Posts for: #CyberLaw

The Malaysian cybertrooper phenomenon or is it Botnet?

The Edge recently held a political poll on whether Anwar Ibrahim should quit as the Opposition leader–But when the editor begun to see that the one-week survey attracted 12,736 responses and the responses were overwhelmingly one-sided, she smelt something fishy.

Upon further checking with the IT team, they found that 6,354 of the responses came from one IP address, and about 1,700 came from several IP addresses within the same building. Another 2,000 responses came from seven different IP addresses.

[Read more]

DAP lodges report with MCMC over blocked sites

Blue Coat packetshaper

Two days ago, the Democratic Action Party (DAP) lodge a report to the MCMC on an 'internet blockade' targeting DAP related political websites that was allegedly being carried out by Telekom Malaysia (TM). As you may know TM is the largest ISP in Malaysia, and if TM suddenly blocks a website--a large chunk of the Malaysian public are automatically denied access to it.

The DAP IT manager (didn’t know the DAP had an IT team now did ya?), in his press statement said that :

In investigating the DPI filtering equipment location, I have found 1032 suspicious network equipment using same IP address family as the the Arbor Network Peakflow SP with TM branding. Since the login page of this network equipment bears TM logo, undoubtedly MCMC should haul up TM and conduct IT forensic investigation on all 1032 equipments without delay. I am fully prepared to assist MCMC in its investigations.

In light of this new evidence, MCMC must re-examine its 2nd May statement. MCMC should be politically impartial and hold the standard of government regulatory body that it should be. It must put the interest of all Malaysians first.

Now this isn’t really news, to be fair the Arbor Network Peakflow SP solution is meant primarily as a DDoS protection security suite with a slight tinge of DPI functionality added on the side. TM in their defence haven’t really denied they own the Arbor Network solution–there’s even a joint press release from 2004 to announce their purchase of it.

Unless TM operates like the government, in which they announce the purchase of something in 2004, but only start to using it in 2013–I’m guessing they were using Arbor for other purposes before they decided to unleash its DPI functionality.

But there could be a twist.

[Read more]

Microsoft is eavesdropping on your skype conversations

Microsoft Eavesdropping on Skype messages

The guys over at H-online reported recently that they have some pretty good evidence that good ol’ Microsoft is eavesdropping onto your Skype conversations, and the results are pretty damning.

The method for detecting those sneaky little eavesdroppers was pretty ingenious though. The researchers sent two urls in their skype messages to each other. The urls pointed to servers that the researchers owned. For all practical reasons these urls were made specifically for the purpose of the test and should not be receiving any traffic from anywhere–unless of course Microsoft was listening.

Then they sat at wait at their servers to see if they received any traffic, and lo’ and behold barely a few hours later they received some rather funky traffic from an IP address registered to Microsoft in Redmond. busted!

The urls didn’t just end with the .com, but had sensitive material appended to it (or at least that’s what the researchers made it look like), and Microsoft used the url which meant they had to be eavesdropping on Skype messages and conversations. More importantly these urls were made to look like they held sensitive material, such as bank logins..etc etc, but Microsoft still used it, and worse even visited the sites to see what was on it.

Even more shocking is that Microsoft isn’t even denying the charge–yet, but they point out that they do scan urls once in a while to flag spam, but H-online isn’t buying it.

[Read more]

Censoring and spying–Malaysian Style

In 2 days time, the South-East Asian nation of Malaysia will go through its 13th General Election since 1955. Some might look negatively on the number 13, but for the vast majority of Malaysians the coming few days will either raise our hopes or shatter them.

Malaysia has had only 1 party in power since it’s independence—that’s a long time to be in power, and for the first time since 1955 the ruling party in Malaysia is under threat, not just to lose it’s 2/3rd majority in Parliament, but the entire elections altogether, and with it control of the Federal Government.

[Read more]

Kerajaan Malaysian Mengintip Rakyat Malaysia sendiri

Big Brother is watching

Beberapa minggu lalu, saya telah menulis tentang sekeping artikel yang ’tidak bertanggungjawab’ oleh Malaysian Insider apabila ‘mendakwa’ kerajaan Malaysia mengintip rakyat Malaysia - tanpa sebarang bukti. Saya amat kecewa bahawa wartawan tersebut membuat kenyataan tersebut tanpa apa-apa bukti–apabila menulis blog tersebut saya kecewa dan saya marah!

Tetapi yang lebih penting–saya silap!

Mengikut laporan dari Citizenlab semalam–sekarang timbulnya bukti bahawa kerajaan Malaysia MEMANG mengitip rakyat–terutama sekali Rakyat Malaysia yang mengunakan Bahasa Melayu.

[Read more]

I’m Sorry, the Malaysian Government IS spying on you

Big Brother is watching

A couple of weeks ago, I wrote about an ‘irresponsible’ piece of journalism by the Malaysian Insider when the ‘claimed’ the Malaysian government was spying on Malaysian citizens–but they didn’t have any proof. I was very upset that a reporter would make such a bold statement and not back it up with any proof –so obviously the post was written in a caustic  and emotionally charged way–I was upset, annoyed, angry even!

More importantly though–I was wrong!

On Labour day, Citizenlab released a second report detailing out more info from they’re Finspy research.

I’ll let speak for themselves in an excerpt they prepared specifically addressing MALAYSIA:

[Read more]

Telekom Malaysia is censoring the internet prior to GE13

I'm not a usual fearmonger, or a person who panics easily--yet you friendly local tech evangelist has a warning for Malaysian users out there. Unifi is censoring the internet in the run up to the hotly contested GE1--and that's what the data suggest. You heard that right folks, some of you suspected all along, and I apologize for not believing you earlier. I was initially skeptical that Unifi and Telekom Malaysia would go to such extents to censor our right to information, and I'm deeply upset that this is happening in my own country.

Usually most Internet Service Providers (ISP) don’t censor the internet, not because they don’t want to–it’s simply because censoring the vast amount of online traffic is a monumental technical challenge. In the past we’ve seen Malaysia ISPs do this, for instance when they blocked Malaysia-Today in the run-up to the 2008 General elections, but censoring one entire website is a fairly straightforward thing to do–an bypassing that censorship is equally straightforward.

[Read more]

Malaysiakini twitter account hacked

In what appears to be an escalating amount of cyber-attacks on the online web portal, Malaysiakini reported that they're twitter account has been hacked by a group calling itself Sarkas-Siber.

Malaysiakini now follows in the footsteps of other notable newspapers who’ve had they’re twitter account hacked, hopefully twitters recent announcement for two-factor authentication may help reduce the high number of hacks the social network faces on a regular basis.

[Read more]

Government Network used to download porn : Privacy is dead

Just how private are your searches…turns out they aren’t private at all.

The wonderful people at Torrentfreak did an amazing piece of investigative journalism today. Upset over the passing of CISPA, they decided to do an internet check on how active the House of Representatives were–on bit torrent. It turns out with a couple of IP addresses, and some elbow grease you can pretty much find out how active a certain IP range is on bit-torrent or even on searching porn!!

So using the same techniques that Torrentfreak used, and applying them to the Malaysian e-Government official service provider “Government Integrated Telecommunication Network  (GITN)”,  your friendly neighbourhood Tech Evangelist manage to find some pretty interesting results!

The GITN is owned by Telekom Malaysia and is dubbed the “official network provider for the e-Government” in Malaysia–so let’s see what the official network for the e-government was being used for?

First off, someone was using the GITN network to download torrents–not exactly surprising, but judging by the variety of torrents (everything from Dark Skies to Naruto to Discovery Channel documentaries) it looks like more than one person was doing the downloading.

Torrent Activity on the Government Network

Also equally interesting was that someone used the GITN network to download porn. I'm no expert, but I'm thinking Gangbanged.XXX isn't really a discovery channel documentary.
[Read more]