Stingray manual released

http://www.theblot.com/exclusive-stingray-maker-asked-fcc-to-block-release-of-spy-gear-manual-7739514?1

by zmanian • 11 years ago

53 23 11 years ago

Too bad most of it has been censored. This means that even though the manual has been published a lot of it is useless.

I'm not that familiar with the US FOIA (Freedom Of Information Act). But why is so much of the document censored? Is the US government just allowed to censor whatever they please in documents they have to send due to FOIA requests? Doesn't that defeat the purpose?

cnvogel• 11 years ago

Just glancing at the document, the censoring is marked "Ex.4" (exemption #4) in all places.

Exemption 4 is: "A trade secret or privileged or confidential commercial or financial information obtained from a person". [https://www.sec.gov/foia/nfoia.htm]

Add: Frankly, I directly jumped to the (redacted) PDF of the user-manual, without even bothering to read the article. But the article nicely explains this, too...

bediger4000• 11 years ago

There's absolutely no way that everything they marked "FOIA Ex.4" is exempt under than that wording. If trade secret laws were that strict, then literally everything would be a trade secret. The "exemption 4" marking is a big middle finger to the MOIA requester. But it does raise the question of what's so important about Stingray and Kingfisher that everything about them has to be kept under wraps? We know in general what they do. We know that they have delicate screw threads. Unless there's some general and very obvious 4th Amendment abuse going on, I can't see why you'd keep it under wraps.

a3n• 11 years ago

why is so much of the document censored?

The direct reason is that the responding agency, the FCC, asked the manufacturer and an undisclosed government agency what should be censored.

brixon• 11 years ago

The FCC did not write the document, so they are not the best ones to know what in the documents are trade secrets.

hydrogen184• 11 years ago

The reason for the FOIA act is to allow government agencies to whitewash their secrecy. As long as they 'comply' with the FOIA act, they are doing everything they are legally required to do it.

"See we released the files!", as they hand you a book full of black pages.

ethbro2• 11 years ago

As long as they 'comply' with the FOIA act, they are doing everything they are legally required to do it.

Given that this is the government, it seems like the FOIA censoring process is still highly manual.

Therefore, I believe there have been a large number of cases where important information was gleaned like this: - FOIA: "I would like all documents pertaining to wiretapping?" - Agency: "That is not a specific program, so here's a heavily redacted summary document." - FOIA: "I would like all documents pertaining to program BLUSTER, the name of which was not-redacted in the previous information you gave me." - Agency: "Here is heavily redacted but still more specific information on the program you requested."

My understanding is that there's somewhat of a gray area for requests that do not accurately enough specify the information desired. The agency in question can basically say "We don't understand what you're requesting, so there is no information."

Whereas if you more tightly specify your request and such a program does exist, they are legally required to give you something, even if it's an entirely blacked out page.

peterkelly• 11 years ago

"Released" may be a bit of an overstatement. Here's an excerpt:

The StingRay is a [REDACTED]. The following features and capabilities are provided by the StingRay:

- [REDACTED]

The StingRay unit is shown in Figure 3-1 and is [REDACTED]

Figure 3.1: Stingray Unit [REDACTED]

Sanddancer2• 11 years ago

Hmm, looking at Appendix B, it seems that the hardware is using something with a 4 clause BSD-style license. Could they be using OpenSSL for this product, perhaps?

Other than that, it seems that the Kingfish is their portable unit that's designed to be out in a field location, judging by the remote antenna input on the unit, and a section discussing battery charging. The Stingray unit seems to be something that's in a more controlled location, and as such, has an ethernet port, serial port, and a pair of usb a ports. External hard drive ports, perhaps?

hydrogen184• 11 years ago

What would the use of open source software matter?

calgoo• 11 years ago

If its GPL code.... We could try to make a request for the source.

Sanddancer2• 11 years ago

Was just a curious thing I noticed looking through the [REDACTED]. Little bits and pieces of clues regarding how it works.

kalleboo2• 11 years ago

The one thing that's not redacted is the existence of a 2100 MHz converter. I guess that suggests UMTS support rather than only GSM, which means they've either broken the authentication UMTS terminals do of the network or they have the full cooperation of the network operators.

lazyjones• 11 years ago

They (NSA, GCHQ) stole many SIM card authentication keys, so they can probably eavesdrop on UMTS conversations with them: http://electrospaces.blogspot.com/2015/02/nsa-and-gchq-steal...

tmosleyIII2• 11 years ago

There currently is no need to use stolen SIM card authentication keys.

tmosleyIII2• 11 years ago

They have full cooperation and it is definitely not just GSM.

kalleboo2• 11 years ago

What I always wondered was, if they have full cooperation, why do they even need hardware? Can't they just get access to tap the communications centrally? Would be far easier.

mwexler• 11 years ago

For those wondering: Stingray appears to be "a once-secret cellphone surveillance device distributed to federal, state and local law enforcement," taken from the first line in the article.

So, not the car or bicycle, as I was secretly hoping to see.

Stingray manual released

Related Stories