Investigating the Navalny Poisoning

Bellingcat has investigated the near-fatal poisoning of Alexey Navalny by the Russian FSB back in August. The details display some impressive traffic analysis. Navalny got a confession out of one of the poisoners, displaying some masterful social engineering.

Lots of interesting opsec details in all of this.

EDITED TO ADD (1/13) Bellingcat on their methodology.

Posted on December 23, 2020 at 6:44 AM86 Comments

Comments

Winter December 23, 2020 11:25 AM

Another example showing meta-data does not lie, and is way more important than the content of the messages.

glen or glenda December 23, 2020 11:48 AM

Copying my comment from the weekend squid article (with an edit for context):
The Bellingcat article shows yet again why we need “Tor for the phone network”—i.e., ensuring the network cannot track handsets or people. Tor was initially developed for the US government, because when an American rents a house and just exchanges encrypted traffic with vpn.navy.mil, it’s not hard for the local spies to guess what’s happening. One might expect the article to worry some US government officials, though as [had been said elsewhere in the weekend thread, other parts of the US government like weak systems, because the weaknesses make things easier for their own spies].

[Added:] Apart from the basic onion-routing technology of Tor, we’d just need randomized IDs (TSMI is already randomised; IMSI, IMEI, non-random MACs, etc, would have to become invisible to local infrastructure) and some zero-knowledge payment or proof-of-previous-payment system. The onion-routing might need to be disabled/weakened for latency reasons when doing realtime voice/video/gaming, which is fine if users know which actions will reveal their locations.

Do we have to wait for extra-sensitive US operations to get burned before anything is done? We’ve already had Trump’s non-sensitive phone hacked, according to rumor. Shouldn’t Germany been pushing for increased privacy, given their past funding of GnuPG etc. and the well-publicized hacking of Merkel’s official phone?

Winter December 23, 2020 12:37 PM

The Russian TLAs need a Russian GDPR:

While there are obvious and terrifying privacy implications from this data market, it is clear how this environment of petty corruption and loose government enforcement can be turned against Russia’s security service officers. A few hundred euros could — and does — provide you with months of phone call data for an FSB or GRU officer, allowing investigators to trace the intelligence services’ operations, identify the colleagues of research targets, and follow the physical tracks of spies across Russia and abroad.

Winter December 23, 2020 12:44 PM

@gritzko
“How can we verify the story?”

Just ask the persons mentioned. Names and office addresses are all given. Just contact them.

mark December 23, 2020 12:46 PM

I’m still having really serious questions about – poisoning his shorts? Really? Either as a spray, or an ointment, wouldn’t it have been noticable? I know “ointment”, to me, is not a cream, and so would not soak into the shorts, and look greasy. The spray – there’s have to be a lot.

The whole story, to me, sounds like something that 30 years ago, everyone would have laughed at. For him to get the agent who’d actually done it, and keep him on the phone for three-quarters of an hour, seems awfully. questionable.

Could they have gotten him? Sure. Doing it this way?

mark December 23, 2020 12:47 PM

One more thing – did they poison all of his shorts? Does he only have one pair? If all, then the poison should still be in the others….

Norio December 23, 2020 1:12 PM

We need more investigative journalism like that provided by Bellingcat. They put their lives on the line with every piece they do.
I donated.

Clive Robinson December 23, 2020 1:35 PM

@ glen or glenda,

Apart from the basic onion-routing technology of Tor

There is an old joke about a pair of newlyweds that have got lost in the countryside looking for their honeymoon cottage.

The husband on seeing an old man leaning on a gate smoking a pipe, decides to stop and ask directions. So he stops the car and he and his lovely bride approach the old man anf ask if he knows where they want to get to, and if so the easiest way to get there.

The old man pauses and says “Ey I knows where it is” then starts knocking out his pipe whilst looking thoughtful. After a minute he looks up and says “If I was you, I’d not start from here”…

It’s the same with TOR there is so much wrong with it, that it’s not the place you’ld want to start.

I’ve been through this a number of times before on this blog so it’s easy enough to look up again.

However you are thinking about trying to use two or more mobile devices with privacy is going to cause you another problem you’ve possibly not considered…

Mobile terminators change their leaf position in a network continuously. Which gives the issue of how does one mobile find another mobile without going through an arbitrator of some form… The simple answer is that they can not, which changes the question to “How do you make the privacy of both mobiles secure through an arbitration service?” That is “How do you come up with a secure and privacy enhancing rendezvous protocol?”.

It’s not an easy problem to solve, and untill you do, what ever underlying network you use, is going to haemorrhage information about all the users…

vas pup December 23, 2020 5:01 PM

@Winter • December 23, 2020 12:37 PM
I agree with your comment.
By the same token rioters should never ever get in the same way personal information of the riot police officers: names, addresses, family members, etc. to prevent any intimidation or even harm for fulfilling by police officer their duties.
As I recall, high ranking bureaucrat in Bush junior administration was punished for disclosing CIA female agent information for the general public.
I guess that was absolutely right.
Same applied to confidential informants (CI), undercover officers you name it.

On the subject matter: if that is true, then level of professionalism and training of their toxicology unit (FSB) is very poor. Yeah, when professionalism is not the key parameter for hiring, you do have such results.

xcv December 23, 2020 5:51 PM

From Wikipedia:

Russia of the Future (Russian: Россия Будущего, tr. Rossiya Budushchego), originally the Progress Party (Russian: Па́ртия Прогрéсса; Partiya Progressa) and formerly known as the People’s Alliance (Russian: Наро́дный Алья́нс; Narodnyiy Alyans), is a political party in Russia founded on 15 December 2012 by member of the Russian opposition Leonid Volkov and later refounded on 19 May 2018 by Russian government critic and anti-corruption activist Alexei Navalny, … The party has a seven-member central committee instead of a chairman.

So Navalny’s party is “progressive” and ruled by an official politburo, with “property protection” policies of arbitrarily seizing wealth from “oligarchs” just as the Communist Party did in the U.S.S.R. under Joseph Stalin.

That “open journalism” isn’t really so open after all when it’s dictated as it is from behind the scenes by an active politburo. Whether Navalny’s espionage and demagoguery are in line with Mikhail Gorbachev’s offical policies of perestroika and glasnost that tore down the Iron Curtain and ended the Cold War, I have serious doubts, but the U.S. Democrats and “liberals” who have defended Navalny’s journalism and made vicious accusations of Russian interference in U.S. elections appear to have every intention of restoring the Iron Curtain and waging a second Cold War if not an outright nulear strike on Russia, which would be quite unnecessary and unprovoked, although that is what will happen if Joe Biden takes office.

Cyber Hozda December 23, 2020 5:56 PM

From the article:
“ has discovered voluminous telecom and travel data that implicates Russia’s Federal Security Service (FSB) in the poisoning of the prominent Russian opposition politician Alexey Navalny.”

Are they saying they can track FSB agents in Russia by means of collecting their phone metadata ?!

MarkH December 23, 2020 6:46 PM

@xcv:

1) Central committee and politburo aren’t quite the same thing.

2) It’s not valid to infer a communist philosophy from the use of such terminology. Every person over 40 years of age who was raised in the Soviet Union grew up hearing such terms almost daily. “Central committee” means the top-level group with decision making authority, and is not inherently ideological.

3) You may feel that accusations of Russian interference in U.S. elections are vicious, but they are neither Democratic nor liberal. Federal intelligence and law enforcement agencies famously have majority conservative and Republican-voting staffs. Every such agency investigating this matter — and the Republican majority Senate Intelligence Committee — all affirmed the conclusion of such interference.

A law mandating sanctions against Russia — flagrantly violated by Trump — passed with about 99% of Congress voting in its favor. This is not a partisan question.

FACTS MATTER

Goat December 23, 2020 7:12 PM

Re:That “open journalism” isn’t really so open after all

@xcv,
Yes,if we live on assumptions, but look you can stay in your bubble and get “good stuff”,use facebook’s onion service. This helps you ignore any progressive investigative journalism and stay in the feed 😉

Goat December 23, 2020 7:37 PM

Re:That “open journalism” isn’t really so open after all

In my previous comment I kind of put all the blame on facebook, though certain other reasons need to be solved to respect open journalism:

How we get to know about the story?
The algorithmic filter bubbles aren’t doing much good to us, the networked approach founded on trust seems to work somewhat.. All we need is to pop these bubbles and discover some great sources like @Bruce’s Blog.

Where does the money come from?
I think people are willing to pay, they did pay before the internet, but the friction of payments and donations needs to resolved somehow. I repeat: not everyone can pay in USD, and some people don’t even enjoy holding cryptocurrencies with fluctuating values and grayish laws.

You are blocking quality journalism: No!!
When I had javascript enabled somehow, I saw this message from a very respected news site. The thing is that mostly the answer is opposite, ads incentives headlines over content i.e. sizzle over facts. The best way around is to actually buy a paper, See the problem here?? Some open journalist kills the other by showing annoyances.

xcv December 23, 2020 8:37 PM

@MarkH

1) Central committee and politburo aren’t quite the same thing.

2) It’s not valid to infer a communist philosophy from the use of such terminology.

Democrat philosphy then. But it’s the same thing, because even the USA has a Marxist–Leninist Board of Governors of the Federal Reserve System to regulate our centrally planned communist economy.

Federal intelligence and law enforcement agencies famously have majority conservative and Republican-voting staffs. Every such agency investigating this matter — and the Republican majority Senate Intelligence Committee — all affirmed the conclusion of such interference.

A law mandating sanctions against Russia — flagrantly violated by Trump — passed with about 99% of Congress voting in its favor. This is not a partisan question.

RINOs = Republicans In Name Only. Part of the same old Democrat/Communist politburo of entrenched bureaucrats.

FACTS MATTER

And all sorts of offical government-approved independently verified fact-checking websites are showing up with the support of the self-same politburo: snopes.com, factcheck.org, politifact.com, etc.

IF the official line really were the truth, now, they wouldn’t have to be so aggressive censoring dissenting views such as https://hereistheevidence.com/.

glen or glenda December 23, 2020 9:09 PM

That is “How do you come up with a secure and privacy enhancing rendezvous protocol?”.

It’s not an easy problem to solve, and untill you do, what ever underlying network you use, is going to haemorrhage information about all the users…

I have a big problem with the way certificate authorities check ownership based on unencrypted traffic. Despite this farcical basis, it seems likely that Let’s Encrypt has been helpful to privacy. Similarly, wouldn’t using even a flawed technology such as Tor be better than simply spamming persistent identifiers everywhere you go? I don’t understand what you mean when you say the network would “haemorrhage information about all the users”—Tor doesn’t do that, does it? I’m sure there are attacks that can tease it out, but that’s nothing like the constant “haemorrhage” already happening on telephone networks. Unless the network were actively attack all users, it should greatly reduce the availability of useful logs.

(Maybe I should say “traffic-analysis-resistant routing” rather than “Tor” per se, though AFAIK, Tor gets the bulk of the research on that topic.)

“Winter” suggests Russia needs a GDPR. Sure, good idea, but would it really help in this type of situation? It might drive up the cost of such bribery, maybe make heads more likely to roll afterward, but after revealing an FSB operation, heads will probably roll anyway. Plus, there was international roaming here, which means people not subject to Russian law have some of the information too.

Goat December 23, 2020 10:06 PM

re:”IF the official line really were the truth, now, they wouldn’t have to be so aggressive censoring dissenting views such as https://hereistheevidence.com/.”

@xcv,
Dissent is the very essence of democracy but even “free speech” is subject to reasonable limitations and not exclusive of other fundamental rights.

This website presents one sided facts while Snopes has always highlighted the truth in a very objective way.

(I can provide real examples if you ask)

Goat December 23, 2020 10:10 PM

To add: Algorithmic and personal censoring is also a thing when you don’t agree to opposing views AT ALL.

ResearcherZero December 23, 2020 10:31 PM

@mark

Chemical weapons are not noticeable until you start dying from them, hence the moniker ‘chemical weapons’. They are advanced chemical compounds, and unlike the juice from you juice box, designed for easy dispersal. Any material would dry out very fast leaving behind a severely dangerous residue. One drop of it is enough if dispersed properly, it just takes time to work, and not many people carry atropine on them outside of the battlefield.

If you are being transported by your captors, the flight attendant probably is not going to give you any atropine, and it’s not likely to be on the menu. Plus this is not your average chemical weapon, this is top line, and you probably need expert medical care. Atropine helps stop chemical weapons blocking messages from your nervous system, so you don’t suffocate and experience other nasty effects of a failing central nervous system. It also helps if someone is around to administer it, clear your airways, put you in the recovery position, because you’re probably going to be in no condition to administer first aid to yourself if you got a “good” dose.

SpaceLifeForm December 24, 2020 12:39 AM

@ PKI Professional, @Glen or Glenda, @ Clive

ACME relies upon DNS to verify.

DNS is not secure.

This is my guess as to what Glen or Glenda was referring to.

SpaceLifeForm December 24, 2020 12:50 AM

@ Cyber Hozda

Money. Almost anything can be bought.

A lot of it is online.

In fact, a bunch of Russian intel folk were found because they used their office address on their drivers license.

Then correlate from that info (name leading to other info like billing address).

xcv December 24, 2020 1:01 AM

@ResearcherZero

If you are being transported by your captors, the flight attendant probably is not going to give you any atropine, and it’s not likely to be on the menu.

So atropine is a [https://en.wikipedia.org/wiki/Muscarinic_antagonist](Muscarinic antagonist) according to Wikipedia. I have come across various species of death cap mushrooms in the area some growing in my yard that probably contain https://en.wikipedia.org/wiki/Muscarine among other so-called nerve agents. Some are quite deadly, strangely not by touch, but one whiff of the odor is faintly earthy at first, then pungent and acrid and almost overpowering to the point of unconsciousness.

Perhaps they grow in the boreal forests of Russia as well and are part of folk lore.

Winter December 24, 2020 3:44 AM

@xcv
“Perhaps they grow in the boreal forests of Russia as well and are part of folk lore.”

https://en.m.wikipedia.org/wiki/Amanita_muscaria

The fly amanita grows everywhere in higher latitudes in the Northern hemisphere. As for folk lore, there is a reason it is generally depicted as the place where you see elves and gnomes.

But the Novichok agents are new synthetic chemical substances that attack the same target as muscarine, and much more poisonous than anything from Amanita.

Winter December 24, 2020 3:54 AM

@Goat
“This website presents one sided facts while Snopes has always highlighted the truth in a very objective way.”

Snopes? Laughable.

There are good reasons why fact checkers and scientists never say they know the “Objective Truth”. Bellingcat and Amnesty International never claim such. However, they always have the evidence.

I have yet to encounter anyone who claims to bring the “Objective Truth”, or just the “Truth”, who even tried to check any facts.

Goat December 24, 2020 4:53 AM

re:” There are good reasons why fact checkers and scientists never say they know the “Objective Truth”. ”

@Winter, I was talking about objectivity in a different sense. i.e. freedom from bias, english language has these strange quirks of meaning(literally these affect the free software movement as well)

Winter December 24, 2020 5:15 AM

@Goat
“freedom from bias”

Freedom of morals?

The above story is one indeed biased. It starts from the biased position that secretly poisoning political opponents is objectionable. I know that the other side, e.g., the GOP and the Kremlin, have a different moralistic view: Might is Right.

I understand that people who believe in “might is right” would object to describing patriots followers of the ruling strong man as mere hit men.

On the other hand, I think Bruce would stop writing this blog, and most of us reading it, when he would have to embrace the Might is Right view.

AlexT December 24, 2020 6:08 AM

Well it is an interesting story but I see quite a few issues

Firstly the who. If one might have some doubts abut Bellingcat there is zero question about the allegiances of CNN or der Spiegel. The mere fact that they team up should be a massive reflag.

Then there is the material. I’m sorry but I simply don’t believe that you can buy that much data (they claim access – in this or previous investigations – to massive cellphone logs, air travel logs, border control registry, passport databases and “hidden” CCTV surveillance) for a few hundred Euros, even in Russia. The much more plausible explanation is that they have been made privy of that data by some occidental agency. One can not exclude the “useful idiot” theory (ie they actually transacted with someone without knowing the actual source) but this being labelled “open source” investigation is nothing short of laughable. Note also that they do not give access to any of the raw data nor even respond to questions, after having locked their comment.

All in all there is just zero possibility to corroborate, while they make some rather wild claims (the underpants poisoning being quite creative I muss say). Maybe they have uncovered something (with a lot a “external” help), maybe it is complete BS, but If anything I am absolutely certain there is more to this !

Winter December 24, 2020 6:27 AM

@AlexT
“The mere fact that they team up should be a massive reflag.”

Especially as Der Spiegel is famous for investigative journalism. It has a very long track record of unearthing secrets. The number of errors and dupes can be counted on one hand.

I trust der Spiegel better than any American or Russian.

But if you do not believe it, you can contact all the players in this drama. Names and office addresses are all given. You can ask them personally.

@AlexT
“Then there is the material. I’m sorry but I simply don’t believe that you can buy that much data (they claim access – in this or previous investigations – to massive cellphone logs, air travel logs, border control registry, passport databases and “hidden” CCTV surveillance) for a few hundred Euros, even in Russia.”

Could this be because you simply have no idea how it is in Russia? Instead of giving us an insight into your gut feelings, you could also have given us some solid information on the situation in Russia?

Until then I stay with Bellingcat. If they made this up, the Russians would have told us so.

Winter December 24, 2020 6:31 AM

@AlexT
“Maybe they have uncovered something (with a lot a “external” help), maybe it is complete BS, but If anything I am absolutely certain there is more to this !”

The unthinkable: journalism actually works. MSM can write how things happened.

Goat December 24, 2020 7:00 AM

re:”The above story is one indeed biased.”

@Winter, this was about Snopes not about the above story, as a response to the unwarranted criticism by @xcv, I didn’t read any Snopes comment on the post. I was just criticising a pseudo-scientific website(i.e. hereistheevidence.com).

Hope I have been clear enough.

Goat December 24, 2020 7:16 AM

@Winter, now about your actual commment which has little to do with Snopes.

Freedom of morals?
Morals exist and stay morals until they are put to practice. The Freedom of practicing your morals may be restricted(Sometimes rightly so, if they are against other’s freedoms) but your morals can never be bound(but can be biased).

Let’s consider Why Do people buy into the might is right view?

The people have nothing to gain, only the oppressor(i.e. leader here) would benefit from such a philosophy. Understanding the brains of such people is beyond my Skillset, but might be useful to plot any real solutions to these problems.

One thing that I can say with certainity is that the alog-censor does contribute to extremism of all kinds…

AlexT December 24, 2020 8:34 AM

@Winter

Could this be because you simply have no idea how it is in Russia? Instead of giving us an insight into your gut feelings, you could also have given us some solid information on the situation in Russia?

As a matter of fact I do. I have been doing business in Russia when it was still called the USSR, regularly travel there, have friends and partners in all manners of places. Is it a corrupt country ? Most definitely. Is anything for sale ? Sure ! Can you get that amount of information for a few hundred Euros ? No. Most definitely no.

Again I am not saying the ultimate information is not genuine (although hardly verifiable). But its acquisition was not as described. Of that I am completely certain.

Winter December 24, 2020 9:25 AM

@goat
“Let’s consider Why Do people buy into the might is right view?”

It is a personality trait.

https://en.m.wikipedia.org/wiki/Authoritarian_personality

The authoritarian personality is a personality type characterized by extreme obedience and unquestioning respect for and submission to the authority of a person external to the self, which is realized through the oppression of subordinate people. Conceptually, the term authoritarian personality originated from the writings of Erich Fromm, and usually is applied to men and women who exhibit a strict and oppressive personality towards their subordinates.

Do the test:
https://openpsychometrics.org/tests/RWAS/

Winter December 24, 2020 9:35 AM

@goat
“Where did the amount of data trade come in from, it isn’t in the article”

Bellingcat used masses of Russian phone data to trace the movements of the agents over years.

Kot Vasja December 24, 2020 10:59 AM

My first question here is – from where did Bellingcat got those phone records? Is there any information from where and how they did got them?

Anders December 24, 2020 11:11 AM

@AlexT @ALL

In which country you reside?
Sorry, seems you don’t know about Russia NOTHING.

hxxps://www.bellingcat.com/resources/2020/12/14/navalny-fsb-methodology/

Anders December 24, 2020 11:59 AM

@AlexT @ALL

When USSR collapsed, everything went on sale.
People needed to survive, so they sold what
they could steal. Stealing from work was normal
during soviet time.

We traveled to St. Petersburg (Leningrad), to
get electronic components that was otherwise
hard or impossible to acquire back then. People
stole them from the factory and sell on the black
market. Cpu’s, memory chips etc.

There on black market you could get literally
anything if you only had money. Military stuff,
weapons etc. CD ROMs with DOS based databases were
offered openly. So this all has long, long historical background.

Winter December 24, 2020 12:14 PM

@AlexT
“Ok, if that’s the benchmark then I rest my case.”

So you give up?

Compared to AlexT as a source of information, the BBC cannot be that bad. Actually, the BBC goes to great lengths to explain how they got their information. That is more than AlexT does. So, as long as you cannot give counter information I stick with Bellingcat and the BBC.

I now have two independent sources that both say the same. You only have your gut feelings, which does not even count as a single source.

Anders December 24, 2020 1:01 PM

@AlexT @ALL

Here in Estonia also such an illegal database was sold and distributed in ’90-s.

hxxps://en.wikipedia.org/wiki/X-Road

Seek there a part than mentions “Imre Perli” and “Superdatabase”.

- December 24, 2020 3:21 PM

@ gritzko

How can we verify the story?

Hi, my name is Werner Brandes. My voice is my passport. Verify Me.

Clive Robinson December 24, 2020 3:47 PM

@ ALL,

Perhaps people need to remember that fundamentally a “market” needs just two things to exist,

1, Demand.
2, Supply.

It’s a “chicken-n-egg” situation as to which causes the other, but there is an old saying in Yorkshire UK,

“Where there’s muck, there’s brass”

Indicating that if you know what you are doing you can sell anything and make money.

But more pertinently where there is demand, then regardless of legislation or regulation that demand will be supplied if someone is prepared to pay thr asking price. Hence the reason we are currently in a pandemic.

In effect what legislation and regulation does is encorage “dirty” or “black” markets where you pay a price to a criminal and have no ability to tell what you are getting or recourse if you get harmed. Thus we have drugs cut with various poisons for vermin, bath salts, ground glass and god alone knows what else. Likewise we have bushmeat from sick or even dead animals that are easier to obtain, in some cases smoked in the fumes of what ever can be burnt, such that the rancid nature of the animal flesh and organs is hidden.

So why would anybody assume that it would be hard to get any other commodity especially information?

After all information has the advantage you can copy it and sell as many copies as you can find buyers. As long as a little care is taken the “originator/owner” of the data will not even know it’s been copied in the first place.

All you need to turn someone into a criminal is the same sort of drivers that turn people into “traitors” for their home country and spies for another nation. There are several acronyms to describe the human failings one ofvthe older ones is MICE.

In essence a sad fact of life is that given the right circumstances most people will betray anyone to put food on the table for their family or to keep a roof over their heads. So in any organisation you are almost guaranteed to find some one you can “turn to your advantage”.

But it gets worse, by far the majority of people even after training are “to trusting” thus even a friendly smile and an offer of help, can be enough to get somebodies credentials that get you in to databases you have no reason and should most definately not have access to.

It’s the world we live in, created by people who do such things without a thought, relying on their senior positions in hierarchies to get away with it. Others see it and say to thrmselves “that could be me” and so they do it, and so on down the hierarchy.

There is an old joke about politics,

“The right wing is corrupt at the top, the left wing corrupt at the bottom, which is why democracy is never going to fly.”

SpaceLifeForm December 24, 2020 8:25 PM

@ Anders, Clive

Selling stolen stuff (goods or info) for cash.

Just remembered an incident in the 90s.

A customer in Moscow just got the system.

Co-worker on site, for training.

Modem connected.

So, I dialed-up, and telnet-ed in.

I checked it out, everything was working as expected. Looked just like it had earlier before we shipped it.

About a week later, I received a report that response time was absolutely horrible. Horrible, unusable.

So, I dialed-up, and telnet-ed in.

Horribly slow. Even considering I was on dial-up and probably 9600, maybe 19200, it was almost dead at the shell.

I could feel it from 8 timezones away, it was swapping bad.

So, I typed in free, and waited.

Sure enough, half of the ram had disappeared.

And like magic, it was back the next day.

Caught the problem before the ram was sold.

long duck dong December 24, 2020 8:41 PM

@ SpaceLifeForm

So I was going to write a response.

But, before I could, I decided I’d try using no paragraphs.

This would guarantee I would receive more views.

But, before I could do this I had to have some coffee.

I like coffee and I always make it black.

So I made some coffee but when I poured it into my cup, it was green!

Now how could I have just made green coffee?

Well, I’ll tell you what, I never did find out.

But… it was delicious.

So anyway like I was saying…

M
E
R
R
Y

C
H
R
I
S
T
M
A
S

SpaceLifeForm December 24, 2020 10:25 PM

@ Clive, Anders, ALL

If you are curious about vishing, an expert reviewed this incident.

One point that I caught immediately, is always interrupt the target when they are most asleep.

Anyway, read the thread for her insights on social engineering.

hXXps://twitter.com/RachelTobac/status/1341119963650686976

Wow, a 49 min master class on vishing (phone attacking) by @navalny himself to an FSB officer involved in his own attempted nerve agent murder. Excellent work by @bellingcat.

Anders December 25, 2020 8:39 AM

@SpaceLifeForm @Clive @ALL

To pull this kind of stunt you need to know a lot about the SYSTEM. Navalny knows.

Loyalty to the leaders was something that was part of teaching through all soviet time education – little octobrists, pioneers, komsomol, party. Obeying without any question, loyalty to the bones. If you didn’t, best case scenario – you couldn’t make a career inside the SYSTEM, you were outcast. Worst case – GULAG or mental hospital for the rest of the life. But for some persons being the outcast was actually the worst. So they served literally their @$$ off and those kind of persons are very exploitable via social engineering.

But in what KGB/FSB is really master of is exploiting human weaknesses, their worst fears, driving them to the max and putting them to work for them.

KGB/FSB is very closed ecosystem. Whoever enters to this system loses their privacy and “normal” life forever. So all they know they are constantly monitored after receiving highest level security clearance. Also there’s no turning back – when you do bad things to others you know that the same things can be done to you easily if you don’t obey – accident on street, felling out from window etc etc etc. So you obey.

So putting those ingredients together you can actually use them against the SYSTEM as it was done here.

Clive Robinson December 25, 2020 12:26 PM

@ Anders,

Loyalty to the leaders was something that was part of teaching through all soviet time education – little octobrists, pioneers, komsomol, party. Obeying without any question, loyalty to the bones.

Just like most religions and cults, control of a childs mind gives compliant adults. Something Drug Pushers likewise know all about.

You get the children before they can talk, through their mothers. The men are just there to make more children and provide for them untill it is their turn to feed fresh flesh into the religion / cult.

Stalin and Co just copied the idea from others. For instance Karl Marx said,

“Religion is the sigh of the oppressed creature, the heart of a heartless world, just as it is the spirit of a spiritless situation. It is the opium of the people. The abolition of religion as the illusory happiness of the people is required for their real happiness. The demand to give up the illusion about its condition is the demand to give up a condition which needs illusions.”

Some years later after the Religion of Russia became “the party” another writer resident in England wrote two books “Animal Farm” and “1984” both describe the despotism and tyrany of such authoritarian systems as the perversion communism had become.

When Gorbachev tried to take the opiate of communism out of Russia before it killed the country. The result was like any other body going through the withdrawal process. As some will nodoubt have observed the addict has once again relapsed back into old needle in the arm habits.

The kindest thing any parent can do is ensure their child has no contact with religion or politics untill they are old enough to realise the evil they can and do hide.

There are reasons why we don’t allow people to vote untill they are 18, likewise we should not alow those under 18 to participate in religion, which realy is just an older form of political control.

Winter December 25, 2020 1:44 PM

@Clive
“The kindest thing any parent can do is ensure their child has no contact with religion or politics untill they are old enough to realise the evil they can and do hide.”

I understand your feelings in this. However, every child should find her or his position in society. To be able to do so, it should learn about every relevant aspect of its society. If religion and politics are relevant in its society, it should learn about them.

Parents can only transfer the believes they have. It is inhumane, and impossible in any halfway free society, to force parents to bring up their children in believes not shared by the parents.

The problem here is not so much in the upbringing of the children, but in the dysfunctional nature of their society.

In most countries, politics and religion are not balancing on the brink of civil war. That is the problem that had to be solved by the adults in the affected countries.

anon December 26, 2020 12:18 AM

I’ve been following Bruce’s blog for many years and have read several of his books. He maked a giant gaffe by claiming Signal had been compromised then there’s this nonsense regarding Bellingcat. I’ve posted two reasonable posts with supporting articles from excellent sources and my posts never seem to make it to the comments section. I’m done with your nonsense and your seemingly new idiocy. No more recommendations to colleagues, friends or family. Shame on you for spreading easily verified nonsens.

Goat December 26, 2020 9:56 AM

“it’d be hilarious.”, It was meant to be.

The heat of the moment can sometimes make one do irrational and stupid behaviour.

I would endavour to be arguing in good faith of a conversation and not acting in anyway that personally hurts someone, as I also expect debate on statements and not abuses on people 🙁

Wesley Parish December 27, 2020 1:19 AM

Getting back to the story, I got the feeling that Putin and the FSB have just selected the next President of the Russian Federation, Alexey Navalny.

I also realized that at this point in the story, in the Russian folkstories I read as a kid, Ilya Myurometz would take his bow, go around to all the churches, and shoot the gold crosses off their roofs in lieu of unpaid wages, and let the rest of his fellow citizens get drunk on the proceeds of the rest. It can be risky to infuriate a bogatyr.

Clive Robinson December 27, 2020 7:53 PM

@ rrd,

And no one’s opinion on the subject is left

Well you could have been honest and said the only person disagreeing with it was you…

For reasons you could not explain and only conjour up entirely false reasoning, and false accusations based on your idiotic and entirely incorrect assumptions.

If you want to disagree on that remember I can quote you word for word if you like, including your spewing of profanity like a drunken idiot when it had been shown your reasoning was entirely false…

JonKnowsNothing December 28, 2020 6:41 PM

@All

re: Trolls

A troll is a being in Scandinavian folklore, including Norse mythology. In Old Norse sources, beings described as trolls dwell in isolated rocks, mountains, or caves, live together in small family units, and are rarely helpful to human beings.

Personally, I think it’s an AI Bot practicing for the next Turing Test. Giving it some spin around the block is somewhat entertaining. It is certainly working on the part about being “rarely helpful to human beings”. Someone loaded the test deck with a bunch of religious tracts, and being AI, it has mangled most of that into the biased formats promoted by such AI systems.

rrd December 28, 2020 9:39 PM

Preventing in-breeding is good for human societies, as it helps keep the genetic diversity of the population high, which makes it more robust.

@ JonKnowsNothing

“If the concept of God has any validity or any use, it can only be to make us larger, freer, and more loving.”
— James Baldwin (The Great)

People can talk about ideas, events or people. As such:

This should not be about me, but I am involved in this.

This should not be about events I have experienced in my life, but they have helped form and inform me.

This should only be about ideas, and their brutally honest evaluation and comparison, and proper acceptance or rejection, to determine “great and noble” undertakings to make this world a better place to live, for one and all. CAVEAT: Unless they’re evil bastards, that is. There is no peace with their lot rampaging around in all their amorality and wanton destruction driven by their selfish {ideals, attitudes, and behaviors}.

Winter December 29, 2020 4:52 AM

@Jon
“Personally, I think it’s an AI Bot practicing for the next Turing Test.”

Sounds plausible. AIs seem to have become very good at simulating monomaniac obsessed trolls.

All you need for an AI is enormous amounts of data. The internet is awash with religious nonsense from obsessed believers battling each other. So that should not be a problem.

The question that remains is, why testing it out here?

rrd December 29, 2020 6:22 AM

@ Winter

Quotes are yours:

Sounds plausible. AIs seem to have become very good at simulating monomaniac obsessed trolls.

I love it. But I’m multimoniacal, fellow human.

And trolls don’t get the last word. Trolls just take pot-shots, are called out for what they are, and then are defeated utterly.

The internet is awash with religious nonsense from obsessed believers battling each other.

Obsessed with love?
Obsessed with global happiness?
Obsessed with ending all persecutions?
Obsessed with ending hateful ignorance?

Guilty as charged. Except for the “nonsense” part.

“What’s wrong with peace, love, and understanding?”
— Elvis Costello

The question that remains is, why testing it out here?

Writing practice. Debate practice. Practice in dealing with overly confident buffoons. And because the Spirit has Its own dictates, guiding us to share our love where and when It Wills.

Thanks for your essential contribution to this conversation. I especially appreciate how you inadvertently helped proved my point while being unable to later defend your leader, who has fallen silent. I am also mildly disappointed that you are treating your liberator with disdain.

And now you try to explain away your collective inability to defeat the truth of my logic and understanding by pretending that I’m an AI. Well, for many if not most, the fantasies of their imagination, however convoluted and implausible, are easier than accepting the truth.

Everyone has the right to choose to believe whatever the hell they want. I suggest you choose the truth, the objective truth. Regardless, I wish you all peace and happiness.

-=-=-
Note that the level of AI tech you suggest can simply not ever happen. No matter how large the computers, they’re all just word rearrangers in the spirit of Eliza, though now they do a lot of statistical heavy lifting, but that’s just analysis, not understanding. Understanding will ever be beyond them; that’s the sole provenance of human wetware.

Unfortunately, proper understanding remains beyond many of my fellow human beings as well, which is well within their rights yet debilitating to their spiritual growth towards our ability to evolve our world society beyond our petty, destructive conflicts. And that’s our collective problem in a nutshell: people are mostly just looking out for themselves or their fellow pack members, instead of evaluating our “progress” in terms of how we affect our ecosystems and all our fellow societies. Oh, the Id/Ego/Soul is a nasty beast when left unchallenged, and — far worse still — most people tend to go further and accentuate its nasty tendencies.

Obviously So December 29, 2020 7:59 AM

@Obviously:

“We see where troll feeding leads.”

Unfortunately not “feeding” makes this troll change food source.

And in this case has clearly stated it has no intention of stopping with,

“And trolls don’t get the last word.”

But something else about it’s behaviour that should be noted, bessides trying to bully others.

Note it assumes that the family name “Schneier” means that Bruce is either Jewish or sympathetic to Jewish culture and customs therefor can be manipulated by them. Thus the troll frames a pointless argument point around customs and practices of Jewish law.

Such an obvious tactic is embarrassing to watch and in reality will probably backfire.

I feel sorry for both @Bruce and @Moderator, because it’s obviousness will be observed by all thus @Bruce and @Moderators impartiality will be called into question by those with their own troll like behaviours as,we see already from time to time. So if they let it go, it will cause problems now. but if they hammer down on the troll it will cause them future problems from other trolls as well. So damed if they do and damed if they don’t, not a nice place to be, and it looks like the troll is not going to stop making it worse for them.

@rrd (The troll in question):

The things you mention are actually jewish law “comming of age” rituals and similar thus they are by definition not children any more. So it’s exactly the same reason children are not alowed to vote untill they have reached a legal age…

https://en.wikipedia.org/wiki/Bar_and_bat_mitzvah

A point @xcv has made to you with,

“It’s a Yiddish term for something that is by no means exclusively Jewish.”

So you might want to “face-palm” or just hang your head, as you have actually provided an example in oppostion to your own argument…

An argument by the way you could only have started by quite deliberatly “taking out of context” -as pointed out by numerous others- a statment made by “Clive Robinson” of,

“There are reasons why we don’t allow people to vote untill they are 18, likewise we should not alow those under 18 to participate in religion, which realy is just an older form of political control.”

You might want to look up the age the US thinks you cease to be regarded as a child in law.

Oh and just for “shits and giggles” another example to “nail down the lid” on what many more now see as your quite deliberate “bad faith” argument,

In Western Christianity there is the “Confirmation” this practice is usually followed when adults are baptized, ordinarily by a bishop, and only when no longer considered a child. That is the child has reached “the age of reason” usually some time towards the end of adolescence. As I know Catholics who practice teen-aged confirmation, see the practice as very much as a “coming of age” or “available for marriage” rite/ritual (thus teenage pregnancy which some would regard as child explotation). Also in times past Confirmation had both legal and political implications not just under “Church Law” but “Civil Law” as handed down by Kings and occasionaly Queens and in these days despots, tyrants, dictators and other politicians, to exert yet another control on the populous. After all why do you think the founding fathers insisted on a seperation between Church and State?

But importantly those that are not “Confirmed” are “not alowed to participate” in the very basis of christian religious practices of partaking of the wine and bread that represent the blood and the body of Christ that washes away all sins (The Eucharist) likewise “Confession”. Because children are pressumed to be free of the responsability of thought thus original sin, that came about through the writings of Augustine of Hippo and earlier philosophers and theologians,

https://www.bbc.co.uk/bitesize/guides/znqck2p/revision/4

So your knowledge on religion is looking to be quite parochial… Ammusingly a term you might not understand because “you are parochial”, it comes from the notion of a religious “parish” being small and usually inwards focused, so from Wikipedia,

“Parochialism is the state of mind, whereby one focuses on small sections of an issue rather than considering its wider context. More generally, it consists of being narrow in scope. In that respect, it is a synonym of “provincialism”. It may, particularly when used pejoratively, be contrasted to universalism. The term insularity (related to an island) may be similarly used.”

https://en.m.wikipedia.org/wiki/Parochialism

The immportant point for you to note is,

“contrasted to universalism”

In your outpourings that are trite at best and devoid of practical meaning you claim “universalism” that you very clearly do not possess with,

“And because the Spirit has Its own dictates, guiding us to share our love where and when It Wills.”

But further fun is to be had,

“But I’m multimoniacal”

Multimoniacal is an interesting word usage. Do you know how often it comes up in an Internet search including all those extensive US English dictionaries?

I won’t spoil the fun, I’ll let others try and find it and draw their own conclusions.

Oh and if I remember correctly “Clive Robinson” has mentioned on this blog before he has a DD (Doctorate of Divinity) that he does not use, something you might want to consider.

Therefore I for one see rather more than the smell of singed sock from powder burns in your vicinity in the near future, so a blessing much in your style, but first to quote you,

“trolls don’t get the last word. Trolls just take pot-shots, are called out for what they are, and then are defeated utterly.”

So onto the blessing,

“May you be a happy looser”.

rrd December 29, 2020 8:11 AM

The frontal lobes of human beings don’t finish maturing until 25 years old, especially in the males.

@ Obviously So

You said (brackets mine) :

But something else about [it’s] [behaviour] that should be noted, [bessides] trying to [bully others].

{bell rings four times}

mm-hmm

JonKnowsNothing December 29, 2020 9:31 AM

@Winter

re: why test an AI Bot here?

Oh, loads of reasons.

1, We don’t know that they are not testing it elsewhere with a different filter settings.

2, This is a no-captcha type posting system. So dump a load and hit the next target.
I see this in MMORPG games too. Many games have a trial or free-to-play option, so the spam systems register a bunch and then hit fast before they are locked out. Even with a delay-to-post timer, with multiple accounts they can swing between accounts and server-shards before the door is slammed.

3, We are a good testing site. If the AI-Bot ever actually made sense beyond stupid, our August-Selves would respond in kind. That would mean it would win the next Turing Test event – probably at high school level now.

4, The AI test deck isn’t getting any brighter, because of how AI-ML works, the data levels decrease to smaller and smaller subsets, in an attempt at refinement.
If you compare earlier dumploads to the more recent dumploads, it’s far below previous levels of content stringing. Indicating the refinement winnowing process.

5, The AI test deck is repetitive. It probably wasn’t designed with too much to begin with. A dumpster load of religious material easily obtained electronically. Another dumpster load of quotations, prolly scrapped from wikiquote or a like site. When the parsing rules fall thru the response sieve, if it doesn’t find a ranked hot-topic-key-word it falls into quotations.
When a human makes a reference, they normally connect it to a specific topic. AI does not work with indirect references so picks something from the pot.

Goat December 29, 2020 9:48 AM

@JonKnowsNothing +1

It is quite trivial to get the comment post url and drop payload without any browser automation through a simple POST request and web scraping.

But I think its a human probably from India, who acts like a robot enslaved to his own assumptions.

1&1~=Umm December 29, 2020 11:27 AM

@Winter:

“why test an AI Bot here?”

Am assuming AI ~= Antithetical Inteligence…

Speaking of which

@Obviously:

“Multimoniacal is an interesting word usage.”

It’s not coming up on my search radar, is it even a real word?

The nearest I get for a root word is from,

https://www.merriam-webster.com/dictionary/maniacal

“Maniacal definition is – affected with or suggestive of madness.”

The root word of which is maniac

“The noun maniac is almost always used to describe people who do nutty things—serial killers, insane people on the street…”

So would multi-maniacal be multiple mad personalities in a single person?

Not so much a “nut” singluar but the whole “nut tree” thus nuts plural.

rrd December 29, 2020 12:05 PM

I made a spelling error.
And gaslighting appears.
Patterns repeating again.

But, the 1990 album of

Mario Bauzá & His Afro-Cuban Jazz Orchestra

named

My Time Is Now

plays.

I cannot be unhappy right now.

New Music. New Year. New President. New possibilities.

No one’s musical education is complete.

{musical note emoji} Impossible…

Obviously December 29, 2020 2:29 PM

@Obviously So

It has seemed to me that when not addressed, he goes silent for a time. When asked about something he said, or criticized, he goes on offense.

Not responding would minimize his posts, and most importantly, save posters a lot of time coming up with arguments that will never be understood, and will only lead to more arguments.

rrd December 29, 2020 4:02 PM

[Narrator]: After a delightful and quite dignified nap, the protagonist awakes refreshed to find that nothing has changed. The Light of Truth has been shown in a dark place, his weary days’ work amply rewarded from within.

THE END

-=-=-
@ Obviously Clive

When asked about something he said, or criticized, he goes on offense.

Pathetic.

And people are defending this?

[Narrator]: Well, Trump’s poor supporters are still defending that asshat.

Good point, Narrator.

Obviously So December 29, 2020 4:41 PM

@Obviously:

“When asked about something he said, or criticized, he goes on offense.”

That would be easy to ignore if it were not for the fact many of his criticisms are actually personal attacks, using unfounded accusations in a quite obvious attack on the the various individuals to denigrate them in other readers eyes.

For instance his accusations of being Fascist or Fascist sympathisers or antisemetic or other “dog whistle” type attacks just on this page alone. If the @moderator diligently deleated them then it would not be as bad but some have stayed up in the past for more than a week, which is harmfull to the innocent individual targeted.

As can be seen he thinks this has in effect made him invincible thus has emboldened him to worse accusations.

What his actual intentions are is unclear, but “collecting trophy scalps” appears to be very much part of it.

Whilst he very occasionaly does make a vaguely security related post by far the majority are not. This is still against the spirit of the posting rules and others have been banned for considerably less in the past

On balance if he is ignored I do not think he will stop he will just move on to attacking other frequent posters, as can be seen on this thread. Apparently using “a fling enough mud and some will stick” attack methodology.

This tends to suggest the real target is this blog or the blogs host, and lets face it there are enough “right wing” types that come and make attacks against this blogs host to say that is a credible point.

He claims all sorts of religious mumbo-jumbo but actually has no real knowledge and is either truly ignorant or to lazy to learn enough to play a good bigot.

Further he has no debating skills and is very much ignorant of basic terms and gambits, suggesting again no basic knowledge or ability and so regularly shoots himself in the foot you would think he had no toes left by now.

For old hands his behaviour is reminiscent of “he who should not be named” who was very much an outsider pretending to be an insider and doing it so badly it was embarrassing to all.

Any way others have made analyses of his mentality etc so I’m not going to dogpile any further.

WmG December 29, 2020 5:17 PM

onKnowsNothing @Obviously So

Yes, good points. Some of my comments which served only to call attention to logical weaknesses in his posts were met with the most idiotic profanity-filled attacks and then deleted. And so it’s easy to see how one given to feelings of grandiosity will feel that license has been granted to him.

In re: the AI question:
In a comment that was rather quickly deleted, not sure why—and I’m sorry if I overstepped boundaries— I said that the troll in question is functionally a bot. My reasoning is based on having had the personal experience of knowing a guy who seemed to be developing “issues” that over a period of years kept getting worse.

As time went on, that guy began to sound just like the troll under consideration here now sounds. Grandiosity (e.g. the the Instant Expert status achieved after half-reading a magazine article) came to be as frequently on display as surprising ignorance, which he combined with poor impulse control in verbal output and bullying behavior. It was in time clear that he would not be able to pass a Turing Test, so fixated had he become on certain ideas and rage triggers. It was a sad story, the guy lost his marriage, tore his family apart, lost nearly all his friends.

The considerations for security are real. The divisional director who had hired the guy never forgot the “worst decision” of his career. The degradation of organizational function caused by that one guy would have been a worthy study. (They were finally able to put him out to pasture.)

And here we have a troll who has wasted many, many hours of community members’ time with his antics which aim, he says, at improving his writing and debating skills. And just yesterday on the Friday Squid, in a comment that seems to have been deleted, someone was helping him with some high school biology (the response remains):

https://www.schneier.com/blog/archives/2020/12/friday-squid-blogging-small-giant-squid-washes-ashore-in-japan.html/#comment-361702

The noise he produces degrades the quality of this blog. And gives a poor impression to everyone who visits.

rrd December 29, 2020 8:11 PM

@ WmG

You said:

The noise he produces degrades the quality of this blog. And gives a poor impression to everyone who visits.

Well, you say this as an anti-religious zealot (Clive) — who openly admits that some powerful “we” should be able to end the Jewish practice of the Bar/Bat Mitzvah — is perfectly with you.

You are trying to defend the indefensible. And you folks keep creeping out of the woodwork to take your meaningless potshots.

James Baldwin stated it so very well :

There are so many ways of being despicable it quite makes one’s head spin. But the way to be really despicable is to be contemptuous of other people’s pain.

And you are indifferent to the pain Clive and his royal “we” would inflict upon literally billions of people.

Anyone unrepentantly expressing the views he has has said all they need to say about themselves. And you are saying all you need to say about yourself here, as well.

I said:

I don’t believe that I am qualified to set the terms under which other people raise their kids, whether they are Hindi, atheist, Sikh, agnostic, Jewish, or other.

While CLive said:

There are reasons why we don’t allow people to vote untill they are 18, likewise we should not alow those under 18 to participate in religion, which realy is just an older form of political control.

I can only imagine, but it seems likely that Bruce Schneier’s being a fellow at Harvard University may have put him into close contact with some very fine folks of not just Jewish parentage, but Jewish heritage, which is — at its best — as noble a heritage as exists on Earth.

So you’re fine with Clive’s idea? Gaslighting me is the surest way to demonstrate your dispicable allegience.

Thanks again for joining the group so eager to tell us who they are.

Another James Baldwin quote:

“Incontestably, alas, most people are not, in action, worth very much; and yet, every human being is an unprecedented miracle. One tries to treat them as the miracles they are, while trying to protect oneself against the disasters they’ve become.”

rrd December 30, 2020 4:55 PM

Someone asked:

Why don’t you answer that question?

Well, I did.

And I correctly predicted that Clive wouldn’t answer my question of him.

But he did. He absolutely did. As clear as a bell. But not in words, only in his choosing to continue to ignore it.

-=-=-
A DD who believes God is a figment of the human imagination? Absurd.

Well, I’m not surprised, but, regardless, money can’t buy dignity, honor, honesty, or Wisdom.

Saying one has those qualities is a helluva lot easier than actually doing the hard graft of achieving them.

It helps to know that we are literally figments of God’s imagination, but no one in this crowd wants those pearls.

Thanks for the inspiration and motivation, all.

[AND SCENE]

rrd January 1, 2021 3:00 PM

Thank you very little for wafting the smell back up in front of everyone after a few days of inactivity.

While Clive’s perspective certainly does stink, I suggest the truth of his perfidy to humanity, commenting tactics, and hypocrisies remain here for all to see. It really is a testament to modern inhumanity.

Now I wonder who would wait a few days and then request a clean-up? Two of the three factors of criminal investigative work are motive and opportunity, neh?

Trump was known for calling into radio shows as “John Barron”. Such moves would likely be even easier on Bruce’s blog, yet probably provide more information than just handle to use in analyzing the probability of whether or not a given set of comments come from the same computer.

Obvious, indeed.

Obvious is it not? January 1, 2021 4:25 PM

rrd

“Obvious, indeed.”

Yup and you walked right into the trap didn’t you.

You’ve just got to have the last word like some old nag of a scould as mentioned above.

So everybody watch for Mr Predictable vomiting again.

Leave a comment

Login

Allowed HTML <a href="URL"> • <em> <cite> <i> • <strong> <b> • <sub> <sup> • <ul> <ol> <li> • <blockquote> <pre> Markdown Extra syntax via https://michelf.ca/projects/php-markdown/extra/

Sidebar photo of Bruce Schneier by Joe MacInnis.