Feeds

German cyberplods raid Pirate Party on Skype Trojan mole hunt

BayernTrojaner controversy heats up

Choosing a cloud hosting partner with confidence

Bavarian cops have searched the office of a spokesman for the German Pirate Party (Piratenpartei Deutschland) hunting for a mole who leaked information on plans to develop a Trojan capable of eavesdropping on Skype conversation, according to local reports.

Golem.de reports that an office in the home of Pirate Party spokesman Ralph dog Erlach was searched in the early hours of September 11 by police demanding to know who had leaked plans for the controversial wiretap program. Police took away files and computer servers, said to be protected by strong encryption.

The German Pirate Party, which campaigns about the misuse of copyright and other issues, is styled after the better-known Swedish Pirate Party and represents a minor political grouping in the German political scene. The party won a 0.3 per cent of votes in the Hesse state election this year, the first it has contested.

German reports don't say but the raid on the Pirate Party spokesman apparently follows the publication of two leaked documents on Wikileaks in January. One detailed plans by German firm Digitask to develop wiretap packages capable of intercepting Skype VoIP communications and SSL transmissions, while the second contained costing and licensing proposals for such software drawn up by the Bavarian Ministry of Justice.

If nothing else, the raid provides suggestive evidence of the authenticity of these documents.

Bavaria became the first German state to pass legislation that allows police to plant spyware on the PCs of suspects in terrorist investigations back in July. The measure is strongly opposed by both sections of the security community and privacy activists, who might yet mount some kind of legal challenge at the federal level.

Skype promises confidentiality through encrypted calls, but not anonymity. For example, a fugitive business exec was tracked down to Sri Lanka by private detectives in 2006 after making a Skype call. Often police are simply interested in who a target is talking to and when rather than the content of conversations.

That's not enough for to satisfy some law enforcement agencies, however.

German police have been the most vocal in complaining about how encryption and VoIP was making their lives miserable. Spyware was seen as a way of turning back the clock to the sort of set-up on monitoring suspects depicted in the film Das Leben der Anderen (The Lives of Others), adding an extra tool in the fight against terrorism in the process.

But the whole Trojan ruse is fraught with numerous difficulties. Quite aside from concerns about the admissibility of evidence obtained using the tactic there's also the worry that samples of the malware might fall into the hands of cybercrooks.

Then there's the possibility that the anti-virus software of suspects might detect the state-sanctioned malware. Security firms that agree to law enforcement requests to turn a blind eye to state-sanctioned malware risk would undermine trust in their technology, as demonstrated by the Magic Lantern controversy in the US a few years ago. ®

Beginner's guide to SSL certificates

More from The Register

next story
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
Google Glassholes are UNDATEABLE – HP exec
You need an emotional connection, says touchy-feely MD... We can do that
Lawyers mobilise angry mob against Apple over alleged 2011 Macbook Pro crapness
We suffered 'random bouts of graphical distortion' - fanbois
Just don't blame Bono! Apple iTunes music sales PLUMMET
Cupertino revenue hit by cheapo downloads, says report
US court SHUTS DOWN 'scammers posing as Microsoft, Facebook support staff'
Netizens allegedly duped into paying for bogus tech advice
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Verizon bankrolls tech news site, bans tech's biggest stories
No agenda here. Just don't ever mention Net neutrality or spying, ok?
Inside the EYE of the TORnado: From Navy spooks to Silk Road
It's hard enough to peel the onion, are you hard enough to eat the core?
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Top 5 reasons to deploy VMware with Tegile
Data demand and the rise of virtualization is challenging IT teams to deliver storage performance, scalability and capacity that can keep up, while maximizing efficiency.
Mitigating web security risk with SSL certificates
Web-based systems are essential tools for running business processes and delivering services to customers.