• Networking
  • Lebanese army paid over 1M USD for spyware

ILIA_93 wroteThe NSA also isn't concerned with spooking on Americans' porn history, but I think the Americans understand a little bit more about privacy than you do pal :)
If you honestly believe the ISF is attempting to emulate the NSA or its operations in any way or that the ISF has 10 percent of the capability of the NSA, you are living in another world, buddy.

ironman wrote@tt400, this is why criminals are kidnapping people, stealing cars, and getting paid, did you hear about the kidnap in Amchit 3 days ago?
Look at the statistics regarding the success rates of various famous departments like Interpol, the NYPD, or the GIGN. These are some of the most successful police departments in the entire world and even they cannot solve all crimes or apprehend all criminals on their watch. To suggest that the Lebanese police force, with all its corruption, weaknesses, and political bullshit problems, should be capable of solving all of these problems with ease is laughable. Why don't you go try being a police officer in this country with the budget and accessibility the government has before you talk? Do you know there are some municipalities in Lebanon that have only ONE official policeman on duty? So what are you talking about? You are expecting the FBI in Lebanon? This is a joke.
Bottom line is if there are millions to spend, collected from people, coz hey that's where the government gets it's funding, maybe, just maybe you know, there would be better places to spend them than pretentious software to spy on your own people (those people who pay your salary, you know), and it's a loosing battle on top.
You know what this looks like to me? It looks like software to make hackers and geniuses out of troglodytes. I would not be betting on it too much.
But some kind of money laundering scheme? Maybe.

At the very best, our money squandered.
geekevo wroteFor some reason i seriously doubt the effectiveness of this Galileo software, the claims sound too good to be true.
I'm fairly sure that the dozens of governments around the world who spent millions of dollars on the software have done enough due diligence about its effectiveness. That doesn't mean you can't take measures to defend yourself.
What's wrong with the intelligence services investing in hacking software/hardware? I would be surprised if this wasn't happening.
We both know how widespread corruption is in Lebanon. This amplifies the likelihood of misusing these tools. As rolf mentioned, I would rather see the military spend that money on educating and training their personnel as well as updating their infrastructure.
So what are you talking about? You are expecting the FBI in Lebanon? This is a joke.
Good point, maybe they shouldn't act like the FBI by spending millions on non-critical software when there are more pressing matters.
Why don't you go try being a police officer in this country with the budget and accessibility the government has before you talk?
No need to be aggressive. We strive to be a friendly community where critical thinking and structured argumentation are encouraged.
samer wroteWe both know how widespread corruption is in Lebanon. This amplifies the likelihood of misusing these tools. As rolf mentioned, I would rather see the military spend that money on educating and training their personnel as well as updating their infrastructure.
Good point, maybe they shouldn't act like the FBI by spending millions on non-critical software when there are more pressing matters.
I agree with the notion that the ISF could be spending that money more wisely, but that wasn't what was being discussed. I was pointing how fears of a big, scary police-state in Lebanon are ridiculous. In fact, you can argue that the opposite is true of this country. There isn't enough police presence!
No need to be aggressive. We strive to be a friendly community where critical thinking and structured argumentation are encouraged.
Wasn't being aggressive. Apologies if that was how I came off.
tt400 wroteLook at the statistics regarding the success rates of various famous departments like Interpol, the NYPD, or the GIGN. These are some of the most successful police departments in the entire world and even they cannot solve all crimes or apprehend all criminals on their watch.
The NYPD ? successful ? That's the most racist PD in the world, they don't even solve crimes, they just kill people. Just a bunch of thugs.
samer wrote
geekevo wroteFor some reason i seriously doubt the effectiveness of this Galileo software, the claims sound too good to be true.
I'm fairly sure that the dozens of governments around the world who spent millions of dollars on the software have done enough due diligence about its effectiveness. That doesn't mean you can't take measures to defend yourself.
Exactly, but then whats the point of the entire system if the people it is meant to be targeting can simply just protect themselves.
why would you buy hardware from hackers, its like asking to be hacked. For 1 million $USD I would have a competition for $3000 and hire the winner or a team for the rest of their life and the life of their children... Am getting more confident that this government is ran by monkeys that are pressing red buttons at random.
@tt400, i knew what i was talking about because i visited the "Jara2em l Ma3loumetiye" thing, i've been there, and trust me i know stuff about it, about the skills of the personnel, and personally i really have a value for something called "Privacy", those tools are probably used to track people who insult the president on facebook or on twitter
You think this isnt part of "5as5asa".
As someone said there should have been a "mona2asa".
Too bad they have big money margin, while people die on the streets.
Is there any chance that this could be photoshopped?
@NuclearVision, no man this image is retrieved from the 400GB Torrent.
It's funny how the total is a round $100,000, it's as if someone came up with that number, then they filled the invoice with items to come up to that amount.
@rolf.

bro the invoice is for 1.1 million dollars, not 100k

and why would someone alter this image, they have other customers than the Lebanese Army (KSA, Bahrain,,,,etc)
There are two invoices the other one is 100k usd for the equipement not the software itself.
I wonder how is this team allowed to sell such solutions.
I mean since usa for example already use it, shouldn't it as always stop others from reaching it.
Whats the point if every government use it, there will be no more secrets, thus no more spying, maybe only if it is local spying.
There's something fishy about the whole thing.
One more point, i don't think the army thinks of this as classified. i mean they could buy it as anonymous unless the team won't sell it to anonymous.
So they want to use this software to spy on our communication and eavesdrop on https transmission?
If so, this may be pointless because weaknesses in common encryption libraries (openssl, nss, etc...) are being fixed all the time.
samer wroteThat doesn't mean you can't take measures to defend yourself.
Can we spend a little more time thinking about this?

I watched this interesting talk by James Mickens this morning where he did touch on the topic of Security. (If you're interested, it starts at minute 16:18, but I recommend watching the whole thing anyway). He has a very simple way of describing his security model: Mossad or not Mossad, or to use a slightly less taboo word here, "NSA or not NSA", a pretty tongue-in-cheek way of saying "What can you really do if you're being targeted by government spying agencies?" To quote him:
These guys have all kinds of things you don't even have. They have drones, they have satellites intercepting communications and looking at them. You don't have a satellite. They have guys dropping out of helicopters, you don't even have a frisbee golf team. They have night vision goggles, they have guns that shoot around corners. That's a real thing! So I don't think that having a PGP signature in your email is going to protect you from that stuff.
I understand the cyberhacker cryptoanarchist fantasy of protecting yourself from your government by applying strong crypto, but you're standing against people who control your communication at every single stage. They control the ISPs connecting you to the Internet, the networking equipment relaying your messages, the authors of the application you're using for your messages, your own encryption software, ... They're not playing fair. As usual, I think xkcd says it best.

Again, the keyword here is targeted. Sure you can protect yourself from online blind fishing, but if powerful people want to intercept your communications, they generally will.

I'm not saying it's a good thing, I'm not saying it's a bad thing either, but can we just drop the utopia of living in a world where we control our communication? That's similar to the infamous 2nd amendment controversy in the US where people think that they have the right to hold a gun to protect themselves from the tyranny of government or some bullshit. Government has squads of infantrymen armed to the teeth with bombs, missiles, drones, airplanes, tanks and bazookas and you think that your 2 shot shotgun will protect you from their tyranny??

Security is not a math problem, despite what "Security Researchers" will have you believe. Security is enforced by a 2m/130kgs henchman with an IQ below 70 and a 5$ wrench pounding on you until he gets the info he needs. and in the world we are living in, there's very little your math equations can do about it.

Further reads
@joe exactly.
All I keep hearing is this, I have the right to my privacy, I don't want anyone to know what I doing, to whom I'm talking, what am I talking about etc etc.
Like, don't worry, no one will go and willingly invade your privacy just to read your love letters and conversations between you and your girl.
Like I had this thought in my head from start, the government or federal people in every country, just like Joe said, they have control of your entire resources that you are using, your Internet, your mobile network, the applications you use etc etc, and I kept saying in my head, what's all this morning about privacy privacy, you can't do anything about it, if the government wants to find you, or stuff about you, they will.
But rest assured, they will not trace you because of your romance, or your late night horny sex video calls.
They will do that, If you have committed a serious crime.