The FBI spied on a Signal group chat of immigration activists, records reveal

9 months ago by herseycokguzelolacak to c/technology

Exclusive: Agency accessed private conversations of New York ‘courtwatch’ group that was observing public hearings
Ooops 127 points 9 months ago

I guess "FBI infiltrated group of immigration activist" would be boring and not fitting the FUD about encrypted messaging...

path: 0 20618642, hotness: undefined, score: 127, children: 1
jjlinux 4 points 9 months ago

Understand that encryption is useless if 1 or more of the parties in a group is already compromised. That's the problem. Signal's encryption is great, but you are not anonymous in it. Additionally, even if, like me, you only use your handle and hide your phone number, most people tend to name your contact with your name anyway, effectively breaking the purpose. I use signal only because I'm sure my data is not being sucked as with WhatsApp, but I'm not dreaming for a second that someone will not fuck up at some point and give me away, so I keep stuff I don't want out there to personal interactions.

path: 0 20618642 20647598, hotness: undefined, score: 4, children: 0
THX1138 75 points 9 months ago

Wouldn't be surprised if they went undercover as a member and was just accepted to the group.

path: 0 20618486, hotness: undefined, score: 75, children: 2
h54 47 points 9 months ago

My guess as well. Historically, the FBI has spent substantial resources infiltrating groups deemed even the smallest threat to state power.

path: 0 20618486 20618598, hotness: undefined, score: 47, children: 0
JoeKrogan 5 points 9 months ago

Lowest barrier to entry

path: 0 20618486 20628669, hotness: undefined, score: 5, children: 0
SleeplessCityLights 72 points 9 months ago

Remember that most hacking is not done by breaking encryption and running code. It's %100 social engineering. The weakest point is always a person.

path: 0 20624588, hotness: undefined, score: 72, children: 9
SnoringEarthworm 27 points 9 months ago

Most activism groups aren't really screening for membership.

Usually it's, "you want to join ? Cool, I'll add you."

Edit: Just read the article. They went out of their way to try to make it sound like this group was up to something other than legally show up to immigrant court and keep watch for heinous police behavior.

The memo did not provide any further details about the individual or their alleged past calls for violence and offered no specifics or evidence to explain why the FBI characterized them as “anarchist violent extremists”. The courtwatch efforts have been non-violent, and the FBI did not respond to an inquiry seeking specific examples of violence and did not answer questions about whether law enforcement had ongoing access to the private group.

path: 0 20624588 20624851, hotness: undefined, score: 27, children: 2
captainlezbian 3 points 9 months ago

Oh so it's an activist group that's doing valuable work but has no need to background check for security. Makes sense, basically every activist or political group is on signal these days.

path: 0 20624588 20624851 20626826, hotness: undefined, score: 3, children: 0
vacuumflower 1 point 9 months ago

We are starting to learn that the world with computers and the Internet is like the world without them, except with them.

There were those medieval German secret courts with their secret judgements and assassins fulfilling those. And there were various masonic and such groups. And even secret societies of revolutionaries.

All they were was crime groups, interest clubs and elites pastime, in the end.

But it all started really working with mass politics. Because secrecy of a group requiring communication and adding new members can't be preserved, and once it's broken, it's just a few people challenging the power. While a crowd with torches (because nobody gives days off for demonstrations at daytime ; yes, torches were not a Nazi thing, they were common for all "worker" parties) doesn't need secrecy - its idea's survival is guaranteed not by secrecy, but by inability to stop its spread.

path: 0 20624588 20624851 20646862, hotness: undefined, score: 1, children: 0
herseycokguzelolacak 8 points 9 months ago

This is why I don't subscribe to the Signal E2EE hype cult.

The fact that Signal doesn't hide the anonymity of its users, and forces everyone to use phone numbers is a huge red flag.

path: 0 20624588 20646820, hotness: undefined, score: 8, children: 4
jjlinux 2 points 9 months ago

SimpleX is the way to go, always making sure you never say anything that can point to you in any chat.

path: 0 20624588 20646820 20647537, hotness: undefined, score: 2, children: 3
iknowitwheniseeit 4 points 9 months ago

Yeah, they caught the Dread Pirate Roberts because he leaked some account name, IIRC. There is no such thing as perfect opsec. 😬

path: 0 20624588 20646820 20647537 20648904, hotness: undefined, score: 4, children: 0
HulkSmashBurgers 2 points 9 months ago path: 0 20624588 20646820 20647537 20647956, hotness: undefined, score: 2, children: 1
jjlinux 1 point 9 months ago

Yeah, but different use cases.

path: 0 20624588 20646820 20647537 20647956 20648001, hotness: undefined, score: 1, children: 0
vacuumflower 1 point 9 months ago

Yes. And the only person I know to have interacted with state security agencies in professional area has told me a few times that any security system based on cryptography is of no real use. Like perpetuum mobile, snake oil, and so on.

If your information is protected by cryptography, it could as well be protected by using "Aesopean language" or memorized by loyal courier or put on paper note in a secret place. You have a secret and a message, ultimately. If your secret place can be predicted, then your secret key can be stolen. If your loyal courier can be drugged\tortured\intimidated, so can be you or your addressee or your cryptography means' providers to give up the secret key or the message contents or to sabotage your tools.

"Aesopean language" is how they really do it for anything important, it's pretty naturally learned from culture (one case where spy movies and such show it right), it doesn't require niche expertise, and it does require common context that can't be fully reconstructed in most cases. The fuzziness of meaning is a feature, so is the disconnect of responsibility.

Unfortunately I'm autistic and impaired in that exact part of human communication, but honestly some of famous people whose jobs involve being enlightened black belt masters of that are autistic, so perhaps I'm just dumb.

EDIT: But it's funny that once I thought that the commonly imagined way this works is a trap for illiterate people, and technical means like cryptography are what really should be used. Perhaps, again, some sort of autistic compensation. Now I know better.

path: 0 20624588 20646704, hotness: undefined, score: 1, children: 0
root 56 points 9 months ago

The FBI’s report from August, prepared by its New York division, does not make clear how the bureau accessed the Signal group

The question I’m most curious to have answered

path: 0 20618126, hotness: undefined, score: 56, children: 13
otter 51 points 9 months ago

Sounds like they joined a large group chat as a member

The FBI, the documents show, gained access to conversations in a “courtwatch” Signal group that helps coordinate volunteer activists who monitor public proceedings at three New York federal immigration courts. The US government has repeatedly been accused of violating immigrants’ due process rights at those courts.

path: 0 20618126 20618973, hotness: undefined, score: 51, children: 0
mienshao -44 points 9 months ago

I’ve always felt like Signal isn’t half as secure as it claims to be, and articles like this don’t help that feeling…

path: 0 20618126 20618647, hotness: undefined, score: -44, children: 11
THX1138 36 points 9 months ago

Why's that exactly... who's not to say they just joined the huge group undercover? Or randomly added to a sensitive group aka the journalist debacle a few months ago.

path: 0 20618126 20618647 20619168, hotness: undefined, score: 36, children: 5
mienshao -35 points 9 months ago

I’m literally just talking, giving an opinion. Nothing was that fucking deep, just talking about my feelings about how a supposedly secure encrypted website was infiltrated by the motherfucking FBI…

And I’m downvoted? Fucking why? Every day Lemmy gets a little more like Reddit. Shit like this is why the numbers go down. Just spread that negativity—make everyone feel like shit.

Downvote this while you’re at it! Fuck yall!

path: 0 20618126 20618647 20619168 20620223, hotness: undefined, score: -35, children: 4
eodur 34 points 9 months ago

Many subscribe to the "vote on comments based on how useful the information is" theory, myself included. Based on that your feeling, despite how valuable it is to you personally, isn't particularly valuable to the discussion. Its not personal.

path: 0 20618126 20618647 20619168 20620223 20620924, hotness: undefined, score: 34, children: 0
neukenindekeuken 28 points 9 months ago

Your feelings and opinion are wrong in this case.

They could mislead people into sharing your opinion/feeling and then you'd both be wrong.

You're getting downvoted because you're wrong and are contributing the opposite of a benefit to a conversation around the security of signal without any facts or proof other than your "gut".

That is not upvote worthy. People are correct to downvote your comment to let others know that they shouldn't take it with any degree of seriousness. That's how this works. That's how the whole comment voting system is supposed to work.

Your feelings are not special when they muddy the waters of facts.

path: 0 20618126 20618647 20619168 20620223 20621377, hotness: undefined, score: 28, children: 0
0ops 16 points 9 months ago

path: 0 20618126 20618647 20619168 20620223 20620502, hotness: undefined, score: 16, children: 0
pimento64 4 points 9 months ago

Get a grip

path: 0 20618126 20618647 20619168 20620223 20646309, hotness: undefined, score: 4, children: 0
neukenindekeuken 19 points 9 months ago

It's as secure as it can be in the modern world really.

But none of the technology matters if you let an FBI agent into your super secure encrypted group chat.

path: 0 20618126 20618647 20621322, hotness: undefined, score: 19, children: 0
jjlinux 3 points 9 months ago

Read and research a little before just repeating what you hear some saying. Signal is regularly audited by individuals and institutions, and every time it comes back as the top in terms of encryption. But encryption means nothing if a group, or even 1 individual in a group, is compromised.

path: 0 20618126 20618647 20647634, hotness: undefined, score: 3, children: 0
Nima -14 points 9 months ago

why is this downvoted? its not even that wild a comment. Signal fans need to chill a bit.

edit: fanboyism is strong in this thread, damn.

path: 0 20618126 20618647 20624629, hotness: undefined, score: -14, children: 2
9bananas 8 points 9 months ago

because it's completely unsubstantiated bullshit?

why would anyone upvote "someone's feelings" on a technical subject?

this is a technology we're talking about: there is an objective right and wrong, feelings are irrelevant. especially when those feelings are completely baseless.

the better question is: why would anyone upvote this garbage?

path: 0 20618126 20618647 20624629 20630847, hotness: undefined, score: 8, children: 0
jjlinux 3 points 9 months ago

It's down voted because it's utter misinformation AND feelings have no relevance in documented information.

path: 0 20618126 20618647 20624629 20647650, hotness: undefined, score: 3, children: 0
atrielienz 35 points 9 months ago

I don't know who still needs to hear this, so I'm going to say it again for the people in the back.

Assume every form of communication you have is being spied on.

If you're using an app like signal or similar, make sure you and everyone else in the chat has encryption enabled.

Verify the other users in the chat.

Do not plan any activity that could be considered a criminal enterprise on an electronic device with a connection to the internet.

path: 0 20619486, hotness: undefined, score: 35, children: 10
darklamer 40 points 9 months ago
path: 0 20619486 20620082, hotness: undefined, score: 40, children: 1
atrielienz 9 points 9 months ago

That's why I said an app like signal. People assume that every app works the same. Telegram had issues with encryption where all parties didn't have encryption enabled but one or more of the parties involved assumed the chat was still encrypted.

However I should probably change that to read more along the lines of: know the features and settings of your app and ensure that encryption settings are set to maximize the protection of privacy.

I'm gonna have to workshop that. It's a mouthful.

Either way, thank you for pointing that out.

path: 0 20619486 20620082 20620197, hotness: undefined, score: 9, children: 0
SupraMario 13 points 9 months ago

This had nothing to do with encryption. 99.99% of breaches aren't some pen hack, it's social engineering of someone to gain access. You have all the best software and practices in place, but if the dumbass on the fourth floor decides that they're gonna let someone in who's called them from Microsoft, then it doesn't matter.

They let the FBI into the chat because they don't know opsec for shit.

path: 0 20619486 20625818, hotness: undefined, score: 13, children: 1
atrielienz 2 points 9 months ago

I agree that you're right. My thought was it was more likely that they socially engineered their way into getting invited to the chat.

This is why I said that a lot of people are the weakest link in their own secured communications networks.

path: 0 20619486 20625818 20625906, hotness: undefined, score: 2, children: 0
original_reader 0 points 9 months ago
path: 0 20619486 20621370, hotness: undefined, score: 0, children: 0
mienshao -14 points 9 months ago

I just got downvoted in the comments above for basically having the EXACT same sentiment. I fucking hate it here.

path: 0 20619486 20620260, hotness: undefined, score: -14, children: 4
Postimo 9 points 9 months ago

The difference is they gave solid sound advice on opsec, and your comment seemed more in line with distrusting signal's tech. One of these comments makes sense, the other doesn't.

path: 0 20619486 20620260 20623954, hotness: undefined, score: 9, children: 0
atrielienz 9 points 9 months ago

Yeah. I dunno man. I'm sorry.

But like. A lot of the time security/privacy fails like this are user-inflicted. Either because people don't understand the apps and services they use, or because other people aren't as vigilant about auditing their networks (the people, the hardware the software).

path: 0 20619486 20620260 20620345, hotness: undefined, score: 9, children: 1
mienshao 0 points 9 months ago

Fair point!

path: 0 20619486 20620260 20620345 20620378, hotness: undefined, score: 0, children: 0
Engywuck 5 points 9 months ago

Just don't care about down votes.

path: 0 20619486 20620260 20620738, hotness: undefined, score: 5, children: 0
abbiistabbii 29 points 9 months ago

Imagine saying "Feds should follow the law" is an extreme anarchist statement.

path: 0 20625482, hotness: undefined, score: 29, children: 2
vacuumflower 2 points 9 months ago

What you allow them, they do. It's always so. That right to bear arms - see, when most people think that "Feds should follow the law" is a normal statement, then in a society where carry is normalized one can just not be afraid of repeating it and demanding its fulfillment. Including in crowds near migration courts. While for those disagreeing it's not convenient.

(I don't like school shootings, but schools can be guarded with armed adults, which is far easier to do if you arm personnel and not send police there, which is easy with legal carry. I also don't like political murders, but politicians are not in short supply, or, as we say in Russian, "there's [as plenty] of them as of shit behind a bathhouse".)

path: 0 20625482 20646924, hotness: undefined, score: 2, children: 0
captainlezbian 1 point 9 months ago

It becomes one every anti left scare (red, but also green and lavender)

path: 0 20625482 20626788, hotness: undefined, score: 1, children: 0
architect 0 points 9 months ago

Shocking revelation.

path: 0 20618028, hotness: undefined, score: 0, children: 0
MonkderVierte 0 points 9 months ago
path: 0 20621078, hotness: undefined, score: 0, children: 0
technology
technology

@lemmy.world

login for more options
87355
21246
15760

This is a most excellent place for technology news and articles.

Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


go to feed...