Cybercrime, potential, and the time to nail ISPs

Way back in July, I bookmarked a post from Wired.com about arresting or prosecuting Internet Service Providers for the crimes committed by their users.

Over the last few months this post has inspired a lot of thoughts. I'll admit, one was "where did I put the link to that ISP post?". That's why you are getting this post now instead of in July or even August.

Sorry.

But luckily this issue is still relevant. Anyway, without further review, here are my thoughts relating to Internet Crime. And because the best way to fight crime is through kung-fu, they will be in the famous Magic bullet style - not to be confused with the other magic bullets.

• First of all, I 100% agree that ISP need to be prosecuted. Not only for hosting virus spreaders, but also hosting child pornographers, hackers, and other sorts of online hooligans. ISPs will assert that they are providing a service, and that they shouldn't be held liable, but that's bupkis. ISPs provide a platform for media, no different than a newspaper hosts articles or a website hosts comments. If criminals abuse that platform, ISP should shut them down. Failure to do so means the ISPs are aiding and abetting.


• Second, the authorities have a problem: the best developers, hackers, etc don't work for the authorities or the US government. They would rather go work for Google, Facebook, or other private firms. Compare that to engineers or other fields that are tied to government consumption. Outside companies pay more and as long as that remains, they will continue to be behind.


• Consider the career of a young IT college grad: should he or she take a government job hindered by red tape, old methodologies, and far less pay, or a position with a new, forward-thinking, proactive, creative company? Unless they are incredibly loyal to the nation, it's not a hard choice.


• Are ISPs licensed? Do they have to be? They should be and IP addresses should be associated in some way with the ISP, like social security numbers are associated with region. I don't if this is the case already. It could be.


• If the government finds an ISP guilty, they should take away their license. Kinda like a liquor license. Depending on the violation, there could be jail time or a fine.


• And finally, I think ISPs will be hurting when the government seizes all WiFi connections and finally treats the Internet like it does the radio air waves.

Name Checking Hackers and Attacking the Mouse

Since this blog has gone in a million different directions lately, I figured I might as well go somewhat political-military-strategic today.

In the last few years hackers have caused almost as commotion and aggravation to governments and businesses as terrorists. I'm sure there are people out there that would label them "cyber terrorists". Two of the premier hacker groups are the associations Anonymous and LulzSec. Both of these groups aim to debilitate the powers that be that they feel are taking advantage of the little guy. They are sticking it to The Man as they see fit.

More power to them.

But my question is, are there any rappers who name-check them yet? Rappers are big in name-checking African rebels, Muslim terrorists, domestic terrorists, freedom fighters, and other folks who fight the power. But do they ever mention either of the two groups who are causing the most ruckus? I'm sure there is a lot you can rhyme with Anonymous or LulzSec.

Second thought:

I was reading an article on a conspiracy web site that talked about how a terrorist attack at Disney World could severely destroy what remains of Florida's economy. According to the counterterrorism analyst, if the tourism goes, so does Florida's economy. Makes sense to me.

But I have always thought terrorists could take a Disney attack to the next level. Why stop at Disney World? Why not attack Tokyo Disney, Euro Disney, and Disney Land as well? If a group of suicide bombers synchronized their watches and exploded bombs at the main entrance of each Disney park at the same time, it could send ripples through the global tourism industry. Granted at least one bomber wouldn't claim any victims as the parks would be closed, but I don't think that's not the point of most terrorism.

If the point is to show global reach and the ability to scare people from doing what they would normally not be scared to do I think an attack on each Disney main entrance at the same time would do that.

Disclaimer: I like my blog. I like writing on it. I am not advocating or supporting the actions of any group mentioned in this post. Nor am I advocating any violence. I own Disney stock, why would I not want people to go there? What I am doing to expanding on issues that are in the news and brainstorming a little.

Using culture and patterns to stop cybercrime

While perusing through one of my Florida State University magazines, I found an interesting article on how FSU is one of the leading universities in researching cybercrime prevention and investigating tools.

As part of the write-up on the FSU cybercrime program, there was a side story (sorry, I forgot the official name of these mini-articles) on a super password finder hacker program the university has created. According to the article, the FSU password cracker is nearly twice as good at deciphering passwords than popular open-source programs.

What makes the FSU password cracker different and more effective is that it uses culture, patterns, and probabilities to calculate solutions. According to the article,

Basically, what sets Aggarwal's program apart from all other password crackers is that its algorithms are based on what people actually do when they create a password, rather than what they could do-namely, create a password that is genuinely unique and thereby almost impossible to break.

Aggarwal's team was able to determine the grammatical patterns and a variety of other user habits (e.g. adding a "1," a "2" or a "3" at the end of a four-letter name) that they gleaned from analyzing over 100,000 old passwords amassed from a number of sources. One of the biggest batches they got their hands on was a list of 67,000 passwords that hackers stole from MySpace.com, for example.

I think this is fascinating - using our everyday culture in the algorithms used to predict the codes of criminals. To be honest, I don't think I have ever created a password that didn't follow some sort of grammatical convention.

Hopefully, this technology doesn't fall into the wrong hands, I'd be screwed.

Adventures in computer buying and the art of patience

Like the able grasshopper of ancient Samurai-era Japan, getting myself back online took skill, determination, persistance, and plenty of patience. Fortunately, it didn't involve the use of any swords. Almost, but not quite.

My ancient computer went kaput ten days ago. A stupid virus took out my windows registry. It was a sad moment as my machine had been with me for six years, through thick and thin, grad school, over 500 blog posts, and one or two excusions into the deepest, darkest dungeons of cyberspace.

(Not that one of those excursions caused me to download the virus. Nope. No way. Not at all.)

Unfortunately, as there is no cash for clunkers program for computers, I had to scrounge up a few hundred thousand pennies for buying a new machine. Something I had not planned for following my sojourn to Memphis only a month ago. Not helping matters was the fact that some slimy scoundrel stole some money from me via a fraudulent transaction in Surprise, Arizona.

(Yes, I caught a computer virus and was a victim of bank fraud in the same week. How very 21st century of me.)

After laboriously counting the nickels, dimes, and a few quarters I did have and cancelling all my cards, I went to Best Buy to check out their wares and find a laptop. Although not intending to buy, I brought the Blackberry and reviewed every single laptop they had. At first I wasn't too impressed, both with the selection and the service. I'm not a big salesperson person, and I hate when I see several salesfolks lead customers to the same item. It makes it seem like they are pushing something they are trying to get rid of.

Frustrated, I left computer-less.

The next day I went back, once again ready to buy at Best Buy. This time I brought my checkbook, since of course my cards were no good. After once again going through the options, I settled on an HP. I strolled on up to the cashier, wrote the check, and lo and behold, my check was no good. Apparently, my check fit the profile of a fraudulent check. I think that's irony.

I left without a computer for the second day.

On day three, I was intent on buying a new computer, problems be damned. As Puffy sang, can't nothing hold me down. For the third time, I went to Best Buy around 1pm. Unfortunately, they were sold out of my machine. By this time, I didn't care if I had to drive to Miami to get this computer, no deity was going to stop me from buying the computer I wanted.

After asking where I can buy the computer of my dreams, I had to drive nearly 30 minutes to the next closest Best Buy. Supposedly, they had eight of my computer left. Of course, when I got there, they had only two. Two of my dream machines, with one little catch: they were both already tinkered with by the Geek Squad and would cost an additional 70 bucks. At this point, I didn't care.

I walked out with my computer, finally happy.

Then I discovered it didn't come with an AC adapter.

Ugh.

Russian Hackers Take Over American Pro Wrestling Web Site

For those who thought the Cold War is over, think again.

According to super secret documents acquired by Bothan spies, a squad of select sex-selling Soviet sympathizers sabotaged Wrestling911.com, a site run by the Snowman, a friend of The Serious Tip.

In an exclusive interview conducted with The Serious Tip, the Snowman claimed several individuals broke into Wrestling911 headquarters by using the spare key he stashed in a plastic rock by the rear entrance.

"I thought I was safe," he proclaimed. "The box said the rock would deter intruders. Heck, I didn't even know where I hid the key sometimes. That rock was tricky."

Once inside Wrestling911 headquarters, the intruders hacked the mainframe, populated the pages with Russian sex product ads, and stole all the money out of the coffee fund.

"I guess these guys were really desperate," Snowman said. "Times must be tough when you have to steal our last four dollars and fourteen cents. That was for the Christmas party entertainment. We were going to get a dancer or two."

Although the Snowman insisted the site will be back to normal by sometime Tuesday, he has since redirected Wrestling911.com visitors to Youtube page.