Feeds

German cyberplods raid Pirate Party on Skype Trojan mole hunt

BayernTrojaner controversy heats up

Internet Security Threat Report 2014

Bavarian cops have searched the office of a spokesman for the German Pirate Party (Piratenpartei Deutschland) hunting for a mole who leaked information on plans to develop a Trojan capable of eavesdropping on Skype conversation, according to local reports.

Golem.de reports that an office in the home of Pirate Party spokesman Ralph dog Erlach was searched in the early hours of September 11 by police demanding to know who had leaked plans for the controversial wiretap program. Police took away files and computer servers, said to be protected by strong encryption.

The German Pirate Party, which campaigns about the misuse of copyright and other issues, is styled after the better-known Swedish Pirate Party and represents a minor political grouping in the German political scene. The party won a 0.3 per cent of votes in the Hesse state election this year, the first it has contested.

German reports don't say but the raid on the Pirate Party spokesman apparently follows the publication of two leaked documents on Wikileaks in January. One detailed plans by German firm Digitask to develop wiretap packages capable of intercepting Skype VoIP communications and SSL transmissions, while the second contained costing and licensing proposals for such software drawn up by the Bavarian Ministry of Justice.

If nothing else, the raid provides suggestive evidence of the authenticity of these documents.

Bavaria became the first German state to pass legislation that allows police to plant spyware on the PCs of suspects in terrorist investigations back in July. The measure is strongly opposed by both sections of the security community and privacy activists, who might yet mount some kind of legal challenge at the federal level.

Skype promises confidentiality through encrypted calls, but not anonymity. For example, a fugitive business exec was tracked down to Sri Lanka by private detectives in 2006 after making a Skype call. Often police are simply interested in who a target is talking to and when rather than the content of conversations.

That's not enough for to satisfy some law enforcement agencies, however.

German police have been the most vocal in complaining about how encryption and VoIP was making their lives miserable. Spyware was seen as a way of turning back the clock to the sort of set-up on monitoring suspects depicted in the film Das Leben der Anderen (The Lives of Others), adding an extra tool in the fight against terrorism in the process.

But the whole Trojan ruse is fraught with numerous difficulties. Quite aside from concerns about the admissibility of evidence obtained using the tactic there's also the worry that samples of the malware might fall into the hands of cybercrooks.

Then there's the possibility that the anti-virus software of suspects might detect the state-sanctioned malware. Security firms that agree to law enforcement requests to turn a blind eye to state-sanctioned malware risk would undermine trust in their technology, as demonstrated by the Magic Lantern controversy in the US a few years ago. ®

Providing a secure and efficient Helpdesk

More from The Register

next story
WHY did Sunday Mirror stoop to slurping selfies for smut sting?
Tabloid splashes, MP resigns - but there's a BIG copyright issue here
Spies, avert eyes! Tim Berners-Lee demands a UK digital bill of rights
Lobbies tetchy MPs 'to end indiscriminate online surveillance'
How the FLAC do I tell MP3s from lossless audio?
Can you hear the difference? Can anyone?
Google hits back at 'Dear Rupert' over search dominance claims
Choc Factory sniffs: 'We're not pirate-lovers - also, you publish The Sun'
Inequality increasing? BOLLOCKS! You heard me: 'Screw the 1%'
There's morality and then there's economics ...
While you queued for an iPhone 6, Apple's Cook sold shares worth $35m
Right before the stock took a 3.8% dive amid bent and broken mobe drama
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.