Feeds

Snowden: Canadian spooks used free airport WiFi to track travellers

Report says sniffing was probably illegal as local Spookhaus defends actions

Top 5 reasons to deploy VMware with Tegile

Another day, another item of news about unwarranted state surveillance from the desk of one E. Snowden, late of Moscow.

This time the allegation is that Communications Security Establishment Canada (CSEC) slurped information about the owners of wireless devices from the free WiFi service in one of the nation's airports. With that data in hand, the agency is said to have then tracked travellers for “days” after they left the airport.

The Canadian Broadcasting Corporation (CBC) has the story and says it comes from “A top secret document retrieved by U.S. whistleblower Edward Snowden and obtained by CBC News”.

Snowden's documents apparently say anyone that passed through an airport could be tracked, although it is not clear if login to the free WiFi service was required. Logging in wouldn't necessarily be required to track someone: a device set to detect the presence of WiFi networks is likely to reveal its MAC address. If spooks sniffed WiFi routers for MAC addresses of connecting devices, then looked for that MAC address popping up elsewhere, they could easily plot a device's movement.

(Yes, we know that MAC addresses an oddity because they are supposed to be unique but can also be changed to a value used in another device. Changing MAC address is therefore a fine way to make it harder to identify a device, but is not the kind of thing most people who pass through airports would know about.)

The usual oohing and aahing that follows a Snowden release is now rippling across the Web. CESC is pointing out that it is allowed to collect communications metadata (which explains now sniffing a MAC address in an airport could translate into wider tracking). Canadians are expressing shock that their own government spied on them.

Making things more interesting is that the head of CSEC recently said the agency does not surveil Canadians. If CSEC was able to sort citizens from visitors at an airport just by sniffing WiFi-enabled devices, that could be the most damaging revelation of all! ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
You stupid BRICK! PCs running Avast AV can't handle Windows fixes
Fix issued, fingers pointed, forums in flames
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
5 critical considerations for enterprise cloud backup
Key considerations when evaluating cloud backup solutions to ensure adequate protection security and availability of enterprise data.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Getting ahead of the compliance curve
Learn about new services that make it easy to discover and manage certificates across the enterprise and how to get ahead of the compliance curve.