NSA Snooping on Cell Phone Calls

From CNet:

A recent article in the London Review of Books revealed that a number of private companies now sell off-the-shelf data-mining solutions to government spies interested in analyzing mobile-phone calling records and real-time location information. These companies include ThorpeGlen, VASTech, Kommlabs, and Aqsacom--all of which sell "passive probing" data-mining services to governments around the world.

ThorpeGlen, a U.K.-based firm, offers intelligence analysts a graphical interface to the company's mobile-phone location and call-record data-mining software. Want to determine a suspect's "community of interest"? Easy. Want to learn if a single person is swapping SIM cards or throwing away phones (yet still hanging out in the same physical location)? No problem.

In a Web demo (PDF) (mirrored here) to potential customers back in May, ThorpeGlen's vice president of global sales showed off the company's tools by mining a dataset of a single week's worth of call data from 50 million users in Indonesia, which it has crunched in order to try and discover small anti-social groups that only call each other.

Posted on September 17, 2008 at 12:49 PM • 40 Comments

Comments

Nomen PublicusSeptember 17, 2008 1:29 PM

"which it has crunched in order to try and discover small anti-social groups that only call each other."

Why don't they just advertise for computer nerds in the local jobs listings :-)

OTOH, in what manner is it anti-social for a group of people to only call each other?

SethSeptember 17, 2008 1:35 PM

So a couple of wrong numbers will break their data mine?

Of course, if it's known they're doing that, it's easy enough to defeat.

RichardSeptember 17, 2008 1:35 PM

"which it has crunched in order to try and discover small anti-social groups that only call each other."

Why do cliques hate America?

ughSeptember 17, 2008 1:35 PM

Hah! Their data mining big brother system will never catch me! I don't have a cell phone at all!

edgoreSeptember 17, 2008 2:00 PM

Hmmmm....I guess I am safe then, since while I only talk to a very few people, those people are extrememly social and call many, many people.

A NonSeptember 17, 2008 2:59 PM

@ugh: Since everyone else has a cell phone, or at least all normal people have cell phones, expect to be collected for questioning soon. Regards, your friendly government.

Andre LePlumeSeptember 17, 2008 3:05 PM

Ha! I registered my phone under an assumed name. Let them drag Harry Tuttle in for questioning!

kangarooSeptember 17, 2008 3:06 PM

"small anti-social groups that only call each other"

They've discovered the family! Wow, this high-tech stuff is sure a boon.

Tangerine BlueSeptember 17, 2008 3:19 PM

"The wiretapping laws, at least in this situation, simply don't apply."

Apparently the 4th amendment doesn't, either.

Davi OttenheimerSeptember 17, 2008 3:27 PM

this data is more freely available than the article suggests. it's not just the NSA getting into snooping on cell records but commercial companies and other gov't agencies (e.g. transpo) have been doing this as well.

PhillipSeptember 17, 2008 4:49 PM

I'm actually behind such solutions. So long as it doesn't involve the government strong arming any companies and they are harvesting their own data from the airwaves (like any Tom, Dick, or Harry could do) I don't see the problem (other than the fact it's against Federal (Wiretapping?) Law.)

The real solution which should be implemented by the phone companies is to develop a solution that encrypts all this crap, then it won't matter who is sniffing what when from where!

iqlusionSeptember 17, 2008 6:01 PM

I like how they pretend to hide the personal information on the last slide. It's still there ;)

WhereBeYouSeptember 17, 2008 7:37 PM

With GPS spoofing apparently easy to do, I would guess that any groups that don't want to be monitored for location will use that path, and leave only honest or innocent cell phone users culpable for whatever the security agencies want to blame them for.

By the way, in the U.S. one will find that teenagers comprise the largest population of such small anti-social groups. There goes that high school diploma.

Why aren't they catching drug dealers and criminals with this? Because to do so would cause such groups to change their ways and then they couldn't be caught.

kezSeptember 17, 2008 9:35 PM

Several of you have misunderstood the definition of the "small, anti-social group". It's a small group of callers where _every_ caller in the group only ever calls other members of the group.

This doesn't cover "families" (the teenager in the family calls their friends, who call _their_ family and friends, who call...). If you read up on it, it turns out that all but a few hundred callers (out of tens of millions) are a part of one big network of people that call each other. Which isn't at all surprising, is it?

7 degrees of antisocial-ness?September 17, 2008 10:33 PM

Fortunately I don't need a phone. If I ever need to call myself, I won't bother to.

aren't there gpg type gizmo's that can use a cell acct?
sadly, this may be the last comment I posts here, because I don't want the people who are tracking me to think I'm paranoid. (social stigma and all that)

neillSeptember 18, 2008 1:24 AM

whoever said they needed to could have obtained billing data in the past, even w/o being a govt employee (social engineering) -
with some data-mining the same results were possible since a long time ago

RSeptember 18, 2008 2:33 AM

Hmm. I live in a foreign country with my girlfriend. We don't know many people here, so my cellphone for instance almost always calls her cellphone.... Now I'm anti-social apparently!

R

CybergibbonsSeptember 18, 2008 4:09 AM

People in the US seem to think you need GPS to locate a cell phone, which isn't true. You can judge someone's physical location to a great degree of accuracy simply by the cell phone towers they use. Look at Google Maps mobile for example.

NPSeptember 18, 2008 4:42 AM

The last slide has been removed! What was on it?
Anyways, I think this is absurd! Thinking as a bad guy, If I was doing something that requires not to be found, for sure I wouldn't be found by my habits with cell phone, since I would make sure not to create any pattern and not use a phone that can be related to me (stealing a phone every time I need to make a "secret" call wouldn't be a big deal)

ripSeptember 18, 2008 7:50 AM

They don't teach civics in school anymore, because its all theory, and the reality is government corrupts, absolute government corrrups absolutely,
Since being different is a crime, shouldn't they teach a class called "how to be average,normal" or do they need to have people practice on so the repression can stay sharp

edmSeptember 18, 2008 7:59 AM

i am not "anti-social", i just only call my friends. the flip side would be that telemarketers are the only group never to make it "the list"? that just seems wrong.

Not HiddenSeptember 18, 2008 8:00 AM

from the last slide: Thank youFurther information and discussion:Vincent Barry – VP Global SalesVincent.barry@thorpeglen.comMobile - +65-97558905On September 9, the Berkman Center received a request from Mr. Dave Woods, CEO of ThorpeGlen to remove the .pdf sales presentation that Christopher Soghoian was mirroring on his Berkman account.Mr Woods cited privacy concerns, as the name, email address and mobile phone # of his VP of Sales were listed on the last slide.We have removed this slide as per his request, although we note that the original slides are still available on ThorpeGlen’s website ?as well as Google’s cache?, and still list the “private” contact information of Vincent Barry, their VP of Global Sales

Bryan FeirSeptember 18, 2008 11:04 AM

@Jason:

That's assuming they can find a payphone. As someone happily without a cell phone, I've been watching as the level of maintenance on pay phones has decreased and a lot of phones that used to be available aren't there anymore.

WhereBeYouSeptember 18, 2008 11:08 AM

kez: do you understand sarcasm?

I am sure those "small anti-social groups" in other parts of the world have already modified their behavior so they won't be identified as such anymore.

JJSeptember 18, 2008 11:38 AM

It might be a good idea for terrorists to also work in some sales related job that requires many calls to many people from a cell phone (such as a Real Estate agent).

if I had a hammerSeptember 18, 2008 4:38 PM

@rip Since being different is a crime, shouldn't they teach a class called "how to be average,normal"

That's what public school is. It teaches kids how not to stand out. The ones that stand out get pounded down, either by other students or by faculty/staff.

Jim BullcrapperSeptember 19, 2008 12:25 AM

Evidently a terrorist cell can evade detection by making a few crank calls and ordering a pizza.

Bob MeadeSeptember 22, 2008 9:09 PM

ThorpeGlen appear to have taken down the pdf demo to which Bruce had linked.

But, seriously, did anyone really doubt that the NSA or several other SigInt organisations already had this capability?

bobSeptember 24, 2008 7:43 AM

Doesn't this just give you an urge to make a set of .wav files that contain combinations of all the 'sensitive' words (but in innocuous use) you can think of, post them on several webpages, start a viral email and then have everyone phone each other and play the file?

JSeptember 30, 2008 2:25 PM

This is when pay-as-you-go phones come in handy. No annoying contract and no gps/personal information to track!

and_so_forthSeptember 30, 2008 3:15 PM

well what is new? NSA and FBI and CIA spying this and NSA spying that is all old news.

Cant we have articles on what the acronym agencies DO NOT spy on??

We know that U.S is pretty much a full dictatorship...

Leave a comment

Allowed HTML: <a href="URL"> • <em> <cite> <i> • <strong> <b> • <sub> <sup> • <ul> <ol> <li> • <blockquote> <pre>

Photo of Bruce Schneier by Per Ervland.

Schneier on Security is a personal website. Opinions expressed are not necessarily those of Co3 Systems, Inc..