With technology becoming even more advanced, the military seems to be taking a step backwards as they could start using ‘spy rocks’ …As we store and transport more and more information online, we’ve gradually come to realize how easy it is for others to access that information without our permission. From Facebook’s privacy policies to the ongoing NSA leaks, it seems like the ordinary online user has enough reason to log out. Well, I’ve got more bad news for you: anyone can build a powerful spying tool using off the shelf parts, and for under $60 (USD).
Brendan O’Connor is the founder of security and software consultancy company Malice Afterthought. Last week he made headlines when he shared how he built F-BOMB, a small device that runs a software that he calls CreepyDOL . The DOL stands for Distributed Object Locator and “Creepy” with a capital ‘C’ is the perfect word to describe it. O’Connor built the F-BOMB using the popular Raspberry Pi microcomputer and added a Wi-Fi sensor to the device. The cost? $57 (USD). He built 10 F-BOMBs and hooked them up to Reticle, a “command & control system” that he made. Finally he hooked it up to a “data visualization system,” which you can see in the image above and in O’Connor’s video below:
In case the video wasn’t clear enough, the F-BOMB can gather a disturbing amount of wireless data. As New York Times reported – and as the video above proves – with the F-BOMB you can find out not only information on a wireless device but what the user is currently using or accessing through the device: geolocation, websites, email addresses, programs and more.
In my brief chat with O’Connor, he revealed that the device can snoop on wireless devices within about 160ft. He can add other sensors to the F-BOMB as well as adapt it to snoop on wired connections. Further, O’Connor said the F-BOMB is a passive device, so you have no way of knowing if it’s snooping on you. Finally, I asked O’Connor if the situation really is as hopeless for consumers as the New York Times article seemed to indicate. Here’s what he said:
Yes, it really is that hopeless. There are vulnerabilities in all the relevant layers of the stack. The application developers need to stop leaking so much data outside encryption envelopes (e.g., why does iMessage send hardware make and model, and iOS version, unencrypted?). iOS (I’m picking on it here because I use it, but the same problem is larger) should have OS-level support for blocking all non-VPN traffic until a VPN connection is established (once it’s up, the connection is opaque, but while it’s going up, I’ve usually got all the data I need). And the low-level protocol needs to stop encouraging devices to *beacon out all their known networks constantly*. So since there needs to be culture-level shifts at all the layers of the stack, yes, for end-users, the situation is hopeless at the moment.”
In other words, not only is it possible to make a surveillance tool that is small and cheap, the devices that we use are practically inviting prying eyes to take a look at our data. It falls upon us as end users to nag Apple, Microsoft, Google and other companies who create the hardware and software that we use to step their security game up. It would be foolish to believe that they know nothing about the disaster that they’re courting (with our privacy and security at stake). But for some reason they’re not doing anything about it, nor are they telling us how much danger we’re in.
O’Connor intends to sell F-BOMBs soon. Fellow black hats and tinkerers can sign up at Malice Afterthought’s website to find out more about the F-BOMB and when it will go on sale. Ars Technica also has a thorough technical report on the F-BOMB. As for the rest of us? I guess we’d better start learning how to communicate telepathically.
[via Brendan O'Connor & The New York Times via Infoneer Pulse]
Play some music and secure your valuables closely at hand with the RadioVault
Hide your stuff in plain sight! The 9.5″ by 6.75″ by 1.75″ safe is opened via a biometric fingerprint scanner for added security. The steel reinforced door is spring loaded to pop open when your fingerprint is scanned. The scanner can actually be programmed to learn 120 different fingerprints (which I’d guess is about 118 more than most people will need). The dock charges your iPhone and can use it as one or both of the dual alarms, as well as display the date and time. An aux cable is included to play nicely with other MP3 devices.
iPhone Radio Dock with Hidden Safe Drawer
Let the world’s most famous British police call box help you read at night with the Doctor Who TARDIS Book Light. But just like the Doctor, this light has more tricks up it’s sleeve- it comes with a UV pen:
Write a secret note- the pen’s writing can only be seen under the soft blue light of the Tardis booklight. Great for people who like to take notes in their books but don’t like any visible marks in them. It has a clip on the bottom and an adjustable neck so it can be used beyond just books.
Doctor Who Tardis Book Light with UV Pen
See that smiley face button? It’s actually a camera. Smile! The Smiley Face Camera is a Japanese import (and thus a bit pricey at $92) but is guaranteed to make your subject smile. You can record up to 60 minutes of video, plus stills, or even just audio before exporting the data and charging it via USB. It uses micro-SD cards to hold the information (not included). Groovy.
Put tiny identifying marks on all your valuables with Theft Recovery Microchips. These tiny microchips use the same radio frequency technology that has been used for years to identify lost pets. A thief can alter the serial number or appearance of the item but the chip can be scanned to prove it’s yours (you must register each chip with a global database that law enforcement or dealers can access). The chips cost $20 each (they come in sets of 5) and are only 1/2″ long and can be drilled into any wooden item- whether it’s a guitar, picture frame, firearm, or more with the included tiny drill bit. You can also use the included epoxy tube to glue it onto other types of surfaces or areas where drilling is impractical.
Protect Your Belongings with Theft Recovery Microchips
When I was a kid and wanted to sound like Darth Vader you either had to put your face right up to a fan, go to night school for impressions, or hire James Earl Jones to stand behind you. Now it’s all digital, like this Star Wars Spy Gear Voice Changer which changes your voice right as you speak. Disguise your voice to sound like Darth Vader, General Grievous, or Boba Fett. The best part of this- no more painful tongue in the fan injuries. But don’t worry, I’m sure James Earl Jones will still find work.
Talk Like Darth Vader with the Star Wars Spy Gear Voice Changer
Protect the company at all costs! A trained office assassin can never have too many weapons at their disposal so why not add one more to your office warfare arsenal with the Office Ninja Blowgun Set? Comes with a pair of plastic blowguns in red and blue, a set of 12 matching darts for each, and a styrofoam practice target (Steve from Marketing is your real target, btw. You can find him either in the break room for his 4th coffee of the day or flirting with Amy from Accounting at her cubicle. The time is near, the mission’s clear. This message will self destruct in 3..2..1…)