28 December 2009

The Modern Spook's Wish List:

The Modern Spook's Data Retention Wish List (Part One)
The Modern Spook's Wish List Part Two
The Modern Spook's Wish List Part Three

A sends:

Here are my personal notes having watched the live-stream of the talk concerning "The Modern Spook's Wish List" at the Chaos Computer Congress.

Video stream recordings available soon, check http://events.ccc.de/congress/2009/wiki/Streaming

-- Spelling and grammar errors left in by purpose --

-- Duplicate information between talk and info on cryptome left out. --

* ETSI TS 102 657

planned elements of datasets are not compatible with EU data-retention-laws ("the most interesting things can be found at the end of the ETSI document", -> check the appendix).

* Table B.2

entry f.e."list of all known devices of this subscription [=contract user]"

* entry "billing codes" = interdependence with SWIFT-Codes

* First all the data will be collected, then measures for protection and ACL's will be added - secondly. The whole database might go to the foreign Intelligence Agency (BND in this case.)

* German Telekom does not record how often the phone rings before the addresse picks up the phonee. The UK does. How fast a person picks up the phone can be used to differ between inviduals (-> statistic analysis based on ~1 year).

* Spain wanted to record all incomplete calls, because in the Madrid terrorist bomb-attacks cellphones had been used as bomb initial starters.

* FEMTO (?) - Cells, not yet on the market, but still settled spywise.

* "3.1 Code of Conduct". Applicants are not allowed to spy on partners - No interference with spy agency missions? [Irony].

* Dynamic Triggering (how do you locate the called person) in combination with TCP/IP is new and difficult for the Telcos at the current state.

* Wilhelm Bertold (Federal ministry of Economics and Technology) is going to retire soon.

* Theo Metzger (1999) probably was a cover name (RegTP). Could not reached by phone when calling the switchboard (not existent).

* "Today everybody is talking about wikileaks.org, John has been doing this since 1996." [Applause] "He also was of great help in preparing this talk."

* Repeat: First all the data will be collected by using the ETSI-interface, then measures for protection and ACL's will be added - secondly.

* Q&A: Help for identifying more attendencies like "the lady" is welcomed. moechel.com/kontakt.html