10/25/12

The deep Dark Web -Book Release

gATO hApPy

AVAILABLE @ AMAZON - http://www.amazon.com/dp/B009VN40DU

AVAILABLE @SmashWords website  @http://www.smashwords.com/books/view/247146

I learned that I hate WORD: – but it’s the general format for publishing  - text boxes- get imbedded and you can’t format to EPUB or .mobi or anything – solution after going lOcO gAtO - was copy and paste into txt editor – save as RTF then copy paste back into a new WORD document and then reformat everything from scratch – and copy over the pictures – as you can tell I had fun-..-ugh mEoW F-F-F-F as much fun as a hairball but if it get’s the message out “FREEDOM OF SPEECH IN CYBERSPACE” then we done our job, anyway I hope you read it - Thank you Pierluigi a best friend a security gAtO ever had - gATO oUt

This Book covers the main aspects of the fabulous and dangerous world of -“The Deep Dark Web” . We are just two cyber specialists Pierluigi Paganini & Richard -gAtO- Amores, with one passion and two souls we wanted to explain the inner working of the deep dark web. We have had a long collaboration in this efforts to document our findings we made infiltrations into the dark places inaccessible to many to give a you the reader a clear vision on the major mystery of the dark hidden web that exist today in the Tor Onion network..

The Web, the Internet, mobile cell devices and social networking has become commonly used words that identify technological components of daily Internet user’s experience in the cyberspace. But how much do we really know about cyberspace? Very, very little, Google / Yahoo / Bing only show us 20% of the Internet the other 80% is hidden to the average user unless you know were to look.

The other 80% of the Internet is what this book is about the “Deep Dark Web”, three words with millions of interpretations, mysterious place on the web, the representation of the hell in the cyberspace but also the last opportunity to preserve freedom of expression from censorship. Authorities and corporation try to discourage the use of this untapped space because they don’t control it. We the people of the free world control this network of Tor -Onion Routers by volunteer around the world.

The Deep Dark Web seems to be full of crooks and cyber criminals, it is the hacker’s paradise, where there are no rule, no law, no identity in what is considered the reign of anonymity, but this is also the reason why many persecuted find refuge and have the opportunity to shout to the world their inconvenient truths.

The Deep Dark Web is a crowded space with no references but in reality it is a mine of information unimaginable, a labyrinth of knowledge in the book we will try to take you by the hand to avoid the traps and pitfalls hopefully illuminating your path in the dark.

Cybercrime, hacktivism, intelligence, cyber warfare are all pieces of this complex puzzle in which we will try to make order, don’t forget that the Deep Dark Web has unbelievable opportunity for business and governments, it represents the largest on-line market where it is possible to sell and acquire everything, and dear reader where there is $money$  you will find also banking, financial speculators and many other sharks.

Do you believe that making  money in Deep Web is just a criminal prerogative? Wrong, the authors show you how things works in the hidden economy and which are the future perspectives of is digital currency, the Bitcoin.

This manuscript proposes both faces of the subject, it illustrates the risks but also legitimate use of anonymizing networks such as TOR adopted by journalist to send file reports before governments agents censored his work .

Here are some question we may answers to:

How many person know about the cyber criminals and their ecosystem in the deep web? 

How many have provided information on the financial systems behind the “dirty affairs”? 

How the law enforcement and governments use Dark Web?

Let’s hold your breath and start the trip in the abyss of knowledge to find answers to the above questions. We hope that with this book you can learn something new about – The Deep Dark Web.

07/5/12

The Deep Dark Web -Book

gAtO sAy -mEoW you all- we have a new book coming out soon “The Deep Dark Web” and just wanted to write this as the foreword for the book, I thought it was interesting …//looking for peer review of book…write us

This book is to inform you about “The Deep Dark Web”. We hear that it’s a bad place full of crooks and hackers, but it is more a place were you have total anonymity as an online-user and yes there are ugly places in the dark web but it’s a small part of it. What it really is all about it’s freedom of expression, freedom of speech worldwide, supported by “us/we” the users of the network. It’s not controlled by any government, but blocked by a few like Syria, Iran, Ethiopia, China to name a few governments that want to deny their own people free access to information, to speak freely about their grievances and unite to tear down there walls of oppression.

Pierluigi and I (gAtO) share a passion for cyber security we write different blogs Pierluigi has http://securityaffairs.co/wordpress/ and my site is uscyberlabs.com . We also write at other blogs and print media. We did’nt know it at the time but, we were writing cyber history as the 2011- 2012 cyber explosion took off we were at ground zero writing about Stuxnet, HBGrays, the LulzPirates, Anonymous but the Arab Spring was an awaking :

The recent revolution in Egypt that ended the autocratic presidency of Hosni Mubarak was a modern example of successful nonviolent resistance. Social Media technologies provided a useful tool for the young activist to orchestrate this revolution. However the repressive Mubarak regime prosecuted many activists and censored a number of websites. This made their activities precarious, making it necessary for activists to hide their identity on the Internet. The anonymity software Tor was a tool used by some bloggers, journalists and online activists to protect their identity and to practice free speech.

Today we have lot’s of anonymity communication tools I2P, Freenet, Gnunet and Tor to name a few. Why did the TorProject.org Tor-.onion network become the facto application to get free, private, anonymized Internet access. My conclusion is it’s humble beginnings with “Naval Research Project & DARPA (Defense Advanced Research Project Agency) ” sponsored, maybe you heard of DARPA they kinda created the Internet a long time ago. The government wanted to have a communication secure media that would piggy-bak on the establish Internet. From my point of view when they saw how good this worked the government used it to allow it’s agents to quietly use the network for CIA covert operations (just to name a few alphabet soup government agencies that use it). For example a branch of the U.S. Navy uses Tor for open source intelligence gathering, and one of its teams used Tor while deployed in the Middle East recently. Law enforcement uses Tor for visiting or surveilling web sites without leaving government IP addresses in their web logs, and for security during sting operations.

Journalist got a hold of this tool and they too were able to file reports before governments agents censored their interviews and film footage. The EFF (Electronic Frontier Foundation) got a hold of the Tor-networks and promoted it to maintaining civil liberties online. When the common business executive visited a foreign country (like China know to monitor foreigners Internet access) they now had a way to securely connect to their corporate HQ data-center without being monitored and giving away IP (Intellectual Properties). The Tor-Network became to good and the bad guy’s moved in to keep their illegal business safer from the law. The Internet Cyber-criminal has used the claer-web since the start so of course they went over to the Tor-.onion network because it works if you use it right and keeps you anonymous online.

With all this happening and the “Year of the Hack 2011” you can see why security geeks like Pierluigi and I became intrigued with this subject and we teamed up to write this manuscript hoping to answer some of the questions our friends, and peers were asking us about this mysterious hidden world call the deep dark web. We outlined a table of content and started to write about it in our blogs and the story unfolds from here to you. We hope to educate you on how this network works without too much geek talk (ok just a little). We cover the cyber criminals and their ecosystem we cover the financial currency (bitCoins) that is replacing fiat currencies all over the world during this unstable financial times. We tried to cover all the good , the bad and the ugly of the .onion network. We hope it will answer some of your questions but I am sure that more question will come up so feel free to come to our websites and give us a shout and ask your questions about the deep dark web…. - gAtO oUT 

10/20/11

Anonymous Is Interested In PLC’s & SCADA?

From Infosce Island this great article came up this is gAtOmAlO’s 2 cents on it.

https://www.infosecisland.com/blogview/17479-Anonymous-SCADA-Lulz-DHS-and-Motivations.html

Anonymous has shown that it’s MO is just trash and dump to brag & “the lulz”, nothing more nothing less. That anyone can attack a SCADA and say it’s Anon I just don’t think it would work. As their arrest have shown these are mostly kiddies except for the leaders Sabu (later covered). Yes an attack on SCADA can be tried by any bad Nation actor but if caught it would set a precedence for what kind of attacks are OK for any Nation to try. The United States weighed launching a cyber-attack to disrupt Libyan air defenses before the start of an air campaign but they stopped because it would set a level of expectation in any forward coming battle.

Anon -or- Occupy Wall Street - gAtO -sMiLe

As to skills from the Anon’s YES they can. These kiddies are focused and they have no lives except online. Just like if you give a kid a guitar they will play it while in the toilet until they get that riff or note. Now some of the Anon are adults and these are the more astute in who, what & were to attack but the basic skill set is there. If you can learn Phython, ruby -Rails you can learn Step7 commands.

As to Sabu I really think he was a spook or a professional. How you can get that level of talent in a crewz and still command respect from a bunch of young people that took talent and he is still free.

That someone (bad actors) may try it, possible but I think just like you said it’s not there MO to do this. It would be bad for the movement and if someone does attack and then blames them. Well I think that the Anon’s will get really mad and do some damage. Some of these kiddies as I called them are growing up and they understand that maybe they did something right or good. Maybe they just think that they can make a difference. I know that Security people are being hired left and right because of this so for some it good. Remember FEAR will get you budget $$$ that may be why DHS is doing it.

 

10/14/11

Cyberspace the Class-Warfare Equalizer

Cyberspace is the Class-Warfare Equalizer | Occupy Wall Street Online Movement 

Occupy Wall Street (OWS), The Arab Spring these are the events that cyberspace brings today via computers, smart-phones and game consoles. I read “If you want to change the world start with yourself” and as a society we have changed or been force to change because of our technology.

To the Occupy Wall Street movement, the establishment (the 1%) say -There all anarchist, no direction.

They are a just a bunch of smelly (patchoulihippies, a bunch of English majors that have nothing better to do, Startbuck-sipping, Levi-clad, I-Phone clutching protesters denouncing Corporate America.

Smelly Hippies -Woz and Steve -aPpLe aNyOnE

They should just get a job and stop this nonsense. The 1%’er don’t realize that if they had a job, they wouldn’t be protesting. If they had a job that payed a living wage, they wouldn’t be protesting. This is only the beginning of the new revolution(same old) in cyberspace.

Organizations see insider threat everywhere – I wonder why? 

2011 will be know for the year that hacktivist were born. Remember (in the old days) everyone saying W W W. “Dub,Dub,Dub_xxx . com” (1990) the same year that “The Simpson -Bart- Homer, Marge, Lisa” started. I used “xxx-dot-com” because the porn industry really began the revolution. Some may argue but distribution of naked pictures was the first business model, for a web application, and it worked and it made lot’s of $$$ money.

Next came the Internet, I remember my buddy took a new job in Seattle, with what was called push-technology (1995) the next killer web-app. What a concept instead of people looking for websites to see what was new-(more naked pictures), we developed a way to “push information” out to people. As more and more information was connected to the internet, it brought many new changes like, “searching for information”. Microsoft said at the time “no one can make money just  by searching for information”… old Billy.G boy ate his words a few years back when Yahoo and Google broke the trend and made money. Google is now a verb and a noun, Billy.G is just rich.

Let’s get back to cyberspace, the 1% also said, These indignant indolence saddled with their $50,000 student loans and English degrees.

Their lack of gainful employment is rooted in the malice of the millionaires, to the applause of Democrats suffering acute Tea Party envy.

Republicans-Democrats, here we have it folks, the 1%-ers finally see it, and their scared. The millionaires senators and congressman cannot only help their millionaire friends exclusively any more. The people finally get it. In cyberspace we the people have the power to change things. Look at President Obama -I voted for him, but he is a disappointment to most liberals. Why? Either he has joined the club or it’s so bad, there is nothing we can do. Have the rich corrupted the system so bad, that to fix America, America will all fall apart. I think not. Cyberspace is here to stay and save the day- just like Mighty Mouse.

uscyber labs - Cyberspace controls kinetic devices

Cyberspace controls kinetic devices

This is what cyberspace is all about. Giving freedom of speech all over the world to the people. That’s very powerful, the ones in power (1%) know it. That’s why they are screaming so loud now. It has given the people the chance to take an active part in democracy, in decency, in caring about and helping each other -one American to another American. Cyberspace has made freedom a world wide thing and Occupy Wall Street is the new movement in cyberspace that will change the world for the better, I hope.

I  believe that Americans, cyberspace and the “Occupy Wall Street movement” all over the country show’s what “the people” can do with cyberspace for a better America and world. Cyberspace is the Class-Warfare Equalizer

 

08/11/11

London Riot’s Cyberspace and Secure-Encrypted Blackberry Technology

This is were we Net-Citizens need concern. Cyberspace must be kept a free speech area for everyone. Just like in the Arab Spring people with access to cyberspace are communicating. I don’t agree with the riot’s looting and burning but, we need to get the injustice of the shooting out. The sins of the few taint the truth of the shooting and the real victims.

[2] Following a peaceful march on 6 August 2011 in relation to the police response to the fatal shooting of Mark Duggan by Metropolitan Police Service firearms officers on 4 August 2011, a riot began in TottenhamNorth London. In the following days, rioting spread to several London boroughs and districts and eventually to some other areas of England, with the most severe disturbances outside London occurring in Bristol and cities in the Midlands and North West of England. Related localised outbreaks also occurred in many smaller towns and cities in England.


As a security researcher I look at the social and the political ramifications of cyberspace and see every time people are using technology, the government starts to scream their bloody heads of. Calling the users of the technology hackers and thugs when it’s a fact that “The News Corp” (the real cyber criminals) The Sun just posted better than expected revenue because they are legal, but with the help of the police, they hacked dead people’s phones and made millions selling papers from the hacks. – That’s the sad news about technology.

“[1] According to Godwin, as riots broke out in 22 of London’s 32 boroughs last Monday and threatened to overwhelm police officers, he made the decision to begin eavesdropping and acting on encrypted BlackBerry Messenger (BBM) communications. Godwin said that by using BlackBerry smartphones seized by police, detectives were able to “break into” BBM and gain “live time monitoring,” according to the Guardian. As a result, police officers were able to secure locations before rioting broke out, as well as proactively shut down stores and businesses in areas that faced looting. Police were also monitoring Twitter and Facebook, and Godwin’s testimony suggested that police may have used confiscated BlackBerry smartphones to gain access to private Twitter feeds.“ 


Update London http://www.bbc.co.uk/news/technology-14442203    Date – 8/8/2011

A number of politicians, media commentators and members of the police force have suggested that Twitter and BlackBerry Messenger, in particular, had a role to play.Undoubtedly, some of those involved chose to chronicle their exploits live – from the midst of the action – using mobile phones.

Is technology to blame for the London riots? by. Iain Mackenzie -BBC

A few were apparently even foolish enough to upload pictures of themselves posing proudly with their looted haul.Others offered suggestions for where might be good to attack next, leading the Met’s deputy assistant commissioner, Steve Kavanagh to say he would consider arresting Twitter users who appeared to incite violence.But some experts fear the extent to which technology is to blame may have been overstated.Misquoted

In its coverage, the Daily Mail quoted one tweeter, AshleysAR as follows: “Ashley AR’ tweeted: ‘I hear Tottenham’s going coco-bananas right now. Watch me roll.” However, AshleysAR’s full, unedited quote on Twitter reads: “I hear Tottenham’s going coco-bananas right now. Watch me roll up with a spud gun :| ”.

Suddenly the tone of the message becomes markedly less sinister. Ashley later threatens to join in with a water pistol.

Despite the claim of Tottenham MP David Lammy that the riots were “organised on Twitter”, there is little evidence of their orchestration on the site’s public feeds.

Looking back through Saturday night’s postings, DanielNothing’s stream offers some promise of substantiating the theory with his comment: “Heading to Tottenham to join the riot! who’s with me? #ANARCHY”.

But it is followed soon after by: “Hang on, that last tweet should’ve read ‘Curling up on the sofa with an Avengers DVD and my missus, who’s with me?’ What a klutz I am!”

BlackBerry’s BBM requires users authenticate their contacts with a PIN

Buildings burn in Tottenham High Road in London Aug. 6, 2011

Another user – Official Grinz – appears to have been the first person to tweet the words “Westfield riot”, referring to the west London shopping centre. Although his message seems to be tongue in cheek and there is nothing to suggest that he was more than observer, commenting on events as they unfolded on television.

The subject of a Westfield riot became widely discussed, but ultimately failed to materialise in the real world.

So why is the ratio of apparent incitement to action so low?

Freddie Benjamin, a research manager at Mobile Youth, believes that much of the online noise is just that.

“Once someone starts posting on a BBM group or Twitter, a lot of young people try to follow the trend,” he told BBC News.

“They might not join the actual event, but they might talk about it or use the same hashtag which makes it sound like there is a lot more volume.”

Such postings build what Mr Benjamin refers to as “social currency”, elevating the messenger’s sense of belonging to a group.

Private business

Aaron Biber, 89, Assesses the damage to his Barber Shop Tottenhan High Road Aug. 7, 2011

Away from Twitter’s very visible feeds, there are perhaps more credible reports that rioters were using private communication systems to encourage others to join the disorder.

Following Saturday’s trouble in Tottenham, a number of BlackBerry users reported receiving instant messages that suggested future riot locations.

BlackBerry’s BBM system is known to be the preferred means of communication among many younger people.

Users are invited to join each other’s contacts list using a unique PIN, although once they have done so, messages can be distributed to large groups.

BBM is both private and secure, partly due to the phones’ roots as business communication devices.

For that reason it is hard to evaluate how much information was coming out of the riots or how many people were suggesting alternative targets.

But despite the closed nature of BlackBerry Messenger, police may still have a chance to examine some of the communications that took place.

Research in Motion, which makes Blackberry phones, issued a statement in which it promised to work with the authorities.

It pointed out that, like other telecoms companies, it complies with the Regulation of Investigatory Powers Act (RIPA) which allows law enforcement to gain access to private messages when they relate to the commission of a crime.

Recruiting tool

What will concern investigators most is the extent to which recipients acted on any messages sent out.

Dr Chris Greer, a senior lecturer in sociology and criminology at London’s City University believes that smartphones will have aided those involved, but are unlikely to have persuaded reluctant recruits to join the rioting.

“I don’t think it is having any impact on the motivation to protest in the first place,” he said.

“But once people have mobilised themselves and decided to take to the streets it is certainly much easier to communicate with each other.”

Dr Greer pointed to the example of the 2009 G20 riots in London.

A report into the police handling of the protests, produced by Her Majesty’s Inspector of Constabulary (HMRC) found that technology had aided the rioters more than the police, he explained.

“Their methods of communicating with each other or pointing out where the police were at any given time and therefore where the protesters shouldn’t be, and basically organising themselves was so much more sophisticated than the police.”

It may turn out, after a more careful examination of the various messages being pinged around, that this was indeed a social networking crime spree.

The Met has indicated it is ready to act on any information it finds.

But that will take time and a more methodical study.

The extent to which investigators are able to sift out genuine rioters from the internet ‘echo chamber’ and then bring real world prosecutions will provide valuable lessons, both about the use and abuse of technology, and also law enforcement’s capacity to deal with it.

[1]http://www.informationweek.com/news/security/encryption/231500144

[2] http://en.wikipedia.org/wiki/2011_England_riots