Germany declares hacking tools 'verboten'
524392
Crackers Updates to Germany's computer crime laws banning so-called "hacking tools" have been criticised as ill-considered and counterproductive.â¦
626350
(InfoWorld) - Germany's High Court has handed down a landmark decision banning police from installing spyware on computers of suspected criminals without their knowledge. The decision, announced Monday, is a blow to the plans of the German Interior Minister Wolfgang SchÃ¤uble to give the Federal Criminal Police Office (BKA) greater power to monitor terrorists and other criminals online, and peek inside their computers. Two other federal judges had differed over whether police should be able to hack into the computers of suspected criminals and install spyware. In February, one judge approved police hacking. But another barred the practice in November, resulting in an appeal by federal prosecutors. The High Court in Karlsruhe argued that searching computers is similar to searching homes, a practice in Germany that requires police to follow certain procedures, such as obtaining a search warrant and informing suspected offenders of a search. The judges also argued that hacking computers by the police is not permitted under Germany's strict phone-tapping laws and that legislation would be needed to enable covert surveillance. Last year, SchÃ¤uble persuaded the German pParliament to approve â¬132 million ($171 million) for his Program for Strengthening Domestic Security. As part of the program, the BKA would have been allowed to penetrate and monitor PCs of suspected offenders in Germany via the Internet. The program also calls for greater use of video cameras in public places, biometric systems and other new security technologies, as well as the establishment of an "Internet Monitoring and Analysis Office."
8073
Silly idea gains steam Austria has become one of the first countries to officially sanction the use of Trojan Horse malware as a tactic for monitoring the PCs of suspected terrorists and criminals.â¦
285131
A security organization has suggested police use key-logging software to track communications between terrorists.
298509
Germany's High Court has handed down a landmark decision banning police from installing spyware on computers of suspected criminals without their knowledge.
215502
German Chancellor Angela Merkel said on  Friday that Germany must allow security services to use the  Internet to track terrorist suspects&#39; online movements.
561444
In recent weeks, China has been accused of hacking the Pentagon as well as British and German government offices.
490613
(InfoWorld) - When it comes to who can and who can't be a hacker, the German government appears to want its cake and eat it, too. AfterÂ passing antihacking legislationÂ earlier this year to crack down on the sharp rise in computer attacks in the public and private sectors, the government is now floating a plan to develop and smuggle its own spyware on to the hard drives of suspected terrorists through e-mail messages. German Interior Minister Wolfgang SchÃ¤uble has been feverishly seeking support for a new security law that would allow federal authorities to investigate suspects' Internet use and stored data without their knowledge, ever since the country's Federal Court of JusticeÂ halted their cybersnooping activitiesÂ in February. The judges argued that the hacking of computers by the police is not permitted under Germany's strict phone-tapping laws and that legislation would be needed to enable covert surveillance. SchÃ¤uble's efforts to introduce a security law with wider police surveillance powers have, however, led to a heated debate that nearly exploded late last week when a copy of the proposed security law was leaked to the German media. The measure would allow authorities to install Trojans carrying remote forensic software on suspects' hard drives. While SchÃ¤uble has said that government cyberspying would only be conducted in a handful of exceptional cases and only on those suspected of planning terrorist attacks, critics say he may have overstepped his bounds. Max Stadler, a security expert with the German Free Democratic Party, warned in a ZDF television interview last week that the Interior Ministry's spyware plan would weaken the trust of German citizens in government. He referred to the government Trojan as "an invasion into the private sphere." Magnus Kalkuhl, a virus specialist at the German office of Russian security software vendor Kaspersky Lab, said the plan "would undermine the very purpose of security software, which is to plug -- not make -- security holes." The idea of allowing officials in one specific country to snoop also disturbs Kalkuhl. "What's going to prevent police in Germany from breaking into computers in Italy?" he asked. And even if the government approves the use of spyware, Wolfgang Wieland, a member of the Green Party, told the Berliner Zeitung newspaper last week that he questions the success of a measure that assumes suspects know little about computers and won't detect and remove Trojans and other spyware. It's naive to believe that terrorists, who live in a world of conspiracy, would trip over something as obvious as e-mail from an unfamiliar source, he said. In defense of the plan, SchÃ¤uble said in an interview with Deutschlandradio last week that police need to keep pace with terrorists and criminals, who shouldn't be allowed to use cyberspace as a protected area. The plan, he said, isn't to control everyone's computer but rather only those machines used by suspected criminals and terrorists and only for a limited period of time. JÃ¶rg Ziercke, president of the Federal Criminal Police Office (BKA), said in an interview with the German magazine Stern that the planned remote forensic software can't be used broadly because it must be tailored to run on each targeted computer. "We're talking about 10 such measures a year," he said. The German government has released no technical details of how the sypware will operate. A spokesman for the Interior Ministry declined to comment, citing security regulations. The use of spyware by crime fighters isn't new. For instance, the U.S. Federal Bureau of Investigation uses a tool, called CIPAV (computer and Internet Protocol address verifier), which can record IP addresses and send this data back to government computers. Nor is Germany the only European country debating spyware legislation. Neighboring Switzerland and Austria are reportedly considering laws that will give police greater powers to monitor computers online. Neither of the countries has released any information on their spyware plans. No firm date is set when German parliamentarians are expected to vote on the proposed security law. But with Islamic radicals targeting German troops and others working in Afghanistan in recent weeks, SchÃ¤uble has spoken of a heightened threat level that makes the spyware issue of increasing urgency. Â
103323
Euro defense company develops "hacker-proof" encryption.
747515
Anonymity is verboten Google is threatening to close the German version of Gmail if the Bundestag goes through with new laws to ban anonymous email accounts.â¦
441123
A new hacking method is causing concern for the lengths it goes to avoid detection by security software and researchers.
360447
The irony of the German government floating a proposal to deploy spyware to infect the computers of suspected criminals isn't lost on the security community, still furious over the "anti-hacking" law that has undermined legitimate security research in that country.
694508
(InfoWorld) - In the five years since terrorists attacked the U.S., Europe has been the target of extremist attacks, as has India. Bombings in London and Madrid and a recent failed attempt to blow up passenger trains in Germany have prompted a security clampdown never seen on the Continent. Throughout the European Union, governments are grappling with how to guard against terrorist attacks. Meanwhile, Indian IT services companies have beefed up efforts to protect data. The discovery of bombs in two German trains in July pushed up several security measures on the political agenda there. In September, the German government agreed to a new antiterror database, which will be available to authorities across the country and contain information such as a person's religion, travel history, telephone number and Internet data and bank details. It also approved increased use of video surveillance in public areas. These measures reflect a gigantic shift in thinking about privacy in Germany, which has been highly sensitive about data protection and surveillance because of its Nazi history and, more recently, the Stasi secret police in the former communist-run East Germany. The need to tighten security has created demand for new technologies to help authorities combat terrorism. The German subsidiary of IBM Corp., for instance, is working on new technology that will enable computers -- not human beings -- to filter information from the cameras monitoring public areas and other locations. Two German companies have developed a new biometric system for identifying airline passengers. Lufthansa Systems Group GmbH, the IT services arm of German airline Lufthansa AG, and high-security document producer Bundesdruckerei GmbH have developed the SecBoard system. The companies hope that the system, designed to conduct biometric checks on passengers prior to boarding an aircraft, will play a significant role in "trusted passenger" programs planned by the airline industry to increase security. In the U.K., the government is close to activating part of the Regulation of Investigatory Powers Act (RIPA) of 2000 that deals with encrypted data, one in a set of powers covering electronic surveillance and wiretapping. Authorities say the increased use of encryption is hampering their access to information on suspectsâ computers. RIPA would allow police to demand that a suspect decrypt data or face up to two years in jail. The encryption measure in RIPA has remained dormant since the techniques werenât widely used when the law was passed, according to the U.K. Home Office. Terrorist suspects already face up to five years for failing to decrypt data or provide an encryption key. But critics contend the law, which would apply in more than terrorism-related investigations, gives too much power to law enforcement and has the potential for abuse. High-ranking officials could demand the decryption of data without a court order, and the law binds to secrecy those served with a request. Experts say the law could increase the chance that, if seized, a companyâs mission-critical data could be mishandled. Elsewhere in Europe, heads of state met to discuss 57 antiterrorism measures two weeks after the March 11, 2004 bombings of four crowded commuter trains in Madrid. Among the measures discussed were the surveillance of telecommunications, Internet communications and air transportation. Civil liberties groups accused them of using the fight against terrorism as an excuse to increase police powers. E.U. legislation was slow to follow but, from September 2007, telecom carriers and ISPs (Internet service providers) must keep data on all mobile and fixed-line calls for between six months and two years. From March 2009, they must keep data on VOIP (voice over Internet Protocol) calls, Internet connections and e-mail messages. Law enforcement officials will be able to demand the date and time of calls and messages, but not their content, and identifying information of the calling or sending and receiving parties. In India, the Sept. 11 attacks were not a watershed event because the country experienced frequent attacks by Kashmiri separatist groups demanding independence. Even before Sept. 11, some of the large Indian IT services companies had hardened data centers supporting their offshore businesses, said T. R. Madan Mohan, an analyst at Frost & Sullivan Inc. After Web sites of a ministry of the Indian government and an Indian atomic energy agency were hacked, and anti-India messages posted on these sites, Indian businesses showed increased concern about the need for intrusion detection and related security measures, he added. Infosys Technologies Ltd., Indiaâs second largest outsourcer, already had disaster recovery and business continuity plans in place before Sept. 11, said a spokeswoman for the company in Bangalore. However, those attacks brought the threat of terrorism into sharp focus for Indiaâs export-oriented industries, such as software outsourcing, because U.S. and European customers began worrying about the preparedness of their Indian suppliers for terrorist attacks. (Reported and written by John Blau in Dusseldorf, Germany; Peter Sayer in Paris; Jeremy Kirk in London; and John Ribeiro in Bangalore, India, and assembled by Grant Gross in Washington, D.C.)
246258
(InfoWorld) - For months, German Interior Minister Wolfgang SchÃ¤uble has been lobbying intensively forÂ tough security measures to fight terrorismÂ and cybercrime. Now he's putting his words into action. Law enforcement officials in Germany and Austria are now among the first to have electronic access to each other's fingerprint databases, the German Federal Ministry of the Interior said Monday. Since 2006, the two countries have shared their DNA databases as one of several measures agreed by some European Union nations under the Treaty of PrÃ¼m in 2005. The treaty, which has meanwhile been signed by several E.U. member states, gives police and other security agencies in different countries unprecedentedÂ access to a range of individuals' personal data. During its E.U. presidency, Germany is trying to muster enough support to turn the Treaty of PrÃ¼m into E.U. law. Support for tough security measures has grown in Germany and other E.U. member states that worry about their national security being increasingly threatened by international terrorism, organized crime and, increasingly, cybercrime. Recently, the Baltic nation ofÂ Estonia suffered several weeks of DDOSÂ (distributed denial-of-service) attacks against government and private-sector Web sites. That DDOS attack sent a warning signal to governments across Europe. On Monday at an IT security conference hosted by the German Interior Ministry, SchÃ¤uble referred to information technology and communications infrastructures as "the nerve strands of society" and called on everyone -- governments, businesses and consumers -- to give IT security a top priority. Protecting critical infrastructure, including communication and energy grids, from cyberattacks is a key area of focus during the two-day conference. SchÃ¤uble is also determined to give the Federal Criminal Police Office (BKA) greater power to monitor terrorists and criminals online by allowing the agency to peek inside their computers. In an interview with the Berliner Zeitung published on Saturday, the minister said he aims to complete draft legislation over the next few weeks to allow the BKA to hack into the PCs of suspected criminals. This year Germany's High Court handed down a landmark decisionÂ banning police from installing spywareÂ on computers of suspected criminals without their knowledge. The High Court in Karlsruhe argued that searching computers is similar to searching homes, a practice in Germany that requires police to follow certain procedures, such as obtaining a search warrant and informing suspected offenders of a search. The judges also argued that hacking computers by the police is not permitted under Germany's strict phone-tapping laws and that legislation would be needed to enable covert surveillance. In the interview, SchÃ¤uble said he would amend Germany's constitutional law to allow online surveillance if the country's leading courts required such an amendment. In February, Germany passed a law allowing security officials to create the largest and most comprehensive pool of personal data ever amassed in the country. The databases of nearly 40 different agencies, including BKA and the Federal Intelligence Service (BND), are now linked to allow authorities to run searches on suspected individuals and retrieve information within minutes. Â
161042
A programming error in Skype could let hackers use "Add Video" feature to run malicious code on the victim's system.
746555
(InfoWorld) - Chinese premier Wen Jiabao described reports of Chinese hackers breaking into German computers as a matter of "grave concern" and said Monday that his country will cooperate with Germany to resolve the matter. Jiabao's comments, made during a press conference with German Chancellor Angela Merkel in Beijing, were prompted by a report published two days earlier in the German news magazine Der Spiegel claiming that Chinese hackers had been able to infect German government computers with spyware. Merkel said that for Chinese relations with industrialized countries to move ahead, everyone needs to "respect a set of game rules" and "protect intellectual property rights." Security experts from Germany's Federal Office for Information Security (BSI) and Federal Data Protection Office discovered Trojan horse programs in computers used in several government ministries, including the Foreign Ministry, the Ministry of Economics and the Research and Development Ministry, as well as Merkel's office, the report in Der Spiegel said. Although the first Trojan horse software was detected in May, there are continued attempts to sneak spyware into government computers via the Internet, according to Spiegel. Security experts monitoring data traffic were able to stop the transmission of a 160G-byte file from a German ministry to China, but no one would say if hackers succeeded in stealing other files, the magazine reported. BSI and the Federal Data Protection Office declined to comment. A spokesman at the Federal Ministry of the Interior, while declining to comment on the Spiegel story specifically, said that the federal government, in general, is aware of increased efforts to steal information from computers in the private and public sectors. "We are making a huge effort to ensure that government systems remain protected from outside attacks," the spokesman said. "So far, we've been able to avoid any damage." (Information from pool reporters located in Beijing was used in this report.)
527993
Malware arrives in German spam that claims to contain an update from Microsoft.