News
Directly To
Your Inbox
Follow PJ Media

Skype Users Beware: Big Brother May Be Listening

Has the National Security Agency already cracked the program that terrorists consider safe?

by
Annie Jacobsen

Bio

February 20, 2009 - 12:35 am
Page 1 of 2  Next ->   View as Single Page

How do terrorists who know they’re being monitored by the U.S. National Security Agency (NSA) communicate with one another? Whenever I get the opportunity to interview people in the intelligence community, I always ask this question. One of the more interesting ways, I once learned, was that some terrorists were using the blogging software WordPress.

There’s a feature on WordPress that allows one blogger to write a draft of something which he/she then “saves as draft” but doesn’t publish. Along comes a second blogger, with proprietary access to the WordPress account, who then reads the draft written by the first blogger (in this case, terrorist), erases those words, and types his/her own message, which is then also saved as a draft. At first, the NSA had a hard time accessing the WordPress system. But then they did. For obvious reasons, I was not told how.

As for me, I talk to my sources on Skype, a software program that allows users to make telephone calls over the Internet for free. The headset you need costs about $59. It is common knowledge that the NSA can’t hack into Skype, which is why it’s a popular tool for anyone who worries, with good reason, that the NSA might be listening in on them — journalists, whistleblowers, and terrorists alike.

Advertisement

Apparently not for long. Internet technology reporter Lewis Page writes in The Register that a source at the Counter Terror Expo in London says, “America’s super secret National Security Agency (NSA) is offering ‘billions’ to any firm which can offer reliable eavesdropping on Skype IM and voice traffic.”

PJ Media appreciates your comments that abide by the following guidelines:

1. Avoid profanities or foul language unless it is contained in a necessary quote or is relevant to the comment.

2. Stay on topic.

3. Disagree, but avoid ad hominem attacks.

4. Threats are treated seriously and reported to law enforcement.

5. Spam and advertising are not permitted in the comments area.

These guidelines are very general and cannot cover every possible situation. Please don't assume that PJ Media management agrees with or otherwise endorses any particular comment. We reserve the right to filter or delete comments or to deny posting privileges entirely at our discretion. Please note that comments are reviewed by the editorial staff and may not be posted immediately. If you feel your comment was filtered inappropriately, please email us at story@pjmedia.com.

36 Comments, 35 Threads

  1. A few years ago, I was sending emails through “the great firewall” of a Southeast Asian country by typing messages in Microsoft Paint, and sending JPEG attachments. Because text wasn’t being indexed, I figured I could send messages freely, so long as I wasn’t under investigation.

    Months later, spammers caught on to the same tactic of attaching their sales pitch in an image, and surrounding it with text that would get around filters. All the spam-filtering interests then collaborated to counter this new spam breakthrough.

    I’m not saying authoritarian Asian governments organized the spam surge to outsource the problem-solving to Western software designers, but it probably would have been a whole lot easier than solving the problem themselves.

  2. 2. Osama

    Thanks for the heads up.

    Osama B. Laden

  3. 3. overseas

    I don’t know where you get your information, Ms. Jacobsen, but the Chinese gov’t has been listening in on Skype conversations for a long time. They have called in people and played recordings of their Skype calls for them. Also, you certainly don’t have to pay $59 for a headset! You just need a headset with a mike and headphones.

  4. 4. Paulo

    I am sure there are ways to crack Skype conversations and it shouldn’t be that difficult given one has the means and the intention.

    Now the statement about Skype’s profit is extremely simplistic. After all, “Skype Out”, the service that allows one to call from the computer to landlines/cell phones around the world, offers very competitive rates.

    I, for example, have given up my landline phone and use only skype for international calls since 2004. There’s certainly money to be made in this market.

  5. 5. RW

    With all due respect, we don’t need this in the public domain.

  6. $59 bucks for a headset? From whom? Bulgari?

    I assume that if the NSA or a comparable organisation really wants to know my business then they will. The trick is to make the cost of accessing it more than its value.

  7. 7. Jeff Shultz

    Annie,

    Not only should you have not been told how – you should not have been told that it was even possible (regarding WordPress).

    Thanks for enabling the terrorists.

  8. 8. Wally Lind

    I second Osama’s post, Jeez! It’s very nice to know that journalists an terrorist have common interests, helps me understand what’s going on. What a couple of pinheads! I’d hope they hit your town first, but of course they won’t, they never go after the guilty, just the innocent.

  9. 9. Self-hating Boomer

    I agree with Paulo. Skype uses a proprietary codec, but there’s no explicit encryption, AFAIK. Cracking should be straightforward for reasonably motivated and funded cracker. This sounds like Area 51 stuff.

  10. 10. Mike T

    Skype users have more to worry about from laws like this which will put a black box onto their own home network in the name of “keeping the Childrentm safe.”

  11. 11. Mike T

    Jeff,

    Not only should you have not been told how – you should not have been told that it was even possible (regarding WordPress).

    Thanks for enabling the terrorists.

    Don’t be absurd. Anyone who knows basic infosec and software engineering knows that it is possible to break into WordPress, Movable Type or any other blogging software. The most obvious way is to just get one of the NSA’s senior infosec guys to break into the server that hosts the installation of WordPress and read wp-config.php which contains all of the database login information in clear text.

    Whoops. I guess I just enabled the terrorists.

  12. 12. Self-hating Boomer

    BTW, where is it written that people have a right to expect privacy on the internet? The internet, by its nature, is a public data superhighway. It was never designed to be secure, it isn’t secure, and if you want security, you’d better set up encryption yourself. Part of the problem here is that people have an unfounded and unrealistic expectation that when they use the net, it’s just between usses. It ain’t, by the very nature of the net.

    I use Skype, but I don’t expect it to be private. My conversations are probably very boring to anyone listening, but I don’t assume that no one can listen.

  13. 13. Ms. Attitude

    ZZZZZZZZ….that’s the sound that would come from the person listening in on me. I work for the government everything I do at work can be listened to or recorded. As a system administrator I can connect to coworkers computers and see what they are doing, and someone else can watch me. Tip: don’t do anything you shouldn’t be doing and you’ll be ok.

    But just like everything else – what can be used to protect us can also be used to harm us.

  14. 14. Mike T

    BTW, where is it written that people have a right to expect privacy on the internet? The internet, by its nature, is a public data superhighway. It was never designed to be secure, it isn’t secure, and if you want security, you’d better set up encryption yourself. Part of the problem here is that people have an unfounded and unrealistic expectation that when they use the net, it’s just between usses. It ain’t, by the very nature of the net.

    By that logic, you should have no problem with the police recording and analyzing everything you ever do, including following you around, in public because walking around public has even less of a basic expectation of privacy than Internet use.

  15. 15. Mike T

    Tip: don’t do anything you shouldn’t be doing and you’ll be ok.

    Tell that to all of the innocent people who have been put in prison by prosecutors more concerned with their career than prosecuting a fact-driven case.

    • Contary Mary

      No one will even acknowledge that this happens, until it happens to them! Prosecutors don’t give a flip whether you donated a portion of your earnings, go to church every sunday, or helped your neighbors get their undies out of their cracks, they can make a guilty person out of ANYONE!!! Jerk offs only reply with “don’t do anything you can get in trouble for” wahhhh baaa baaaa ba ba wahhh baba…bunch of but sucers! Oh! and then this one “hope you know your car isn’t protected under…” You know what! We the People are protected by the fact that this is, and when we grow some and take it back, will be HOME OF THE FREEEEEEEEEEEEEEE!! Freeee…eww that scares some of you out there doesn’t it? muhahahahahhaha freeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee

  16. 16. Self-hating Boomer

    Mike, like it or not, that’s the way it’s always been. That’s why the Fourth Amendment doesn’t apply to your car. You knew that, right?

  17. 17. Mudpie

    Mike T
    By that logic, you should have no problem with the police recording and analyzing everything you ever do, including following you around, in public because walking around public has even less of a basic expectation of privacy than Internet use

    I know two people that the police follow everywhere they
    go and I thank God they do. They are very dangerous.

  18. 18. Delia

    I’ve never used Skype so I have no basis with which to offer any opinion one way or the other. I don’t use chat programs either for that matter because they are loaded with annoying crap.

    2. Osama:

    “Thanks for the heads up.

    Osama B. Laden”

    ↑LMAO!

  19. 19. Mike T

    Mike, like it or not, that’s the way it’s always been. That’s why the Fourth Amendment doesn’t apply to your car. You knew that, right?

    The 4th amendment does apply to your car. If I am sitting at a gas station, filling up my tank, a cop can’t come by and open up my trunk just because he feels like taking a peak.

  20. Posts like this remind me yet again how many newcomers we have to the Net in the last few years.. In the good ol’ days, we were constantly being warned to keep our webcams covered if not unplugged when not in our controlled use.. The reason being that it was not that difficult for someone who had gained illegal access to one’s computer to turn a cam on as well to take a bit of a gander around unsuspecting offices and homes.. Don’t know how true it ever was although it is certainly feasible enough if one has ever had the experience of seeing their cursor waltz across their screen due to a [trojan] invasion.. Would that things were still that innocent..

    RW With all due respect, we don’t need this in the public domain.

    I personally hear what you are saying, and I am always torn when I see something like this.. I invariably weigh it with that the number of newbie surfers has compounded phenomenally the last few years.. Many, many of those people have absolutely no clue that this is really possible.. They need the knowledge of knowing it could happen to them so they may seek to take some kind of preventive, protective action now..

  21. Hate when this happens.. Soon as I posted, the newer comments since I was here earlier appeared.. Okay, I get it now about the concern for publishing precisely how it was accomplished.. The CMS part, perhaps..? Putting knowledge out there that non-cracking troublemakers might not have thought of otherwise…..

    Until now. :\

    Here’s hoping they’re busy elsewhere. :)

  22. 22. Brian Richard Allen

    The real story here is that Missus Cli’ton’s flunky was dropping in on us all.

    That loathsome and fearsome Borderline Analy Retentive DC-Bar failure’s hold on power — and the size of Chelsea Hubbell Cli’ton’s multi-Billion Dollar trust fund — may be explained only by the Hot-Springs Arkansas based Cli’ton Crime Family’s built-on its theft of thousands of FBI-files monitering, collection, ownership, operation and control of the intimate details of the lives of every American — and of anyone of importance throughout the world.

    Which the missus is currently touring on her introductory standing-over-and-shaking-down and listening to the continuing clink of coin tour.

    Brian Richard Allen
    Los Angeles CalifCLI’TONocated 90028 and the Far Abroad

  23. 23. Harsh Reality

    Dear Jacobsen,

    It isn’t rocket science. Don’t write articles exposing (hypothetical, potential or otherwise) methods which may be in use to monitor terrorist cells.

    We don’t want to read about them.

    Your writing about them indicates NYT-level idiocy.

    Once again, we don’t want to read about them.

    Use your damned head, woman.

  24. 24. Self-hating Boomer

    The 4th amendment does apply to your car. If I am sitting at a gas station, filling up my tank, a cop can’t come by and open up my trunk just because he feels like taking a peak.

    Apparently you didn’t know. He needs probable cause, but not a search warrant. Completely different from your home. Learn a little about the law, ok?

  25. 25. Self-hating Boomer

    Cindy gets the essential point: legalities are moot when someone in Russia is peeking around your house because he installed a zombie on your computer with a spam email. As a practical matter, you have to take responsibility for your own security!!! Blame John von Neuman for inventing the hackable computer, Bill Gates for software that’s too friendly, and Tim Berners-Lee for building the web on top of the internet that was never designed to be secure.

  26. 26. jean gogh

    interesting……

  27. 27. ice

    I put this on my mac to test it out and it was taking pictures of me everytime I logging on the computer and storing the pics for my retrieval later with IP data

    I took it off but it was interesting.

    http://adeona.cs.washington.edu/index.html

    Adeona is the first Open Source system for tracking the location of your lost or stolen laptop that does not rely on a proprietary, central service. This means that you can install Adeona on your laptop and go — there’s no need to rely on a single third party. What’s more, Adeona addresses a critical privacy goal different from existing commercial offerings. It is privacy-preserving. This means that no one besides the owner (or an agent of the owner’s choosing) can use Adeona to track a laptop. Unlike other systems, users of Adeona can rest assured that no one can abuse the system in order to track where they use their laptop.

    Adeona is designed to use the Open Source OpenDHT distributed storage service to store location updates sent by a small software client installed on an owner’s laptop. The client continually monitors the current location of the laptop, gathering information (such as IP addresses and local network topology) that can be used to identify its current location. The client then uses strong cryptographic mechanisms to not only encrypt the location data, but also ensure that the ciphertexts stored within OpenDHT are anonymous and unlinkable. At the same time, it is easy for an owner to retrieve location information.

  28. 28. Simone BC

    So maybe the background to this story was planted with the intent of encouraging terrorists and other bad guys to switch from skype to some “new cool thing” that was built with nsa backdoors. Or for that matter a russian spy agency backdoor. Or maybe a competitor wants to hurt to ebay or skype. Or the story is straight.

    How to tell? I don’t think one can, not for a few years anyway.

    Shrug. That’s the nature of software. You have to trust the makers and distributors of the software you install, since they can put whatever they want in the software. For each piece of software you might install, do you trust the producers, do you trust the commentators?

    Pesonally, I mostly trust skype.

  29. 29. Mark

    From the Merriam-Webster Online Dictionary: warmonger: one who urges or attempts to stir up war.

    Iran has been waging a proxy war against the United States specifically, and the West in general, for decades, and now they’re on the verge of acquiring nuclear weapons capabilities. If it’s “warmongering” to urge war against Iran, then I’m proud to be called a warmonger.

  30. 30. Mark

    Oops, sorry: copy/pasted into the wrong article’s comments.

  31. 31. Mike T

    Apparently you didn’t know. He needs probable cause, but not a search warrant. Completely different from your home. Learn a little about the law, ok?

    You’re absolutely right, but the 4th amendment makes it clear that without probable cause, a search is illegal:

    The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.

    Again, I win; you lose, self-hating boomer. The authority to conduct a search of a private party per the 4th amendment is based on probable cause. Even the agency-issued warrants like National Security Letters have to be based on probable cause. An FBI agent can write their own NSL on the spot for your car, but they can go to prison for writing it if the FBI or a federal court decides that the agent had no probable cause.

  32. 32. ChipD

    Once again, the ever-growing enlargement of the State, at the expense of privacy by the People;
    again, it is for our “protection”;

    Of course, someone might ask, who protects us from our Government?

  33. 33. deguello

    Excellent information,and very timely, given The Messiah’s thuggish background and tendencies. Skype wiil be an excellent tool for the conservative resistance.

  34. 34. Patty

    I seem to recall hearing that Osama used satellite phones until the media let it be known that our government could eavesdrop on his conversations and track his movements. He and his fellow terrorists quickly changed their method of communication. Never underestimate how much stories like this actually help the terrorists become more clandestine and successful in their plotting.

  35. 35. Anonymous

    Rather interesting blog you’ve got here. Thanks for it. I like such themes and everything that is connected to this matter. I would like to read a bit more on that blog soon.

    Vanessa Swenson
    ebony escort co uk

Leave a Reply

We know you're busy. Sign up for our Daily Digest email to get a quick look each day at our editors' picks and readers' favorite stories. (You will receive an email asking you to verify your email address. If you have previously subscribed, no verification email will be sent.)