* WSJEurope
+ WSJEurope
+ Facebook
+ Twitter
* WSJ Live
+ WSJ Live
* Market Watch
+ Market Watch
* Barron's
+ Barron's
* All Things Digital
+ All Things Digital
* Factiva
+ Factiva
* Risk
+ Risk
* More
+ WSJ X - Invitation Only
+ New Portfolio
+ BigCharts
+ Financial News
+ Professor Journal
+ SmartMoney
+ Student Journal
+ Virtual Stock Exchange
+ WSJ Classifieds
+ WSJ Classroom
+ WSJ Radio
+ WSJ Wine
News, Quotes, Companies, Vid (BUTTON) SEARCH
___________________________________________________________
___________________________________________________________
______________________________________________________
________________________
___________________________________________________
_____________________
_
___________________________
- ________
headline_____________________________________________
_________________________________________________
- _________________
__
goldman___________
_________________________________________________
___________________________________________
__________________________________________________
__________________________________________________
_
_________________________________________
__________________________________________________
___________________________________________________
___________________________________________________
_____
____________________________________________________
The Wall Street Journal
* Subscribe
* Log In
Europe Edition
* U.S.
* Asia
* Europe
* América Latina
* Brasil
* 中文-简体(China)
* Deutschland
* India
* Indonesia
* 日本(Japan)
* 한국(Korea)
* Home
* World » More
World » More
Loading…
* Europe » More
Europe » More
Loading…
* U.K. » More
U.K. » More
Loading…
* U.S. » More
U.S. » More
Loading…
* Business » More
Business » More
Loading…
* Markets » More
Markets » More
Loading…
* Market Data » More
Market Data » More
Loading…
* Tech » More
Tech » More
Loading…
* Life & Culture » More
Life & Culture » More
Loading…
* Opinion » More
Opinion » More
Loading…
* Heard on the Street
* Property » More
Property » More
Loading…
* Dow Jones Reprints: This copy is for your personal, non-commercial
use only. To order presentation-ready copies for distribution to
your colleagues, clients or customers, use the Order Reprints tool
at the bottom of any article or visit www.djreprints.com
See a sample reprint in PDF format. Order a reprint of this article
now
* The Wall Street Journal
* WHAT THEY KNOW
* November 19, 2011
Document Trove Exposes Surveillance Methods
* Article
* Video
* Comments
more in Tech | Find New $LINKTEXTFIND$ »
* smaller
* Larger
By JENNIFER VALENTINO-DEVRIES, JULIA ANGWIN and STEVE STECKLOW
Documents obtained by The Wall Street Journal open a rare window into a
new global market for the off-the-shelf surveillance technology that
has arisen in the decade since the terrorist attacks of Sept. 11, 2001.
The Surveillance Catalog
The techniques described in the trove of 200-plus marketing documents,
spanning 36 companies, include hacking tools that enable governments to
break into people's computers and cellphones, and "massive intercept"
gear that can gather all Internet communications in a country. The
papers were obtained from attendees of a secretive surveillance
conference held near Washington, D.C., last month.
Intelligence agencies in the U.S. and abroad have long conducted their
own surveillance. But in recent years, a retail market for surveillance
tools has sprung up from "nearly zero" in 2001 to about $5 billion a
year, said Jerry Lucas, president of TeleStrategies Inc., the show's
operator.
Critics say the market represents a new sort of arms trade supplying
Western governments and repressive nations alike. "The Arab Spring
countries all had more sophisticated surveillance capabilities than I
would have guessed," said Andrew McLaughlin, who recently left his post
as deputy chief technology officer in the White House, referring to the
Middle Eastern and African nations racked by violent crackdowns on
dissent.
How the 'Off the Shelf' Surveillance Industry Has Grown
The Journal this year uncovered an Internet surveillance center
installed by a French firm in Libya and reported that software made by
Britain's Gamma International UK Ltd., had been used in Egypt to
intercept dissidents' Skype conversations. In October, a U.S. company
that makes Internet-filtering gear acknowledged to the Journal that its
devices were being used in Syria.
Companies making and selling this gear say it is intended to catch
criminals and is available only to governments and law enforcement.
They say they obey export laws and aren't responsible for how the tools
are used.
Trade-show organizer Mr. Lucas added that his event isn't political.
"We don't really get into asking, 'Is this in the public interest?'" he
said.
TeleStrategies holds ISS World conferences world-wide. The one near
Washington, D.C., caters mainly to U.S., Canadian, Caribbean and Latin
American authorities. The annual conference in Dubai has long served as
a chance for Middle Eastern nations to meet companies hawking
surveillance gear.
[111811privacy_512x288.jpg]
The global market for off-the-shelf surveillance technology has taken
off in the decade since 9/11. WSJ's Jennifer Valentino-DeVries explains
some of the new methods governments and law enforcement are using to
monitor people.
Many technologies at the Washington-area show related to "massive
intercept" monitoring, which can capture vast amounts of data. Telesoft
Technologies Ltd. of the U.K. touted its device in its documents as
offering "targeted or mass capture of 10s of thousands of simultaneous
conversations from fixed or cellular networks." Telesoft declined to
comment.
California-based Net Optics Inc., whose tools make monitoring gear more
efficient, presented at the show and offers a case study on its website
that describes helping a "major mobile operator in China" conduct
"real-time monitoring" of cellphone Internet content. The goal was to
help "analyze criminal activity" as well as "detect and filter
undesirable content," the case study says.
Net Optics' CEO, Bob Shaw, said his company follows "to the letter of
the law" U.S. export regulations. "We make sure we're not shipping to
any countries that are forbidden or on the embargo list," he said in an
interview.
Among the most controversial technologies on display at the conference
were essentially computer-hacking tools to enable government agents to
break into people's computers and cellphones, log their keystrokes and
access their data. Although hacking techniques are generally illegal in
the U.S., law enforcement can use them with an appropriate warrant,
said Orin Kerr, a professor at George Washington University Law School
and former computer-crime attorney at the Justice Department.
The documents show that at least three companies—Vupen Security SA of
France, HackingTeam SRL of Italy and Gamma's FinFisher—marketed their
skill at the kinds of techniques often used in "malware," the software
used by criminals trying to steal people's financial or personal
details. The goal is to overcome the fact that most surveillance
techniques are "useless against encryption and can't reach information
that never leaves the device," Marco Valleri, offensive-security
manager at HackingTeam, said in an interview. "We can defeat that."
Representatives of HackingTeam said they tailor their products to the
laws of the country where they are being sold. The firm's products
include an auditing system that aims to prevent misuse by officials.
"An officer cannot use our product to spy on his wife, for example,"
Mr. Valleri said.
Mr. Valleri said HackingTeam asks government customers to sign a
license in which they agree not to provide the technology to
unauthorized countries.
Vupen, which gave a presentation at the conference on "exploiting
computer and mobile vulnerabilities for electronic surveillance," said
its tools take advantage of security holes in computers or cellphones
that manufacturers aren't yet aware of. Vupen's marketing documents
describe its researchers as "dedicated" to finding "unpatched
vulnerabilities" in software created by Microsoft Corp., Apple Inc. and
others. On its website, the company offered attendees a "free Vupen
exploit sample" that relied on an already-patched security hole.
Vupen says it restricts its sales to Australia, New Zealand, members
and partners of the North Atlantic Treaty Organization and the
Association of Southeast Asian Nations. The company says it won't sell
to countries subject to international embargoes, and that its research
must be used for national-security purposes only and in accordance with
ethical practices and applicable laws.
The documents for FinFisher, a Gamma product, say it works by "sending
fake software updates for popular software." In one example, FinFisher
says intelligence agents deployed its products "within the main
Internet service provider of their country" and infected people's
computers by "covertly injecting" FinFisher code on websites that
people then visited.
The company also claims to have allowed an intelligence agency to trick
users into downloading its software onto BlackBerry mobile phones "to
monitor all communications, including [texts], email and BlackBerry
Messenger." Its marketing documents say its programs enable spying
using devices and software from Apple, Microsoft, and Google Inc.,
among others. FinFisher documents at the conference were offered in
English, Arabic and other languages.
A Google spokesman declined to comment on FinFisher specifically,
adding that Google doesn't "tolerate abuse of our services."
An Apple spokeswoman said the company works "to find and fix any issues
that could compromise [users'] systems." Apple on Monday introduced a
security update to iTunes that could stop an attack similar to the type
FinFisher claims to use, namely offering bogus software updates that
install spyware.
Microsoft and Research In Motion Ltd., which makes BlackBerry devices,
declined to comment.
The documents discovered in Egypt earlier this year indicated that
Gamma's Egyptian reseller was offering FinFisher systems there for
about $560,000. Gamma's lawyer told the Journal in April that it never
sold the products to Egypt's government.
Gamma didn't respond to requests for comment for this article. Like
most companies interviewed, Gamma declined to disclose its buyers,
citing confidentiality agreements.
Privacy advocates say manufacturers should be more transparent about
their activities. Eric King of the U.K. nonprofit Privacy International
said "the complex network of supply chains and subsidiaries involved in
this trade allows one after the other to continually pass the buck and
abdicate responsibility." Mr. King routinely attends
surveillance-industry events to gather information on the trade.
At the Washington and Dubai trade conferences this year, which are
generally closed to the public, Journal reporters were prevented by
organizers from attending sessions or entering the exhibition halls.
February's Dubai conference took place at a time of widespread unrest
elsewhere in the region. Nearly 900 people showed up, down slightly
because of the regional turmoil, according to an organizer.
Presentations in Dubai included how to intercept wireless Internet
traffic, monitor social networks and track cellphone users. "All of the
companies involved in lawful intercept are trying to sell to the Middle
East," said Simone Benvenuti, of RCS SpA, an Italian company that sells
monitoring centers and other "interception solutions," mostly to
governments. He declined to identify any clients in the region.
In interviews in Dubai, executives at several companies said they were
aware their products could be abused by authoritarian regimes but they
can't control their use after a sale. "This is the dilemma," said Klaus
Mochalski, co-founder of ipoque, a German company specializing in
deep-packet inspection, a powerful technology that analyzes Internet
traffic. "It's like a knife. You can always cut vegetables but you can
also kill your neighbor." He referred to it as "a constant moral,
ethical dilemma we have."
—Paul Sonne contributed to this article.
Write to Jennifer Valentino DeVries at
jennifer.valentino-devries@wsj.com, Julia Angwin at
julia.angwin@wsj.com and Steve Stecklow at steve.stecklow@wsj.com
Copyright 2012 Dow Jones & Company, Inc. All Rights Reserved
This copy is for your personal, non-commercial use only. Distribution
and use of this material are governed by our Subscriber Agreement and
by copyright law. For non-personal use or to order multiple copies,
please contact Dow Jones Reprints at 1-800-843-0008 or visit
www.djreprints.com
More In Tech
* Email
* Printer Friendly
* Order Reprints
*
* Share:
+ facebook
facebook
+ Twitter
Twitter
+ LinkedIn
LinkedIn
+ StumbleUpon
StumbleUpon
+ Viadeo
Viadeo
+ Orkut
Orkut
+ Fark
Fark
+ Reddit
Reddit
+ del.icio.us
del.icio.us
+ MySpace
MySpace
*
*
* Back To
* Back To
*
* MSN Money Homepage
* MSN Money Investing
More From What They Know
* Websites Vary Prices Based on Location
* U.S. Terror Agency to Tap Citizen Files
* They Know What You're Shopping For
null
Email Newsletters and Alerts
The latest news and analysis delivered to your in-box. Check the boxes
below to sign up.
WSJ.com Email Features
[X] Technology Alert
[X] Technology Update
[X] Personal Technology
Submit
The email address null is already associated with another account.
Please enter a different email address:
Enter Your Email null________________
Sign Up (BUTTON) SIGN UP
* New! To sign up for Keyword or Symbol Alerts click here.
* To view or change all of your email settings, visit the Email Setup
Center.
Thank you !
You will receive in your inbox.
* To view or change all of your email settings, visit the Email Setup
Center.
null
Email Newsletters and Alerts
The latest news and analysis delivered to your in-box. Check the boxes
below to sign up.
WSJ.com Email Features
[X] This Week's Most Popular
[X] On the Editorial Page
Submit
The email address null is already associated with another account.
Please enter a different email address:
Enter Your Email null________________
Sign Up (BUTTON) SIGN UP
*
* Manage Email Preferences
Thank you !
You will receive in your inbox.
* Manage Email Preferences
Companies within this Article
Apple Inc.(AAPL)
479.93 4.95 4:00p.m.
Microsoft Corp.(MSFT)
27.86 0.31 4:00p.m.
Google Inc. Cl A(GOOG)
782.42 -2.95 4:00p.m.
Most Popular on Facebook
What They Know Video
* previous
*
* next
*
Your Car is Being Watched 5:53
*
How Google Side-Stepped Safari's Privacy Settings 5:55
*
Can Your Credit Score Predict Your Behavior? 6:14
Most Popular In Europe
* Read
* Emailed
* Video
* Commented
* Subscriber Content Read Preview
1.
Apple Testing Watch-Like Device
* 2.
Fitness Instructors Are the New DJs
* 3.
Run Your Family Like a Business
* 4.
Pope Benedict to Resign
* 5.
U.K. to Probe H-P's Autonomy
* 1.
Run Your Family Like a Business
* 2.
Everybody Loves Labradors, So Why Are They Underdogs?
* 3.
Opinion: Kristol and Wehner: The Absentee Commander in Chief
* 4.
You Say Goodbye, I Say I Don't Know
* 5.
Opinion: Ben Carson for President
* 1.
Apple Is Testing an iPhone for Your Wrist
* 2.
What an Apple Watch Would Do
* 3.
Labrador Retreivers: The Underdogs of Westminster
* 4.
Five Stocks Warren Buffett and Insiders Are Buying
* 5.
The 130,000 Ton Asteroid Heading Toward Earth
* 1.
Opinion: So God Made a Fawner1262 comments
* 2.
Opinion: Ben Carson for President795 comments
* 3.
Opinion: Gun Control and the Constitution560 comments
* 4.
Opinion: The Absentee Commander in Chief497 comments
* 5.
Speech Lays Out Next Goals463 comments
* Articles Feed
* Most Emailed Feed
* Most Popular Video Feed
* Most Commented Feed
* Most Popular Feeds
close
Email This
Recipient's Email Address (Separate multiple address with commas)
____________________
Your Email Address ____________________
Message (Optional)
____________________________________________________________
____________________________________________________________
____________________________________________________________
____________________________________________________________
[X] Send me a copy
Send
or Cancel
close
Thank You
Your email has been sent.
close
Error.
An error has occured and your email has not been sent.
Please try again.
• Invalid email address.
• You can't enter more than 20 emails.
• Seperate multiple addresses with Commas.
• Must enter an email address.
• You must enter the verification code below to send.
• Invalid entry: Please type the verification code again.
Editors' Picks
* [image]
Terror Leader Emerges, Then Vanishes, in Sahara
* [image]
Everybody Loves Labradors, So Why Are They Underdogs?
* [image]
With Fewer to Lock Up, Prisons Shut Doors
* [image]
Paterno Family Fires Back at Freeh Report
Save This ↓ More
Article Excerpt
Document Trove Exposes Surveillance Methods
BY JENNIFER VALENTINO-DEVRIES, JULIA ANGWIN AND STEVE STECKLOW
Documents obtained by The Wall Street Journal open a rare window into a
new global market for the off-the-shelf surveillance technology that
has arisen in the decade since the terrorist attacks of Sept. 11, 2001.
The techniques described in the trove of 200-plus marketing documents,
spanning 36 companies, include hacking tools that enable governments to
break into people's computers and cellphones, and "massive intercept"
gear that can gather all Internet communications in a country. The
papers were obtained from attendees of a secretive surveillance
conference held near Washington, D.C., last month.
Intelligence agencies in the U.S. and abroad have long ...
Continue reading article with pop up player
More Video
What They Know Video
* previous
*
* next
*
Your Car is Being Watched 5:53
*
How Google Side-Stepped Safari's Privacy Settings 5:55
*
Can Your Credit Score Predict Your Behavior? 6:14
Most Recommended
* CommentsComments
* CommentersCommenters
* 1.
“There is simply no comparing the...;”
- Ryan Schroeter 199 Recommendations
* 2.
“Steve Kroft's jellyfish intervie...;”
- Mike Fisch 173 Recommendations
* 3.
“"Some of the emails in the...;”
- Matilda Anders 111 Recommendations
* 4.
“This man is the most incompetent...;”
- LAWRENCE MACINTYRE 110 Recommendations
* 5.
“Corruption as far as the eye can...;”
- Mary Childs 108 Recommendations
* Mary Childs
1964 Recommendations
* Matilda Anders
1898 Recommendations
* Greg Liautaud
1833 Recommendations
* Maria Bonanno
1400 Recommendations
* XAVIER L SIMON
1299 Recommendations
Most Active Discussions
* Journal Community
*
Question of the Day
Where should the next pope be chosen from?
*
Religion & Ethics
Do we need religion to have ethics? Is it possible that a world
without religion can be, on the whole, a better place to live?
*
Libertarians
Why do people single out the Postal Service for losing money? Don't
all government agencies cost taxpayers billions each year? Does the
concept of P & L apply to government?
*
Libertarians
Arab Spring
*
Libertarians
Immigration
* See all Discussion Groups