Feeds

Bavaria sanctions police spyware

Trojan horse rides roughshod over opposition

SANS - Survey on application security programs

Bavaria has become the first German state to approve laws that allow police to plant spyware on the PCs of terror suspects.

The controversial measures allow local law enforcement officials to plant Trojans on the PCs of terror suspects (and potentially other serious criminals) from the start of August, Heise reports (Google translation here). Although there are safeguards, the measures go further than those enable by federal legislation, passed in June. Federal laws prohibit physically tampering with suspects' computers, restricting the tactic to spyware delivered by email.

Bavarian laws, by contrast, allow police to sneak into suspects' homes in cases where attempts to remotely install so-called remote forensic software fail. In these cases, physical search of a suspect's residence would also be allowed. The powers are restricted to cases where "urgent threats" to life are suspected. Importantly judicial warrants would not need to be obtained in these circumstances, Heise notes.

Opposition Green and social democrat politicians voted against the measures, contained in the Bavarian Constitutional Protection Act, arguing that the legislation is "unconstitutional". Bavarian interior minister Joachim Herrmann disputes this interpretation of the law, arguing the procedures are in line with both federal laws and the constitution. Opposition politicians and civil liberties campaigners fear that the powers could be applied to a far wider range of criminal suspects while paving the way for fishing expeditions.

As well as the dragnet concerns security experts have long pointed out the practical shortcomings of the use by law enforcement of Trojan tactics. Police-sanctioned malware may get into the hands of cybercrooks, for one thing. There's also concern about the admissibility of evidence obtained using the tactic.

Herr Herrmann gave short shrift to such objections, stating that Bavaria is leading the field in "internal security" in becoming the first German state to approve the plan.

Bavarian police have reportedly been laying the groundwork for the scheme for some months. Leaked documents, published by Wikileaks back in January, outline proposals by German firm Digitask to develop technology capable of intercepting intercept Skype VoIP communications and SSL transmissions. Costing and licensing proposals drawn up by the Bavarian Ministry of Justice for the software also surfaced on Wikileaks at the same time. ®

High performance access to file storage

More from The Register

next story
Putin tells Snowden: Russia conducts no US-style mass surveillance
Gov't is too broke for that, Russian prez says
Did a date calculation bug just cost hard-up Co-op Bank £110m?
And just when Brit banking org needs £400m to stay afloat
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Lavabit loses contempt of court appeal over protecting Snowden, customers
Judges rule complaints about government power are too little, too late
MtGox chief Karpelès refuses to come to US for g-men's grilling
Bitcoin baron says he needs another lawyer for FinCEN chat
Don't let no-hire pact suit witnesses call Steve Jobs a bullyboy, plead Apple and Google
'Irrelevant' character evidence should be excluded – lawyers
EFF: Feds plan to put 52 MILLION FACES into recognition database
System would identify faces as part of biometrics collection
Ex-Tony Blair adviser is new top boss at UK spy-hive GCHQ
Robert Hannigan to replace Sir Iain Lobban in the autumn
Edward Snowden on his Putin TV appearance: 'Why all the criticism?'
Denies Q&A cameo was meant to slam US, big-up Russia
Banks slap Olympus with £160 MEEELLION lawsuit
Scandal hit camera maker just can't shake off its past
prev story

Whitepapers

Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.