Mobile phones, the stealth ID card, bug and tracking device in your pocket.

Ear­li­er this month it emerged that the FBI had been remote­ly acti­vat­ing a mobile phone’s micro­phone and using it to eaves­drop on near­by con­ver­sa­tions. The sur­veil­lance tech­nique, which “func­tioned whether the phone was pow­ered on or off.” came to light as a result of a rul­ing by U.S. Dis­trict Judge Lewis Kaplan on the legal­i­ty of the “rov­ing bug”. It had been approved by U.S. Depart­ment of Jus­tice offi­cials for use against mem­bers of a New York orga­nized crime fam­i­ly who were wary of con­ven­tion­al sur­veil­lance tech­niques such as tail­ing a sus­pect or wire­tap­ping. Cell phones owned by two alleged mob­sters, John Ardi­to and his attor­ney Peter Pelu­so, were used by the FBI to lis­ten in on near­by con­ver­sa­tions.

Ear­li­er this month it emerged that the FBI had been remote­ly acti­vat­ing a mobile phone’s micro­phone and using it to eaves­drop on near­by con­ver­sa­tions. The sur­veil­lance tech­nique, which “func­tioned whether the phone was pow­ered on or off.” came to light as a result of a rul­ing by U.S. Dis­trict Judge Lewis Kaplan on the legal­i­ty of the “rov­ing bug”. It had been approved by U.S. Depart­ment of Jus­tice offi­cials for use against mem­bers of a New York orga­nized crime fam­i­ly who were wary of con­ven­tion­al sur­veil­lance tech­niques such as tail­ing a sus­pect or wire­tap­ping. Cell phones owned by two alleged mob­sters, John Ardi­to and his attor­ney Peter Pelu­so, were used by the FBI to lis­ten in on near­by con­ver­sa­tions.

The news that the FBI had been remote­ly acti­vat­ing mobile phones as eaves drop­ping devices con­firms what many activists have been say­ing for years.

“A cel­lu­lar tele­phone can be turned into a micro­phone and trans­mit­ter for the pur­pose of lis­ten­ing to con­ver­sa­tions in the vicin­i­ty of the phone. This is done by trans­mit­ting to the cell phone a main­te­nance com­mand on the con­trol chan­nel. This com­mand places the cel­lu­lar tele­phone in the ‘diag­nos­tic mode.’ When this is done, con­ver­sa­tions in the imme­di­ate area of the tele­phone can be mon­i­tored over the voice chan­nel.” — Nation­al Recon­nais­sance Orga­ni­za­tion newsletter,1997.

As long as I can remem­ber there has been a kind of unspo­ken rule among activists about tak­ing bat­ter­ies out of mobile phones dur­ing meet­ings to pre­vent bug­ging — along with occa­sion­al argu­ments about it being para­noid. While it has long been know to be a the­o­ret­i­cal pos­si­bil­i­ty, the mafia court case con­firms it is actu­al­ly a prac­ti­cal tech­nique and is being used.

It is not clear exact­ly how the FBI achieve their remote acti­va­tion but it is known that it is pos­si­ble to update the soft­ware on a mobile phone by send­ing an unno­tice­able SMS mes­sage to a par­tic­u­lar cell phone. Changes to the phones soft­ware than make it pos­si­ble to spy on the user around the clock, as long as the phone has pow­er. All SMS mes­sages can be read and all calls and con­ver­sa­tions can be lis­tened to, includ­ing those tak­ing place in the vacin­i­ty of the phone. It would also be pos­si­ble to access and copy address books and oth­er infor­ma­tion stored on the phone.

It should be fair­ly obvi­ous to any­one that sim­ply ‘switch­ing off’ a mobile phone could not pre­vent the soft­ware from reac­ti­vat­ing the phone at will. Like most com­put­ers, the on/off switch on a mobile phone is sim­ply a but­ton that requests the soft­ware to do some­thing, ie.. turn the phone on or off — or more acturate­ly, switch the phone between stand­by and nor­mal oper­a­tions. Many have an alarm fea­ture which can oper­ate when the phone is appar­ent­ly ‘switched off’.

Some of the vuner­a­bil­i­ties of mobile phones may only be exploitable by the state or pri­vate inter­ests with finan­cial mus­cle to obtain access to the records of mobile phone net­works. Oth­ers how­ev­er are much eas­i­er to exploit and well with­in the capa­bil­i­ties of pri­vate inves­ti­ga­tors. One exam­ple is the abil­i­ty to read mobile phone num­bers from all phones in a room as those phone rou­tine­ly poll and com­mu­ni­cate with the near­est cell phone repeater.

And lets not for­get the abil­i­ty to track cell phones (again, poten­tial­ly even when they are turned off). With the data reten­tion laws requir­ing mobile phone net­works to keep this data for a year or so, it is easy for the author­i­ties (or pri­vate agen­cies with influ­ence) to not only mon­i­tor some­bod­ies move­ments but also cross ref­er­ence that with oth­er peo­ple and build up acturate pic­tures of net­works of asso­ci­a­tion.

As repres­sion on dis­sent increas­es, it is vital that we are all aware of the infor­ma­tion we pro­vide our ene­mies and what steps we can take to lim­it the dam­age.

What advice might you con­sid­er?

Don’t take any mobile phone to a meet­ing and if you must, remove the bat­tery.
Don’t take your per­son­al mobile phone with you on actions.
Remove the bat­tery if mak­ing jour­neys oth­ers should not know about.
Bet­ter yet, don’t take the phone or send it out on a walk in the park with a friend.
Don’t pow­er up you ‘clean’ action phone in any build­ing you don’t want asso­cait­ed with an action.
Nev­er use ‘clean’ action phones to call com­rades per­son­al phone num­bers.
Don’t call a ‘clean’ action phone from any ‘non clean’ phone.
Don’t con­tin­ue to use the same set of action phones on future actions.
Only pay cash for phone cred­it and don’t not from places with CCTV (dif­fi­cult).

Fur­ther read­ing…

FBI sto­ry:
http://news.zdnet.com/2100–1035_22-6140191.html http://www.informationliberation.com/?id=18443
http://arstechnica.com/news.ars/post/20061203–8343.html

Back­ground:
http://www.wasc.noaa.gov/wrso/security_guide/cellular.htm

Some exam­ples…

Clear­ly the police are using the loca­tion records of phones to link peo­ple to actions, some recent exam­ples:

“A GANG of trav­ellers are fac­ing jail for a series of vio­lent ram-raids, rob­beries and bur­glar­ies after they were linked to the crimes through mobile phone records.”

“Mr Farmer said mobile phone records had been cru­cial in secur­ing guilty pleas and con­vic­tions…”

http://www.cambridge-news.co.uk/news/ely/2006/12/13/80f9ff15-a536-4d01-9e77-743d900618d6.lpf

“At a press con­fer­ence this morn­ing Mr Gull said that offi­cers were look­ing at mobile phone calls made and received by the girls and were also analysing DNA, but refused to go into more detail.”

“When asked about Anneli and the oth­er wom­en’s mobile phone records, Mr Gull said: “I don’t want to go into details, it’s very sen­si­tive, but it’s some­thing we’re look­ing at.â€?

http://new.edp24.co.uk/content/news/story.aspx?brand=EDPOnline&category=News&tBrand=EDPOnline&tCategory=news&itemid=NOED16%20Dec%202006%2015%3A37%3A43%3A720

“THE EADT has now filed an offi­cial com­plaint against Suf­folk police after its most senior detec­tive obtained the pri­vate mobile phone records of a jour­nal­ist in a bid to dis­cov­er his sources.”

“Edi­tor Ter­ry Hunt has request­ed a full expla­na­tion for the action tak­en by Det Supt Roy Lam­bert in a let­ter sent yes­ter­day to Chief Con­sta­ble Alas­tair McWhirter.”

“As revealed in yes­ter­day’s EADT, con­fi­den­tial mobile phone records of reporter Mark Bul­strode were obtained by Mr Lam­bert so he could find out who he had been speak­ing to.”

“The move was tak­en after the jour­nal­ist approached the force with infor­ma­tion about the reopen­ing of an his­toric inves­ti­ga­tion.”

http://www.eadt.co.uk/content/eadt/news/story.aspx?brand=EADOnline&category=News&tBrand=EADOnline&tCategory=news&itemid=IPED01%20Dec%202006%2019%3A35%3A22%3A490

A the pieces are now in place for the elec­tron­ic police state.