The FBI’s Contract to Buy Mass Internet Data

https://www.vice.com/en/article/dy3z9a/fbi-bought-netflow-data-team-cymru-contract

by leotravis10 • 3 years ago

201 51 3 years ago

vice.com

greyface-• 3 years ago

The document: https://s3.documentcloud.org/documents/23722785/fbi-team-cym...

costco• 3 years ago

It's only $35k a month? I think we can all assume that basically any government has this now.

kube-system• 3 years ago

Or criminal group, blackmailers and harassers, private industry looking to extract more money from you, etc.

worrycue• 3 years ago

I wonder if this will be the silver lining of AI-generated spam. Online information might plummet in value due to reduced signal-noise ratio. People will become harder to read and manipulate.

ShamelessC• 3 years ago

People don’t care enough for it to matter.

Syonyk• 3 years ago

Of course they did. And they'll keep doing it, because they can. And because knowledge like that is power, and they like power.

At this point, you can safely assume that anything muttered by a "tin foil hat nutter" sort in about 2005-2010 about the internet, computers, three letter agencies, and the like is correct. It's sure heading in that direction.

LesZedCB• 3 years ago

good thing everything is hidden cleverly behind this impenetrable username!

dylan6042• 3 years ago

come now, we all now that you have to stand in front of a mirror holding your ID next to your face to take an image to send to dang to prove who you really are before hiding behind that anonymous username. and there's no way that dang stored those images on a bucket that accidentally got misconfigured to have public access. /s

mattpallissard2• 3 years ago

At this point, you can safely assume that anything muttered by a "tin foil hat nutter" sort in about 2005-2010 about the internet, computers, three letter agencies, and the like is correct.

As one of the few software/tech guys for hundreds of miles I get a lot of "I suspect they're doing X, but that's probably not even possible". In regards to BigBrother/BigCo.

I correct them all. Not possible, probable.

dylan6042• 3 years ago

wait, are you saying "but that's not even possible" should be s/possible/probable/ in that statement, or trying to say that not only is it possible but probable that they are doing it?

th15row• 3 years ago

I had no doubts about it. We're heading to a very grim future.

tptacek4• 3 years ago

This isn't at all true. For instance, during Snowdonia, it was an article of faith on HN that NSA had a portal they could log into to pop a shell on Google's servers, when in fact what it turned out they had was a crappy web portal that they used to submit FISA directives.

It would be more accurate to say that these concerns are directionally correct, but that the particulars matter a lot.

passing_by_and• 3 years ago

Why do you speak with such certainty? How can you possibly know if anything you just said is accurate?

tyingq• 3 years ago

There was "SSL added and removed here :)". Seems a bit more than a crappy web portal.

https://i.insider.com/5271388a6bb3f7ac4756d90c?width=700

raxxorraxor• 3 years ago

In the background of uncertainty I wouldn't restrict this as directional at all. Also not if you extrapolate past behavior of intelligence agencies and incentives to collect data. The agency probably isn't evil, but the point is that such ambitions grow and corrupt and that such data should be protected. So the extend of the access isn't even of primary concern, but there is much to suggest it extends a "shitty web portal".

woolion• 3 years ago

I think it's safe to say GP has an opinion of what a "tin foil hat nutter" is, which is reasonable with regards to documented reality. However, there are a number of people who poison the well with absurd claims such as "NSA can break all encryption with quantum computers, so you might as well use unencrypted chats on Whatsapp using Windows". So of course such claims are bogus; documents show that what they do is find ways around the encryption, through bugs or architectural gaps.

advisedwang• 3 years ago

Which ISPs are giving our traffic data to Team Cymru? We need them named and shamed.

soupfordummies• 3 years ago

Absolutely agree. However, even then, what am I gonna do, go to the ONE other alternative in my neighborhood?

justapassenger3• 3 years ago

"Mass Internet Data" and $35k per month?

Anyone who dealt with government contracts and/or internet knows that those 2 statements don't align in any way. This data has to be extremely, extremely, extremely limited and/or useless.

spydum• 3 years ago

I have had access to this type of data before commercially for purpose. It's useful for knowing "who" has established connections to "who", but at just an IP level. Powerful for combining with other analysis on either the sender or receiver. You won't know what they said, but you know what ports they used.

So if I see a sudden spike in IP addresses geocoded as being in the United States, and the destination is an unusual but specific port hosted in Belarus, it might be worth looking at a new C2 malware.

justapassenger3• 3 years ago

Yeah, I know those types of datasets.

But did you see data, sold for $35k, to a government? I didn't, but I'm fairly confident in assuming it doesn't have much in it.

YtGoodman• 3 years ago

Then why did they buy it?

justapassenger3• 3 years ago

Because government is very efficient with all the funds.

hsdropout• 3 years ago

*we

cronix• 3 years ago

Oh, you mean ISP's sell data to whoever has money to buy it, including the FBI.

xfitm3• 3 years ago

Ah yes, at my company many years ago we sold data to law enforcement when they didn't have a warrant but had a case someone really wanted to pursue. They were happy to pay quite high prices, and on a semi regular basis because we were a large "small business" that handled a lot of data.

We'd allow them to come in and image disks, span ports, modify software, you name it.

sockaddr• 3 years ago

Hmm yes. Find a loophole around my rights to privacy and make me pay for it with my own tax dollars and while you’re at it make sure you pay a crazy prices. Thanks Uncle Sam.

fallingknife• 3 years ago

It's time to think about extending certain constitutional restrictions to corporations. It's becoming all to common that the government contracts out its rights violations to the private sector.

Nifty3929• 3 years ago

This is the most important point! Again and again corporations and the government demonstrate that they are one-and-the-same, with the gov't using corporations to do the work that wouldn't (yet) be allowed for them to do directly.

jrochkind1• 3 years ago

After Motherboard reported the U.S. Army and other purchases of Team Cymru data, the Tor Project, the organization behind the Tor anonymity network, said it was moving away from infrastructure that Team Cymru had donated. The Tor Project told Motherboard it expects that migration to be completed this Spring.

datkam• 3 years ago

When you know that they are doing illegal parallel construction, what can surprise you?

grubbs• 3 years ago

"Team Cymru explicitly markets its product’s capability of being able to track traffic through virtual private networks, and show which server traffic is originating from. "

How does this work exactly?

wmf• 3 years ago

If you see N bytes flow from IP A to a VPN server then N bytes from that VPN server to IP B at the same time, you can assume that A is accessing B through the VPN. It doesn't always work but the Feds only need to get lucky one time.

timeon2• 3 years ago

It is easier with obscure VPN servers.

tgsovlerkhgsel2• 3 years ago

I'm glad that in the EU, GDPR would make it illegal for ISPs to sell this kind of data (and culture would make it costly beyond just the cost of the fine).

Y'all need not just GDPR, but a variant of it that comes with criminal penalties as well. Right now, if illegal behavior increases profit by more than 4% of your company's revenue, just doing it for as long as you can get away with it then paying the fine is unfortunately a no-brainer for companies.

thebetatester• 3 years ago

But who would prosecute such a crime? The FBI? Seems unlikely in this scenario

timeon2• 3 years ago

That is just hypothetical scenario since FBI is doing it legally now.

dns_snek• 3 years ago

I'm glad that in the EU, GDPR would make it illegal for ISPs to sell this kind of data

As much as I wish this were true, they carved out exemptions for themselves and their own goals. As such, GDPR doesn't apply to abuses of data for "law enforcement" purposes or other government operations.

tgsovlerkhgsel2• 3 years ago

Still prevents the middlemen that would sell to governments from existing in the first place.

rodgerd• 3 years ago

Something something Tiktok.

Ok, that's a bit snarky. But seriously, the problem here is surveillance capitalism and the willingness of surveillance capitalism to enable, well, anyone with a buck: good, bad, or indifferent, all while lobbying against any restrictions on doing so. Is TikTok bad? Is it's close relationship with the CCP awful? Yes. But this is, fundamentally, no different.

maerF0x0• 3 years ago

The worst part of this / NSA spying on Americans is we pay for it. Prisoners constructing their own prison.

Consumer8735• 3 years ago

Not only prisoners, "slaves" being ruled by those (rich) in power with little ability to have any say. Similarly to how US prisoners are paid slave wages to manufacture american goods.

tptacek4• 3 years ago

A note that if the data is in fact NetFlow data (it's labeled "flow" in the contract data, but that's likely because there's a bunch of vendor-specific flow formats), then it by definition won't contain things like URLs and email addresses; NetFlow is 5-tuple keyed (src, dst, sport, dport, proto) packet and byte counts. It's usually heavily sampled.

It is, of course, bad that Team Cymru is running a side hustle selling this stuff to the FBI. On the other hand, if this alarms you, you should be much more upset by how ISPs are monetizing your data elsewhere. Also: turn DOH on.

The FBI’s Contract to Buy Mass Internet Data

Related Stories