Newsbytes revealed that several are placing session cookies on visitors' computers. Such sites include the FirstGov.gov portal, the FBI's jobs site, as well as the main sites operated by the Small Business Administration, the Department of Education and the Selective Service. The privacy policy at the main CIA Web site, located at http://www.cia.gov, states that the CIA Web site "does not use the 'cookies' that some Web sites use to gather and store information about your visits to their sites." Brandt said it is likely that the CIA Electronic Reading Room site was created by a contractor using a standard Web hosting package that included a Web traffic analysis program, and that the CIA may not even be aware of it. "They still need to stop using the persistent cookie and destroy all the information they have collected from it," he said. The HTML source code of the CIA Electronic Reading Room site said it was designed by Olympus Group. Calls to the Virginia-based company's switchboard resulted in a recorded message stating that "Olympus Group has closed its door and is no longer in operation." The CIA FOIA site appears to be hosted on systems operated by Digex, a large Internet service provider in Maryland. According to the OMB memo, the use of cookies by federal sites is justified only when there is "a compelling need to gather the data on the site" as well as "appropriate and publicly disclosed privacy safeguards for handling of information derived from cookies." The CIA Electronic Reading Room is at http://www.foia.ucia.gov Public Information Research is at http://www.pir.org The OMB's cookie memo is at http://www.whitehouse.gov/omb/memoranda/m00-13.html Reported by Newsbytes, http://www.newsbytes.com Andy Grudko D.P.M., Grad I.S, (S.A.) - Grudko Associates - www.grudko.com , Est. 1981 International business intelligence and investigations - ICQ 146498943 Johannesburg (+27 11) 465 9673 - 465 1487 (Fax), Pretoria (+27 12) 244 0255 - 244 0256 (Fax) SACI, WAD, CALI, SAMLF, UKPIN, AFIO (OS), IWWA, PRETrust, AmChamCom When you need it done right - first time 5040 From: Marcelrf-A-GPS-i100 Date: Wed Mar 20, 2002 10:48am Subject: Firms undergo NSA infosec rating http://www.fcw.com/fcw/articles/2002/0318/web-nsa-03-20-02.asp -- "NEXTEL1 IT'S NOT JUST NEXTEL" Subscribe to Nextel1: http://www.groups.yahoo.com/subscribe/NEXTEL1 "NEXTEL2 FOR iDEN SOFTWARE DEVELOPERS" Subscribe to Nextel2: http://www.groups.yahoo.com/subscribe/NEXTEL2 "WIRELESS FORUM HOMELAND SECURITY GROUP" The Complete Resource for Wireless Homeland Security. Subscribe to WFHSG: http://www.groups.yahoo.com/subscribe/WFHSG [Non-text portions of this message have been removed] 5041 From: James M. Atkinson Date: Wed Mar 20, 2002 11:04pm Subject: 60-page DEA report on spy ring Update: The spies who came in from the art sale Creative Loafing has obtained a report detailing alleged Israeli spy activity in the United States. BY JOHN SUGG Editor's note: Portions of the report mentioned in this article can be found at http://atlanta.creativeloafing.com/2002-03-20/news_dea.pdf. A major international espionage saga is unfolding across the United States, with some of its roots right here in the Atlanta area. It's been pretty hush-hush so far, largely because the implications could be a major embarrassment for the government. The spy story is even more touchy because it isn't Saddam, Fidel, Osama or even what passes nowadays for the KGB spying on America -- but our "friend" in the war against "evil," Israel. The basis of the spy allegations is a 60-page document -- a compilation of field reports by Drug Enforcement Administration agents and other U.S. law enforcement officials. Creative Loafing last week obtained a copy of the report from intelligence sources with long-term contacts among both Israeli and American agencies. The government has attempted to deflect attention from earlier leaks about the spy scandal. However, while declining to confirm or deny the authenticity of the document, a spokesman for the DEA, William Glaspy, did acknowledge that the agency had received many reports of the nature described in the 60 pages. A source familiar with the creation of the document has told CL that the 60-page memo was a draft intended as the base for a 250-page report. The larger report has not been produced because of the volatile nature of suggesting that Israel spies on America's deepest secrets. Another DEA spokesperson, Rogene Waite, told Associated Press a draft document had been compiled and forwarded to other agencies. The validity of the scenarios described in the document is attested to in at least one official mention. The Office of the National Counterintelligence Executive, in a March 2001 summary, reported on "suspicious visitors to federal facilities" and noted the type of "aggressive" activity recounted in the document obtained by the Planet. The nation's most prominent Jewish newspaper, the New York-based Forward, also has confirmed portions of the vast spying network -- although stating that the Israelis were monitoring Arabs in the United States, not trying to access U.S. secrets. Referring to the arrest of five Israeli employees of a New Jersey moving company who were arrested and held for two months after the Sept. 11 attack, Forward on March 15 stated: "According to one former high-ranking American intelligence official, who asked not to be named, the FBI came to the conclusion at the end of its investigation that the five Israelis ... were conducting a Mossad surveillance mission and that their employer, Urban Moving Systems of Weehawken, N.J., served as a front." Forward also reported that a counterintelligence probe concluded two of the men were operatives of Mossad, Israel's spy service. Reports of the spying were first made public in December broadcasts by Fox News reporter Carl Cameron. It isn't clear whether he had the 60-page document or was only told its contents. A French online news service has obtained the report, and Le Monde in Paris has advanced the story. However, in the United States, the media ignored the original Fox broadcast, and only a handful of publications. The Atlanta Journal-Constitution hasn't reported the story although another Cox-owned paper, The Palm Beach Post has. The absence of reporting hasn't gone unnoticed. The authoritative British intelligence and military analysis service, Jane's Information Group, on March 13 chided: "It is rather strange that the U.S. media ... seem to be ignoring what may well prove to be the most explosive story since the 11 September attack, the alleged breakup of a major Israeli espionage operation in the United States which aimed to infiltrate both the Justice and Defense departments and which may also have been tracking al-Qaida terrorists before the aircraft hijackings took place." In flat language and sometimes excruciating bureaucratic detail, the document relates scores of encounters between federal agents and Israelis describing themselves as art students. The implication is that the seemingly innocuous cover was used to gain access to sensitive U.S. offices and military installations. For example, Paragraph 82 of the document states that MacDill Air Force Base intelligence officers were warned in March 2001 of the art students' efforts. A month later, a special alert was issued about a "possible intelligence collection effort" at Tinker Air Force Base in Oklahoma City. Among other activities, the base houses AWACS surveillance planes and repairs B-1 bombers. The author of the document is not identified. However, many DEA and other law enforcement agents are named. CL has contacted some of the named agents, and three federal employees have confirmed the incidents described in the report. None disputed the authenticity of the report. One senior DEA official, when read paragraphs that mentioned him, said: "Absolutely, that's my report," adding, however, that he didn't think the incidents were sufficient to prove an ongoing spy operation. All of the federal employees said they could not be quoted by name. The specific incidents are richly chronicled, down to names, drivers' license numbers, addresses and phone numbers of the Israelis. Perhaps most intriguing, the Israelis' military and intelligence specialties are listed: "special forces," "intelligence officer," "demolition/explosive ordnance specialist," "bodyguard to head of Israeli army," "electronic intercept operator" -- even "son of a two-star (Israeli) army general." "The activities of these Israeli art students raised the suspicion of (the DEA's Office of Security Programs) and other field offices when attempts were made to circumvent the access control systems at DEA offices, and when these individuals began to solicit their paintings at the homes of DEA employees," the document states. "The nature of the individuals' conduct, combined with intelligence information and historical information regarding past incidents (involving Israelis leads the DEA) to believe the incidents may well be an organized intelligence gathering activity." The document also links the Israelis to possible drug investigations. The report states: "DEA Orlando has developed the first drug nexus to this group. Telephone numbers obtained from an Israeli Art Student encountered at the Orlando (district office) have been linked to several ongoing DEA MDMA (Ecstasy) investigations in Florida, California, Texas, and New York." Much of the Israeli activity, according to the report, centered on Florida. In addition to attempting to gain access to government installations, the document states that the Israelis approached many intelligence agents, prosecutors and federal marshals at their homes -- including one incident on Davis Islands. In researching this story, the CL has learned of other encounters not included in the 60-page report. For example, a member of Congress from Georgia recounted to CL of being targeted by the art students on two occasions. A Tampa state court judge was also approached. Neither the member of Congress nor the judge wanted to be named. In an era where CNN CEO Walter Issacson says it would be "perverse" to televise Afghan babies killed by U.S. bombs, it's not surprising some stories go unnoticed by a press that embraces "patriotism" by ignoring sacred cows. One such sacred cow is what's happening in Israel and Palestine. Reporters know that to criticize Israel -- to point out, for example, that wanton killing of innocents is equally devilish, whether committed by Ariel Sharon's soldiers flying U.S.-made helicopters, or by a Hamas suicide bomber who pushes the button -- is to risk being called an anti-Semite. It's a tired canard meant to bludgeon debate into silence, but it's often effective. Even with that background, however, it's a little hard to understand the media's avoidance of the spy story. In 1999, word began spreading among intelligence agencies about bands of Israeli "students" doing very strange things, such as popping up around federal buildings and military establishments marketing artwork. According to CL intelligence sources, low-level alerts began being flashed around to offices of the FBI, DEA, federal prosecutors and others. By March 23, 2001, counterintelligence officials had issued a bulletin to be on the watch for Israelis masquerading as "art students." The alert stated that there was an "ongoing 'security threat' in the form of individuals who are purportedly 'Israeli National Art Students' that are targeting government offices selling 'artwork.'" At the same time, American intelligence services were increasingly worried by the dominance of many highly sensitive areas of telecommunications by Israeli companies. Comverse Infosys (now called Verint) provides U.S. lawmen with computer equipment for wiretapping. Speculation is that "catch gates" in the system allowed listeners to be listened to. Software made by another Israeli outfit, Amdocs, provided extensive records of virtually all calls placed by the 25 largest U.S. telephone companies. The relationship of those companies to the detained Israelis is detailed in the 60-page document. The DEA's intense interest in the case stems from its 1997 purchase of $25-million in interception equipment from Israeli companies, according to a March 14 report by Intelligence Online, a French Web-based service that first revealed the existence of the 60-page document. "In assigning so many resources to the inquiry (all DEA offices were asked to contribute)," Intelligence Online stated. "The agency was clearly worried that its own systems might have been compromised." Often the Israeli "students" sold their artwork on street locations near federal buildings. In Tampa on March 1, 2001, a DEA agent heard a knock on his office door. According to the government report: "At the door was a young female who immediately identified herself as an Israeli art student who had beautiful art to sell." Knowing about the security alert, the agent began questioning the "student." After several contradictory statements, the agent concluded "her responses were evasive at best." Elsewhere, the document notes that the students were "persistent" in trying to gain access to the homes of law enforcement personnel. On other occasions, the "students" showed up at homes of intelligence agents, judges and other government employees. The report describes a December 2000 incident when a man and a woman knocked on the door of an Atlanta DEA agent. "Both subjects claimed to be Israeli art students," the document states. "The Special Agent examined some of the artwork, but became suspicious when the students would not provide him with a contact telephone number.... Subsequently, the Special Agent saw someof the exact same artwork for sale at [a]kiosk in the Mall of Georgia." Many of the apparent operatives had set up shop at addresses only stones' throws from Arabs in San Diego, Little Rock, Irving, Texas, and in South Florida. The Planet also has obtained a watch list of mostly Arabs under scrutiny by the U.S. government. The addresses of many correspond to the specific areas where the Israelis established bases. For example, an address for the Sept. 11 hijacking leader, Mohammad Atta, is 3389 Sheridan St. in Hollywood, Fla., only a few blocks and a few hundred feet from the address of some of the Israelis, at 4220 Sheridan. A dozen Israelis, including the alleged surveillance leader, had been based in Hollywood, Fla., between January and June last year -- quite possibly watching Arabs living nearby who are suspected of providing logistical support to Osama bin Laden's network. Especially in Florida, where 10 of the 19 Sept. 11 terrorists lived, the revelations about the Israeli activities bolster speculation, reported by a Fox news reporter, that the students-cum-spies might have gained advance knowledge of aspects of the Sept. 11 terrorists -- and not passed on that critical intelligence to the United States. CL sources with Israeli connections suggest that the information might have been relayed to U.S. agencies, but might have been ignored or overlooked. Despite the highly suspect behavior of the Israelis, the media hadn't picked up on the story. Then came Sept. 11. While America was mesmerized by the "War on Terrorism," the media went out to a four-martini lunch when it came to skeptical reporting. With a few commendable exceptions. One of those is Carl Cameron, a gutsy reporter for Fox News. On Dec. 12, Cameron broke the blockbuster spy story. He said at the time: "Since Sept. 11, more than 60 Israelis have been arrested or detained, either under the new PATRIOT anti-terrorism law, or for immigration violations. A handful of active Israeli military were among those detained, according to investigators, who say some of the detainees also failed polygraph questions when asked about alleged surveillance activities against and in the United States." Fox also reported the Israeli "students" "targeted" U.S. military bases -- which is bolstered by the report obtained by the CL. In the rest of the world -- Europe, Arab countries and Israel, especially -- the story made headlines. Even the official Chinese news agency perked up. Not in our well-defended (against disturbing news) homeland, however. Cameron, in an interview, said he doesn't believe the conspiracy theories about why the story was ignored here. An honest scribe, he points to a shortcoming in his own work -- one hammered on by Israeli critics at the time -- conceding "there were no (on the record) interviews. I didn't tell other reporters where to find the documents. They couldn't do instant journalism." Others at Fox confirm there was intense pressure on the network by pro-Israeli lobbying groups, such as the Anti-Defamation League and the misnamed Committee for Accuracy in Middle East Reporting (CAMERA). "These charges are arrant nonsense unworthy of the usually reliable Fox News," CAMERA huffed in a Dec. 12 release. Cameron reported Dec. 13 that federal agents were afraid to criticize Israel. "Investigators within the DEA, INS and FBI have all told Fox News that to pursue or even suggest Israeli spying ... is considered career suicide." Cameron told me in similar language that's what journalists also can face. And, what's clear is that Fox quickly removed the story from its Web site. (It was reposted this month by Fox after other media began showing interest in the story.) After Cameron's initial reports, the story pretty much evaporated in the United States before Christmas. Then, all hell broke loose in the last few weeks. Intelligence Online in France obtained the same 60-page June 2001 federal report that CL has. The French Web site reported that 120 Israelis had by now been detained or deported by U.S. authorities. Let's repeat that: 120 potential spies. This isn't worth press curiosity? Few papers have given the story significant space. Many, like the AJC, haven't uttered a peep. Some of what has seeped out is disturbing. The Oklahoman, prompted by the French articles, reported last week that 10 months ago four Israelis peddling artwork (but carrying military IDs) were detained near sensitive Tinker Air Force Base in Oklahoma. Le Monde in Paris recounted that six intercepted "students" had cell phones purchased by an Israeli vice consul in the United States. Sources told me that many of the phones had a walkie-talkie feature that was virtually impossible to intercept. Bush administration shills were quick to try to spin the story -- perhaps to minimize damage should it turn out the government did have information in advance about the people or activities that led to the Sept. 11 attack. A Justice Department spokesperson, Susan Dryden, called the spy report an "urban myth," and other federal flacks trumpeted that no Israeli had been charged with or deported for spying. Of course, in the Great Game, "friendly" spies are seldom embarrassed by being called by their true colors. The Israelis who have been deported have been given the boot because of visa expirations and other minor violations. The Washington Post, which apparently doesn't have the 60-page document, nonetheless reported March 6 that unnamed law enforcement officials had told the paper that a "disgruntled" DEA agent had compiled the report after other federal agencies didn't react to the Israelis' suspicious behavior. The Post, however, also quoted a DEA spokesman who acknowledged that the large number of incident reports had been combined into a draft memo. As with CL's inquiry, the DEA spokesman wouldn't confirm for the Post whether the memo was the 60-page document. Predictably, Israeli Embassy spokesman Mark Reguev derided the Intelligence Online report as "nonsense." And, pro-Israeli apologists such as anti-Arab ideologue Daniel Pipes quickly took the field with strident polemics. Pipes, who makes no claim of having seen the 60-page document, nonetheless claimed in a March 11 column that the story was a "dangerous falsehood" and that "U.S. journalists found not a shred of evidence to support" it. The fact that reporters were beginning to piece together real shreds was blithely ignored by Pipes. Israel in the past has belligerently denied wrongdoing until long after the truth was obvious. Israel claimed Jonathan Pollard -- a super spy who did horrendous, deadly damage to the United States until arrested in 1985 - wasn't an agent. And, Israel has stubbornly contended its 1967 attack on the USS Liberty, in which 35 American sailors were slaughtered, was an accident -- a lie exposed in recent reports including one last fall on the History Channel. A recent authoritative book, Body of Secrets, by James Bamford, concludes that National Security Agency officials "were virtually unanimous in their belief that the attack was deliberate." With the purported art students, it's likely that denial will reach screeching levels. The Bush administration would find it difficult to explain why it either ignored or discounted such a large espionage operation. Senior Editor John Sugg can be reached at 404-614-1241. 03.20.02 -- -------------------------------------------------------------------------------------------------- The First, The Largest, The Most Popular, and The Most Complete TSCM, Bug Sweep, Spy Hunting, and Counterintelligence Site on the Internet. -------------------------------------------------------------------------------------------------- James M. AtkinsonPh: (978) 546-3803 Granite Island GroupFax: (978) 546-9467 127 Eastern Avenue #291http://www.tscm.com/ Gloucester, MA 01931-8008mailto:jmatk@t... -------------------------------------------------------------------------------------------------- "...three shall be the number to count, and the number to be counted shall be three.....four shall thou not count......five is right out". - M. Python -------------------------------------------------------------------------------------------------- 5042 From: David Alexander Date: Thu Mar 21, 2002 6:35am Subject: Re: Firms undergo NSA Infosec rating I have to say this is a positive step in the right direction. It is to be hoped that one of the assessment criteria is: 'Must have ISO 17799 accreditation' Ok, so I'm biased, but it is as good a foundation to build security from as you could ever wish for. As we all know security is as much a state of mind as a set of physical and procedural safeguards. ISO 17799 positively encourages a good culture. It's one of the things the audit will look for and assess. My 2c. _______________________________ David Alexander M.INSTIS Global Infrastructure Director Bookham Technology plc Tel: +44 (0) 1327 356264 Mobile: +44 (0) 7799 881284 Fax: +44 (0) 1327 356775 http://www.bookham.com ======================================================================= This e-mail is intended for the person it is addressed to only. The information contained in it may be confidential and/or protected by law. If you are not the intended recipient of this message, you must not make any use of this information, or copy or show it to any person. Please contact us immediately to tell us that you have received this e-mail, and return the original to us. Any use, forwarding, printing or copying of this message is strictly prohibited. No part of this message can be considered a request for goods or services. ======================================================================= Any questions about Bookham's E-Mail service should be directed to postmaster@b....