Universal Benefit and Data Security

I don't see what the issue is with Data Security and the proposal for Universal Benefit.

Maybe there are many in the UK that cannot get access to the Internet, although I find this difficult to believe, but the fact that there is a concern with keeping claimants information secure seems to be a "red herring".

Data security has been a well crafted part of e-commerce for a long time now. Even banks use it - and we all know they have no problems!!!!!

Using the Tor Browser package

The Vidalia Tor package can be used to obscure your location and identity. Your reasons for doing this may vary. The normal use of this package is for secure and anonymous communications in regimes where there is oppression. Tor should not be used to circumvent copyright restrictions.

When you download the Tor/Vidalia package, as opposed to a separate download of the Tor program that can be configured to your specifications, it will install a pre-configured "private" browser (Firefox) that can be used to surf the Internet anonymously.  The proxy settings are automatically set, and at least the version that I was using, the browser has TorButton configured allowing you to toggle its operation.

The install will be made to a directory on your computer that will contain a short-cut to the "private browser" that when run will load Vidalia, selecting an appropriate exit server and then load Firefox allowing you to browse without your identity being revealed. You have the option of selecting a different identity and carry on with your anonymous browsing.

I have used this package and also the Tor bundle on its own and have configured it to exit in specific countries.

Links:

•  The WhoIs Look-up - How to determine what IP address you appear to be on the Internet.
• An update to the Tor Browser Package
• How your individual device can be identified on the Internet

The Tor package is not entirely secure on its own, to ensure complete anonymity Vidalia provide a means by which a "bridge server" is used. These "bridge" servers are not listed on any of the references to the active Tor servers on the network. To configure the Tor package to use a "bridge" you have to first select a "bridge server" and then tell Vidalia to use it. The instructions for this can be found on the Vidalia Onion website

 You need to use a "bridge" in situations where your ISP blocks known Tor servers. This would be the case in a repressive regime such as Communist China.

In addition to your IPv4 address being revealed (your IPv6 address may also be able to be determined) the IPv6 (DOCSIS) world will probably allow the determination of in individual devices that are behind a Network Address Translation device such as a router or firewall.

EFF - the Electronic Frontier Foundation

Those that run torrent tracking sites such as Isohunt and The Pirate Bay claim that donations to EFF, the Electronic Frontier Foundation, will help the abuse of those downloading copyright material. Surely this is missing the point. It is still stealing, no amount of rationalization is going to change that fact.

What EFF say on their website:

"..... the Electronic Frontier Foundation (EFF) is the first line of defense"

and:

"EFF is the leading civil liberties group defending  your rights in the digital world."

The problem I have with all this is the same one that I have with the "Occupy" crowd.

Regulation of Investigatory Powers Act 2000

... an Act of the Parliament of the United Kingdom,  regulating the powers of public bodies to carry out surveillance and  investigation, and covering the interception of communications. It was  introduced to take account of technological change such as the growth of the Internet and strong encryption.

In a lot of respects the UK is way ahead of North America when it comes to legislation relating to privacy (and the lack thereof).

Good to see that it kept Murdoch and his crew under control! (sic)

• RIPA on WikiP.
• The RIPA website

RIPA was brought to my attention whilst I was researching Lawful Interception and was mentioned in a BBC Radio 4 broadcast - File on 4 - "Cyber-Spies" - broadcast 25 September 2011
programme ID: b014q04r

The discussion was related to the involvement of British "Tech" companies in the business of Cyber-Surveillance in regimes such as those involved with the Arab Spring.

Lawful Interception

Generally described as Intelligence  Support Systems, the act of "Lawful Interception" includes activities such as: Cyber Surveillance, Cell (or Mobile) Data Retention,   Internet Application Decoding, Cell Phone Tracking, Social Networking Investigations and Deep Packet Inspection.

This is a topic that is great interest to me. The mechanisms and techniques behind how this is all done. I am not making a political statement about the rights and wrongs of all this.

• Why Anonymity Matters 

HideMyAss dot com

What HideMyAss say about themselves:

Use our free proxy to surf anonymously online, hide your IP address, secure your internet connection, hide your internet history, and protect your online identity.

The visit that prompted this post was one made to my page on Joshua Sham, a person that I have identified as a shill for OneWorldDataRecovery - if it were the intention that the visitor did not want me to know that they had visited and what pages they had accessed then they achieved the exact opposite.
   
 I regularly check my Google analytics reports and my server logs and the page reference that turned up in the GA report does not exist (obviously) on my server. This then prompted the search of the server log that then reveals the Hide My Ass access was to the page techwatch.ca/sham.html
 
In Google Analytics a visit to a specific webpage is obscured in the Analytics report by the substitution of a non-existent page. You will only be able to detect the visit if you check for visits to such pages that don't exist. Then, by cross referencing your server log you can see what actual pages were accessed and from where. While this is not as straight forward as just looking in Google Analytics for visits from specific users or to obtain browsing data about them, the use of HideMyAss does not stop the webmaster from determining that a visit had been made and from whom.

As far as the claim by HideMyAss that you can surf the Web anonymously, this is only partially true. The use of HideMyAss only makes the determination of the origin of the visit a little more complex for the Webmaster.

Links:

• Why Anonymity Matters  
• The new post on Joshua Sham

Determining who you are from your IP address

With the proposed changes to the IP addressing scheme used for Internet routing it will theoretically be possible to identify individual communications devices even if they are located behind a firewall or a NAT (Network Address Translator). This is accomplished using a process called "tunneling". The term "tunneling" is used here in a very generic manner as "Tunneling Protocols" can take on many forms and are beyond  the scope of this page.

The main discussion that you here when IPv6 is discussed is with regard to the fact that IPv4 addresses are going to run out and whether particular networking equipment and services are IPv6 ready. This is a minor issue in this debate.

The implications of this increased address-ability is that if you are participating  in an activity that you do not want traced an interested party may be able to pin-point your location. At the present time, under IPv4 addressing, your IP address will only revealed to the outside world as the one assigned to your modem or gateway by your ISP. Devices located behind a router or Network Address Translator cannot be identified unless there is some other interim process at play.

An Internet user can be connected to that server from anywhere in the world using numerous IP obscuring techniques. But, if IPv6 is used, the routing to your individual device can be determined irrespective if what proxy you are connecting through.

If you run the ipconfig command on a Windows 7 computer you get a listing of the Windows IP Configuration. At the present time it is not known whether the information so generated is visible, or is possible to be so, to the outside world. Or the Tunnel Adapter at the ISP. The listing that I get when connected at home reveals not only the local IP address assigned by my router by DHCP but also the Link-Local IPv6 address.

3322.net and 3322.org

A Chinese Internet registrar and Portal.

Maybe the host for GhostNet

The Occupy Movement

The problem  that I have with all this is that the people, largely young people, that follow all this are the same as those who do not see anything wrong with file sharing and copyright violation.

The issues may not be fair and the laws governing them ineffectual but this does not mean that actions of the Occupy/Anti Globalization lobby are just.

I guess it is because I consider, I am, one of the 1%.

I bet they all have smart phones! I don't but I do have a fair investment in Apple. I remain to be skeptical about Facebook.

• EFF  - the Electronic Frontier Foundation
• Copy Protection and methods used to protect Copyright

Chilling Effects Clearing House

The Chilling Effects site contains a wealth of information pertaining to Internet rights and legal issues.

It maintains a database of requests for the removal of information from the Internet and other violations of copyright.

If Google receives a complaint filed under the DMCA or a copyright infraction claim it make take down the reference to that work in accordance with the "safe harbor" provision of the DMCA. This protects ISPs and network providers from liability if they take down material if they receive a complaint.

When such a "take-down" has been made an entry will be made in the ChillingEffects.org's database and you can search that for entries.

Cyber Spies

BBC Radio 4 - File on 4 - broadcast 25 September 2011 -  b014q04r

In the current digital age security has taken on new faces. Cyber Spies are not, but are in some cases, figments of TV and radio program script writers imagination. Some of the material on the BBC Radio 4 programme "Cyber Spies" was that, and FUD put out by those that are responsible in keeping us "safe" - or at least providing the illusion that we are.

Stephen Grey investigates the use of computer hacking by the police and security agencies to combat criminal exploitation of the internet and asks if it is legal.

• Lawful Interception 
• Regulation of Investigatory Powers Act 2000  - the reason that my frame of reference is from a UK perspective is that we listen pretty much exclusively to UK radio, even though we currently live in Canada.
• Cyber security

Finfisher

Finfisher IT - Gamma International gammagroup dot com - Andover, Hampshire UK

Mentioned on the BBC programme "File on 4 - Cyber Spies" for supplying cyber-surveillance solutions to the Mubarak government in Egypt pre the Arab Spring uprising. Denied by Gamama International but reports of how it allowed the Mubarak regime to monitor Skype, Hotmail and GMail messages of dissidents.

Hosni Mubarak, his former prime minister Ahmed Nazif and interior minister Habib el-Adli seem to have been instrumental in government run cyber-spying.

• BBC Radio 4 - File on 4 - broadcast 25 September 2011 -  b014q04r 
• The Gamma International website - details of the Finfisher IT Intrusion Training Program
• Mubarak fined for mobile, Internet cut - By Ashraf Madbouly - The Egyptian Gazette. Saturday, May 28, 2011

Quote from The Egyptian Gazette:
In February, Vodafone also accused the authorities of using its network to send pro-government text messages to subscribers.

• Lawful Interception on The Technology Muse
• Cyber-security

Office of the Privacy Commissioner of Canada

The Privacy Commissioner of Canada, Jennifer Stoddart, is an Officer of Parliament who reports directly to the House of Commons and the Senate.

• Personal Information Protection and Electronic Documents Act
• Personal Property Security Act - PPSA.ca

Hide-My-IP.com

Hide-My-IP.html  - I think that this is supposed to be HideMyAss - from a visit to Joshua Sham page
I have made a post for HideMyAss - I might as well finish this one along with pages for IP Look-up services.

XML Records of Cellular Phone Text Messages

The fact that it is possible to retrieve messages in this format was brought to my attention  20 April 2011.

• The XML viewer by Mindfusion.

Why do Internet users want to Block Google Analytics

This page is a recap of the usage of Google Analytics, how it has helped in the development of my website and the apparent misunderstanding of those that seem to want to block its access?

When a visitors accesses this website a Javascript on the page records some details of the visit. These details are used to determine the desires of the visitor. Changes are made accordingly.

Some posters on forums seem to feel that this is an invasion of their privacy. This is mainly due to the lack of understanding about the information that is collected and made available to the website owner. What information Google retain and extract from this venture is another matter.

There seems to be a deep distrust of Google

SLAPP - Strategic Lawsuit Against Public Participation

An acronym coined by Penelope Canan and George W. Pring, University of Denver.  Describing the bully-boy" tactic to silence critics by using the legal system.

What the WikiP page on SLAPP says:

A strategic lawsuit against public participation (SLAPP) is a lawsuit that is intended to censor, intimidate, and silence critics by burdening them with the cost of a legal defense until they abandon their criticism or opposition

I am not sure where the following quote was from, but it is related to blogging and the Internet:

......... if in your blogging you make a false statement, it is just that. So, just report things that you are know are true, or say that what you are saying is just conjecture.

A lot of what I blog about is speculation (conjecture)

Downloading from P2P could be construed as an action that a SLAPP be launched. Organizations such as EFF are likely to claim that such cases are examples of SLAPP. Those that are against this sort of legal activity are those that are the apologists (i.e. The Electronic Frontier Foundation), those that launch these suits are likley to be the copyright holders.

Scroogle

How to search the Internet and not let Google know what you are searching for and where located.

    As you can see below it does not stop anyone seeing your IP address and what you are searching for.

There is an entry on WikiP for Scroogle - they (whoever made the entry) are not that impressed with them either!

I use Google Analytics, but not for the sinister goals that Scroogle are trying to circumvent. I do see where they are going with their thoughts, however.

While the visits are somewhat anonymous when a visitor arrives on this site an entry appears in my server log:

216.26.214.81 - - [19/Nov/2007:13:50:08 -0500] "GET /nov_exp.html HTTP/1.1"  200 20098              ____/ /www.scroogle.org/cgi-bin/nbbw.cgi"  "Mozilla/5.0 (X11; U;  Linux i686; en-US; rv:1.8.1.9) Gecko/20071111 Firefox/2.0.0.9"

The fact that the visitor was a Linux user and they visited the nov_exp page tells me what I need to know about the visitor. The content of the page nov_exp is likely to be concerned with XP drivers for a wireless notebook.

Actually, Scroogle was probably the Linux user. The IP was probably not the originator of the search but, nevertheless, the visit was registered.


This was the first time that the string: "www.scroogle.org/cgi-bin/nbbw.cgi" was seen


The "scrapper" is available to webmasters - but there may be a little bit of hypocrisy going on here?

 One of the benefits is that you can ensure that your employer cannot track your Internet searches as the search string is masked by the browser extension. Which, presumably has to be installed on the browsers computer. (April 2011 - not sure what I meant here when I first wrote this page - Nov 2007)

The way that it is approached it is if there is something really sinister with the way that Google collect information and what their intentions are. The fact that cookies are set - something the majority of websites do - and information is gathered - such as the users IP and the search string (keywords). This information doesn't have to be used for nefarious means. In fact it can be used to make your surfing experience better.

I am a totally commercial-free website - I use Google Analytics to track visits to this site. I know what I can and can't do with the information that Google collects for me. In fact, I would be surprised if they are even interested in the information that I monitor. As far as a Machiavellian plat with big business is concerned - I consider it a nonsense.

I do not use Adsense, in fact I think that it is a waste of time! The fact that Scroogle post such as the shot below is an indication that they are clueless.

If you wanted to stop Google tracking you, yes, you could turn off JavaScript but that would not stop the Adsense ads from polluting your screen.

• Scroogle home page
• Microsoft bans Scroogle  - from theregister.co.uk

Secondary ("disposable") Email Addresses

I recommend that you use a secondary e-mail address when communicating with this web-site and any other web-site that you are not familiar with.

Many ISPs and email providers offer the ability to create "throw-away" addresses so that you do not have to reveal you true or primary email address.

Update 5 May 2012

Having to setup another email account after one appeared to have been compromised. It highlighted the need to use "disposable" or secondary email addresses for subscriptions. This was something that the Roger's technician concurred was a good idea. Also, the fact that I was talking directly to Roger's who were looking directly at my Internet accounts, it was clear that there were no notes on my file that there was any suspicion of any activity on my Internet connection that was not anything than approved by Rogers.
This was a prime opportunity for them to ask about whether I had been using my connection to run a web server.

Is SSHTunel.exe an Achilles' heel?

If I were an "Anti P2P Organization" (APO) I would try to inject data that would cause the SSH encryption algorithm to throw an exception.