hbg
<font size="4" face="Times New Roman">this is a tag</font><div><font size="4" face="Times New Roman">=</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">team themis 715</font></div><div><font size="4" face="Times New Roman">
</font></div><div><div><font size="4" face="Times New Roman">Team ThemisEdit</font></div><div><font size="4" face="Times New Roman">Team Themis (not to be confused with Koch big data effort (to ctr Obama GOTV?)</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">ex gov't ppl on what basis sep from service?</font></div><div><font size="4" face="Times New Roman"> ==</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">wiki:</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On the weekend of February 5–6, 2011, <b>Aaron Barr, the chief executive of the security firm HBGary Federal</b>, announced that his firm had successfully infiltrated the Anonymous group, and although he would not hand over details to the police, he would reveal his findings at a later conference in San Francisco. In retaliation for Aaron Barr's claims, members of the group Anonymous hacked the website of HBGary Federal and replaced the welcome page with a message stating that Anonymous should not be messed with, and that the hacking of the website was necessary to defend itself. Using a variety of techniques, including social engineering and SQL injection,[109]Anonymous also went on to take control of the company's e-mail, dumping 68,000 e-mails from the system, erasing files, and taking down their phone system.[110] The leaked emails revealed the reports and company presentations of other companies in computer security such as Endgame systems who promise high quality offensive software, advertising "subscriptions of $2,500,000 per year for access to 0day exploits".[111]</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Among the documents exposed was a PowerPoint presentation entitled "The Wikileaks Threat", put together by HBGary Federal along with two other data intelligence firms for Bank of America in December.[112] Within the report, these firms created a list of important contributors to WikiLeaks; they further developed a strategic plan of attack against the site. As TechHerald explains, "the plan included pressing a journalist in order to disrupt his support of the organization, cyber attacks, disinformation, and other potential proactive tactics." The report specifically claims that Glenn Greenwald's support was key to WikiLeaks' ongoing survival.[113][114][115]</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Anonymous also personally attacked Aaron Barr by taking control of his Twitter account, posting Mr Barr's supposed home address and social security number.[116]</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">In response to the attacks, founder of HBGary Federal, Greg Hoglund, responded to journalist Brian Krebs, "They didn't just pick on any company, we try to protect the US Government from hackers. They couldn't have chosen a worse company to pick on."[116] After the attacks, Anonymous continued to clog up HBGary Federal fax machines, and made threatening phone calls.[117]</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">---</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">http://www.fixtheuschamber.org/issues/chamber-gate-2011-what-chamber-knew</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">details of negot</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">---</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">http://www.democracynow.org/2013/7/11/jailed_journalist_barrett_brown_faces_105</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Peter Ludlow, professor of philosophy at Northwestern University. He has written extensively on hacktivist actions against private intelligence firms and the surveillance state. His recent article for The Nation is called "The Strange Case of Barrett Brown."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">THURSDAY, JULY 11, 2013</font></div><div><font size="4" face="Times New Roman">Jailed Journalist Barrett Brown Faces 105 Years For Reporting on Hacked Private Intelligence Firms</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Journalist Barrett Brown spent his 300th day behind bars this week on a range of charges filed after he used information obtained by the hacker group Anonymous to report on the operations of private intelligence firms. Brown faces 17 charges ranging from threatening an FBI agent to credit card fraud for posting a link online to a document that contained stolen credit card data. But according to his supporters, Brown is being unfairly targeted for daring to investigate the highly secretive world of private intelligence and military contractors. Using information Anonymous took from the firm HBGary Federal, Brown helped discover a secret plan to tarnish the reputations of WikiLeaks and journalist Glenn Greenwald of The Guardian. Brown similarly analyzed and wrote about the millions of internal company emails from Stratfor Global Intelligence that were leaked in 2011. We speak to Peter Ludlow, professor of philosophy at Northwestern University, whose article "The Strange Case of Barrett Brown" recently appeared in The Nation. "Considering that the person who carried out the actual Stratfor hack had several priors and is facing a maximum of 10 years, the inescapable conclusion is that the problem is not with the hack itself but with Brown’s journalism," Ludlow argues. He adds that the case against Brown could suggest criminality "to even link to something or share a link with someone."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">TRANSCRIPT</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">This is a rush transcript. Copy may not be in its final form.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">JUAN GONZÁLEZ: As NSA leaker Edward Snowden remains at a Moscow airport, Army whistleblower Bradley Manning is on trial, and WikiLeaks founder Julian Assange is holed up in the Ecuadorean embassy in London, today we look at the strange story of another man tied to the world of cyber-activism who faces over a hundred years in prison. His name is Barrett Brown. He’s an investigative reporter with ties to the hacking collective Anonymous. He has spent the past 300 days in jail and has been denied bail. He faces 17 charges, ranging from threatening an FBI agent to credit card fraud for posting a link online to a document that contained stolen credit card data. But according to his supporters, Brown is being unfairly targeted for daring to investigate the highly secretive world of private intelligence and military contractors.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">AMY GOODMAN: Before Brown’s path crossed with the FBI, he frequently contributed to Vanity Fair, The Huffington Post, The Guardian and other news outlets. In 2009, Brown created Project PM, which was, quote, "dedicated to investigating private government contractors working in the secretive fields of cybersecurity, intelligence and surveillance." He was particularly interested in the documents leaked by WikiLeaks and Anonymous. In the documentary We Are Legion, Barrett Brown explains the importance of information obtained by hackers.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">BARRETT BROWN: Some of the most important things that have been—have had the most far-reaching influence and have been the most important in terms of what’s been discovered, not just by Anonymous, but by the media in the aftermath, is the result of hacking. That information can’t be obtained by institutional journalistic process, or it can’t be obtained or won’t be obtained by a congressional committee or a federal oversight committee. For the most part, that information has to be, you know, obtained by hackers.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">AMY GOODMAN: In 2011, the group Anonymous hacked into the computer system of the private security firm HBGary Federal and disclosed thousands of internal emails. Barrett Brown has not been accused of being involved in the hack, but he did read and analyze the documents, eventually crowd-sourcing the effort through Project PM. One of the first things he discovered was a plan to tarnish the reputations of WikiLeaks and sympathetic journalist Glenn Greenwald of The Guardian. Brown similarly analyzed and wrote about the millions of internal company emails for Stratfor Global Intelligence that were leaked on Christmas Eve 2011. Shortly thereafter, the FBI acquired a warrant for Brown’s laptop and authority to seize any information from his communications—or, in journalism parlance, his sources. In September 2012, a troupe of armed agents surged into Brown’s apartment in Dallas, Texas, and handcuffed him face down on the floor. He has been in prison ever since.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">JUAN GONZÁLEZ: Well, for more, we’re joined by Peter Ludlow, professor of philosophy at Northwestern University. He has written extensively on hacktivist actions against people—against private intelligence firms and the surveillance state. His recent article for The Nation is called "The Strange Case of Barrett Brown."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Peter Ludlow, welcome to Democracy Now!</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">PETER LUDLOW: Hi. Thank you very much.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">JUAN GONZÁLEZ: Talk to us about Barrett Brown, the importance of his case, given all the others that we’ve been dealing with on this show now for many years.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">PETER LUDLOW: Well, yeah, it’s important for two reasons. First of all, it’s showing that, to some extent, all of us could be targets, because the principal reasons that they’re going after him with this sort of claim that he was involved in credit card fraud or something like that, I mean, that’s completely fallacious. I mean, in effect, what he did was take a link from a chat room and copied that link and pasted it into the chat room for Project PM. That is, he took a link that was broadcast widely on the Internet, and it was a link to the Stratfor hack information, and he just brought it to the attention of the editorial board of Project PM. And because there were, for whatever reason, unencrypted credit card numbers and validation codes among those five million other emails, the government is claiming that he was engaged in credit card fraud. They’re claiming that Project PM was a criminal enterprise. And so, basically, for our interest, why this is interesting to us is basically it makes this dangerous to even link to something or to share a link with someone.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">JUAN GONZÁLEZ: And—</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">PETER LUDLOW: Go ahead, yeah, please.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">JUAN GONZÁLEZ: Well, one of the things that you raise is, in some of your writings on this, is the incestuous relationship between the Justice Department, the government and these private firms that are being now targeted by cyber-activists. And could you talk about that, as well?</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">PETER LUDLOW: Well, sure. A lot of these private intelligence companies are started by ex-CIA, NSA people. Some people come from those agencies and rotate back into the government. I mean, you even see, with the case of Snowden, he was actually a contractor for a private intelligence company, Booz Allen. And, I mean, people think about the NSA, FBI, CIA, and they think of—those are the people that are doing the surveillance of you and doing this intelligence work, but really, if you look at how much the United States spends on intelligence, 70 percent of that is actually going to these private intelligence contractors. So, you know, if you add up CIA, NSA,FBI, that’s just a tip of the iceberg. So there’s all this sort of spook stuff going on in the private realm. And, yeah, right, a lot of it is very incestuous. There’s a revolving door. And no one is investigating it or even talking about it, as far as I can tell.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">AMY GOODMAN: Let’s go to Barrett Brown in his own words. In March 2012,Democracy Now! spoke with Barrett soon after his house was raided.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">BARRETT BROWN: On March 5th, I received a tip that I was about to be raided by the FBI. I left my apartment here in Dallas, went to my mom’s residence here in the same city. Next morning, three FBI agents arrived at my mom’s place. I went out and talked to them. They said my apartment had just been raided. The door was damaged. They would take care of that. And that they also asked me if I had any laptops with me that I wanted to give them. I said no.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">A few hours later, the FBI returned to my mom’s house with another warrant, this time for her house, and detained the both of us for three hours while they searched the residence. They found several laptops I had stashed somewhere in the house and left the search warrants and left another one in my apartment, which I got when I came back here a little after, the next day or so.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The warrants themselves refer to the information that they’re seeking as regarding Anonymous, of course, a few other things of that nature, and also two companies: HBGary and Endgame Systems. Both of these are intelligence contracting companies that Anonymous had a run-in with in February of 2011, during which a number of emails were taken from HBGary, in particular, which themselves revealed a number of conspiracies being perpetuated by those companies in conjunction with Justice Department and several other institutions, including Bank of America, against WikiLeaks and against several journalists.</font></div><div><font size="4" face="Times New Roman">The time since, I’ve spent a lot of time going over those emails, researching them, conducting other research, otherwise trying to expose a number of things that have been discovered by virtue of those emails from HBGary having been taken. I sincerely believe that my activities on that front contributed to me being raided the other day and will no doubt contribute to any further action that the FBI decides to take. I would just also note the Justice Department itself is very much intertwined with this issue, and has been for a while, and in no way can conduct a fair investigation against me, based on what I’ve revealed, what I’ve helped to sort of emphasize about them.</font></div><div><font size="4" face="Times New Roman">88</font></div><div><font size="4" face="Times New Roman">AMY GOODMAN: That was Barrett Brown in his own words just after the raid.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">PETER LUDLOW: Yeah.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">AMY GOODMAN: Peter Ludlow, talk about what he had released. Talk about what he got from HBGary and how this links to Glenn Greenwald.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">PETER LUDLOW: Sure. Well, what they uncovered was—I mean, it’s actually a little bit subtle, right? Because it begins with the Bank of America being concerned that WikiLeaks had information on it. Bank of America goes to the United States Department of Justice. The Department of Justice leads them to Hunton & Williams, the big law fix-it firm in the D.C. area, who in turn hooks them up with a group of private intelligence contractors that went under the umbrella Team Themis. And Team Themis had a number of proposals and projects that were exposed in all of this. They included running kind of a psyops operation against the Chamber Watch, which is a group that sort of monitors the Chamber of Commerce, and it was an attempt to undermine it and Glenn Greenwald and other individuals. And, I mean, there were many, many plans that they had, many, many things, but some of the documents released showed that they were saying they were going to create fake documents, leak them to Greenwald, and then, when Greenwald eventually released them, they would expose it as a fraud and attempt to undermine him in that way. And they had a similar plan for Chamber Watch, as well.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">JUAN GONZÁLEZ: And their concern with Greenwald was that he was giving—that his defense of WikiLeaks was giving legitimacy to WikiLeaks—</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">PETER LUDLOW: That was—yeah. That was the concern.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">JUAN GONZÁLEZ: —it didn’t deserve.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">PETER LUDLOW: That was the concern, yeah. And they actually said in there, "Well, he’s just a professional journalist, and he’ll fold under pressure immediately. I mean, apparently they were wrong about that. So, yeah.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">JUAN GONZÁLEZ: There were also emails found where these private security firms were assessing the damage that Jeremy Scahill’s books had done to Blackwater?</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">PETER LUDLOW: Well, actually, those—I ran across that in the Stratfor leaks, and that was kind of interesting, because they were monitoring—they were monitoring this because they were concerned that Blackwater was going to get into the private intelligence business themselves. And they were commenting on Scahill. They go, "Well, yeah, Scahill, you know, I don’t care much for his politics, but he’s really got these guys figured out, yeah?" So that was a little compliment for Scahill, I think.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">JUAN GONZÁLEZ: But the amazing thing in all of this is the degree to which these private security firms are engaging in attempts to influence what’s going on in the public debate on—</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">PETER LUDLOW: Oh, yeah.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">JUAN GONZÁLEZ: —on intelligence.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">PETER LUDLOW: Oh, yeah, yeah. I mean, one of the most crazy things in the whole thing was when Coca-Cola approached Stratfor, and they were concerned aboutPETA, you know, People for the Ethical Treatment of Animals. And why, I’m not entirely sure, but one of the people in Stratfor said, "Well, the FBI has a classified file on PETA. I’ll see if I can get it for you." Now, that little story sums up a lot of stuff that’s wrong about this. First of all, why are private—why is Coca-Cola going to a private intelligence company for this? Why is—why did the private intelligence company feel that they had immediate access to a classified file by the FBI? And why did the FBI have a classified file, to begin with? I mean—but, to me, the creepiest part of that very creepy little story is the fact that the guy at Stratfor felt that he had access to this classified file by the FBI. And the Barrett Brown case revealed something like this, as well. It’s almost like the FBI has become just another private security firm, that it’s become like a private cop for these companies, as it were. And, I mean, that’s part because of the revolving door. It’s part because they get pressed into service for companies that want inside information on activist organizations like PETA.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">AMY GOODMAN: —and then come back to this conversation. We’re talking to Peter Ludlow, professor of philosophy at Northwestern University, has written extensively on hacktivist actions against private intelligence firms. The piece he most recently wrote is for The Nation, and it’s called "The Strange Case of Barrett Brown." When we come back, I want to ask you how it’s possible he faces a hundred years in prison.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">AMY GOODMAN: It makes us think about Aaron Swartz.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">AMY GOODMAN: He didn’t face anything like that, but he faced decades in prison.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">PETER LUDLOW: Yeah.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">AMY GOODMAN: He ultimately committed suicide before prosecution. Stay with us. [end rush trans]</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">arrested, 105 yrs, no bail, in 300 days no, for a while contrib to legal fund //wikileaks; bb spokeperson for WL westboro, hbg, took over gov't website (in ME? arab spring?] and told ppl in other countries to revolt; i have lawyers to protect me and they don't want dirty laundry publicized; hacked SES? search warrant hbg and Endgame (zero day exploits) subscription 2.5m$/yr see Bizweek article slides on airport computers Atlanta? video of hq; ibm and ------; hastings; chls swift JAG gitmo, ahmed kapur, free bb</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">http://www.mediafreedominternational.org/2013/01/29/palantir-software/?utm_source=From+Paypal&utm_campaign=3d7c096353-&utm_medium=email</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> --</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Schneier on Security</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">A blog covering security and security technology.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">« Good Article About the Terrorist Non-Threat | Main | Interview with Me »</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">February 25, 2011</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">HBGary and the Future of the IT Security Industry</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">This is a really good piece by Paul Roberts on Anonymous vs. HBGary: not the tactics or the politics, but what HBGary demonstrates about the IT security industry.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">But I think the real lesson of the hack - and of the revelations that followed it - is that the IT security industry, having finally gotten the attention of law makers, Pentagon generals and public policy establishment wonks in the Beltway, is now in mortal danger of losing its soul. We've convinced the world that the threat is real - omnipresent and omnipotent. But in our desire to combat it, we are becoming indistinguishable from the folks with the black hats.</font></div><div><font size="4" face="Times New Roman">[...]</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">...While "scare 'em and snare 'em" may be business as usual in the IT security industry, other HBGary Federal skunk works projects clearly crossed a line: a proposal for a major U.S. bank, allegedly Bank of America, to launch offensive cyber attacks on the servers that host the whistle blower site Wikileaks. HBGary was part of a triumvirate of firms that also included Palantir Inc and Berico Technologies, that was working with the law firm of the U.S. Chamber of Commerce to develop plans to target progressive groups, labor unions and other left-leaning non profits who the Chamber opposed with a campaign of false information and entrapment. Other leaked e-mail messages reveal work with General Dynamics and a host of other firms to develop custom, stealth malware and collaborations with other firms selling offensive cyber capabilities including knowledge of previously undiscovered ("zero day") vulnerabilities.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">[...]</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">What's more disturbing is the way that the folks at HBGary - mostly Aaron Barr, but others as well - came to view the infowar tactics they were pitching to the military and its contractors as applicable in the civilian context, as well. How effortlessly and seamlessly the focus on "advanced persistent threats" shifted from government backed hackers in China and Russia to encompass political foes like ThinkProgress or the columnist Glenn Greenwald. Anonymous may have committed crimes that demand punishment - but its up to the FBI to handle that, not "a large U.S. bank" or its attorneys.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Read the whole thing.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Posted on February 25, 2011 at 6:14 AM • 73 Comments</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">To receive these entries once a month by e-mail, sign up for the Crypto-Gram Newsletter.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">--</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> http://thinkprogress.org/politics/2011/08/18/298081/hbgary-federal-us-chamber-persona/</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">...In presentations obtained by ThinkProgress from the e-mail dump detailing the tactics potentially used against progressives, HBGary Federal floated the idea of using “fake insider personas” to infiltrate left-leaning groups critical of the U.S. Chamber of Commerce’s policies. </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">As HBGary Federal executive Aaron Barr described in several emails, his firm could work with partner companies Palantir and Berico Technologies to manipulate fake online identities, using networks like Facebook, to gain access to private information from his targets. Other presentations are more specific and describe efforts to use social media to hack computers and find vulnerabilities among even the families of people who work at organizations critical of the Chamber.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">In one email from the dump, Barr discusses a fake persona he created called “Holly Weber.” She would be born in Portland in 1984, attend Reynolds High School, and work for Lockheed Martin after a stint in the Air Force. Earlier this week, Twitter users actually identified the phony account. Before it was taken down, ThinkProgress snagged screen shots of the fake persona’s Facebook and LinkedIn accounts. (Barr also described his strategy for pretending to be teenagers online). View a screenshot of the fake account below:...Hunton and Williams, the law firm representing the U.S. Chamber of Commerce, had been immersed in talks with HBGary Federal, Palantir, and Berico to deliver on a $2 million deal to move forward with the hacking plot against the Chamber’s critics. However, after Anonymous leaked HBGary’s emails and a few reporters picked up on the story, the Chamber distanced itself from the deal. The emails show that HBGary Federal had also worked to sell “persona management” solutions to the U.S. government for cyber intelligence work.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">---</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">February 16, 2011 by Brad Johnson, ThinkProgress</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Original reporting by ThinkProgress revealed that Hunton & Williams, a corporate law firm representing the U.S. Chamber of Commerce, conspired with set of private security companies and lobbying firms to undermine the political opponents of the Chamber with a surreptitious sabotage campaign.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Their plot was revealed when emails from one of the companies involved, HBGary Federal, were leaked by hackers who were angered by boasts by HBGary Federal CEO Aaron Barr that he could use social media sites such as Facebook and false identities to uncover their identities.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Below is a detailed timeline of the conspiracy to launch a dirty-tricks campaign against labor unions, progressive organizations, and journalists who have challenged the U.S. Chamber of Commerce’s right-wing agenda.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Dramatis Personae</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Hunton and Williams: Partners John Woods, Bob Quackenboss, David Lashway, and Litigation Group head Richard Wyatt</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Palantir Technologies: Matthew Steckman, Eli Bingham, Ryan Castle, Sean Stenstrom, Shyam Sankar; General Counsel Matt Long, CEO Alex Karp</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Berico Technologies: Patrick Ryan, Sam Kremin, Amanda McDonald, Danielle Berti, Jeremy Glesner, Katie Crotty, Bill Lantzy, CEO Nicholas Hallam, COO Guy Filippelli</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">HBGary Federal: CEO Aaron Barr, Mark Trynor, COO Ted Vera, HBGary President Penny Leavy-Hoglund</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Booz Allen: Senior Vice President Bill Wansley, Renee Way, Lloyd Howell, Chris O’Ferrell</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">*Signed contracts included in leaked e-mail record but were not involved in sending or receiving the e-mails.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Mentioned by name in leaked emails but were not involved in sending or receiving them.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">SEPTEMBER</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On September 10, U.S. Chamber Watch files charges with the IRS that the U.S. Chamber of Commerce “violated tax codes by laundering millions of dollars meant for charitable work from a group with ties to the insurance giant AIG.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">OCTOBER</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On October 5, ThinkProgress exposes the U.S. Chamber of Commerce for directing foreign funds into the general account it uses for political expenditures to defeat progressive candidates.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On October 7, MoveOn, Public Citizen, and other progressive organizations protest the Chamber’s plan to spend $75 million against progressive candidates, and their lack of transparency over foreign money, in front of Chamber headquarters in Washington D.C.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On October 19, Matthew Steckman (Palantir) emails Aaron Barr (HBGary) and Patrick Ryan (Berico) about “about offering a complete intelligence solution to a law firm that approached us” using “social media exploitation.” “Looking forward to discussing this opportunity,” Barr replies. Ryan says it “sounds like a great opportunity.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On October 25, Steckman introduces John Woods to Patrick Ryan and Aaron Barr. They plan to meet on Nov 4 (gets moved to Nov 3) because Woods says “I have to make our formal pitch to the client early the following week.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On October 28, Ryan outlines H&W’s problem: “A client of theirs is targeted by another entity, specifically a labor union, that is trying to extract some kind of concession or favorable outcome.” They have not yet learned the name of the client.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On October 30, Barr emails the group with a document for the proposal that is a triumph of biztalk verbiage.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">NOVEMBER</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 1, Barr emails the group with the info he’d collected on H&W, including John Woods’ family, by scraping LinkedIn and Facebook. He “grabbed all the partners friends lists that have facebook accounts,” 21 in all. “One of the steps we will do once we start on contract is do [sic] automate some of the scraping an artifact collection into single files and then develop a helper app that can parse all this information into the right fields. Should be easy.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">[pre election?] On November 2, U.S. Chamber of Commerce president Tom Donohue praises the Republican gains in Congress, governorships, and state legislatures: “Today Americans sent a powerful message to Washington: Focus on job creation and economic growth. Voters have resoundingly rejected more government spending, higher taxes, and more burdensome regulations that have caused crippling uncertainty for businesses.” Meanwhile, the group of private security contractors comes up with the name “Team Themis.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 3, John Woods meets with Patrick Ryan, Aaron Barr, etc. to discuss the project. In their “Corporate Information Reconnaissance Cell” slide show: “Purpose: Develop a corporate information reconnaissance service to aid legal investigations through the open source collection of information on target groups and individuals that appear organized to extort specific concessions through online slander campaigns.” It appears that at the meeting it was revealed that the client is the U.S. Chamber of Commerce. [note crime lang? get what action from whom?]</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 4, Themis has a conference call to discuss their pricing proposal. Steckman notes “Their client is loaded!” Ryan forwards the group a Chamber of Commerce booklet on corporate campaigns that Sam Kremin had found.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 5, Ryan asks Woods what data H&W has, wondering if it includes “Financial Records, Union Rosters, IP addresses” and “access to the union in question’s membership lists”. Ryan attaches a $200,000 cost proposal.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 7, Woods tells Ryan he will be meeting on November 9 “with the team at HW who has gathered the underlying data” and asks about how pricing will work.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 8 Woods and Ryan talk on the phone.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 9, Woods asks Barr to “impress” Richard Wyatt by investigating Stop The Chamber. [vs fix?] Woods says Wyatt “might freak out” if he saw all the personal info Barr had collected by scraping social media sites. Barr is already collecting data on a number of anti-Chamber sites, including ThinkProgress. He tells Woods about what he found about Michael Gehrke. Aaron Barr also tells John Woods and Patrick Ryan the info he had found about VelvetRevolution.us, Brad Friedman, Emily Levy, ThinkProgress, and Debbie Fine. He also emails John Woods to tell him “Lets say we can publicly tie Joe Trippi (http://www.facebook.com/trippi) and his company to the development of videos for organization X. We can take videos released by organization Y and analyze the internals to see if there are forensic markers that are a match.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">[Mike Gehrke is a Vice President in our Washington D.C. office where he consults international and domestic political and public affairs clients. After building a reputation as one of the Democratic Party's top campaign staffers and political operatives over the past 20 years, Mike joined BSG in the fall of 2010. His prior work includes serving as the White House Director of Research for President Bill Clinton, the Research Director for the Presidential campaign of Sen. John Kerry, and leading the opposition communications and research operation at the Democratic National Committee during the 2007-2008 presidential primary and general election. Mike has served as a consultant, advisor or on-the-ground staff for political and issue campaigns in 17 states throughout the South and West. He has also worked for the Democratic Senatorial Campaign Committee, was the Executive Director of the Senate Majority Project - an independent 527 political committee in the 2006 election cycle - and is a veteran of the AFL-CIO Political Department and the Change to Win Federation. Internationally, his work includes polling for the Presidential campaign of Dominican Republic President Danilo Medina and work in Colombia, Nigeria, Jamaica and the European Union.]</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 10, Woods talked with Ryan and “set up a meeting” for November 12 at the Palantir offices intended to get Richard Wyatt “to sign off on the project.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 11, Barr sends Berico’s Kremin and Ryan a document with his research of “Chamber Opposition,” downloads of the Facebook supporters of Change To Win, Code Pink, Stop The Chamber, US Chamber Watch, Velvet Revolution, and a list of the Facebook friends of the Velvet Revolution’s Brett Kimberlin.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 12, representatives from Palantir, Berico, and HBGary meet with John Woods and Richard Wyatt. The expectation is set for a presentation to the Chamber of Commerce on November 23.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 15, Steckman says that the contractors have agreed on a plan for a $200,000 initial month of work, which would then become $2 million monthly for six months, split 50% Palantir, 25% each for Berico and HBGary. Ryan expresses some concerns that $2 million a month “sounds high.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 16, Berico formally sub-contracts HBGary Federal “to submit a proposal to Hunton & Williams (herein referred to as ‘Customer’) in response to their request for assistance within the realm of legal discovery to provide certain software platforms and maintenance, and systems integrators and analysts in order to better conduct cyber investigations and Corporate Campaign Analysis (herein referred to as the ‘Program.’)” The contract is signed by Nicholas Hallam, Berico COO and Aaron Barr, HBGary CEO. In a separate email, Barr expresses amazement that Palantir wants $1 million a month for six months.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 17, Eli Bingham sets up the Themis instance on the Palantir system. He shares a “printable version of the current ontology,” which includes labor organizations, strikes, and demonstrations. The ontology is also designed to hold the social media profiles of people.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 18, Ryan Castle (Palantir) tells the team that the “facebook information that you sent to me has been imported” and “mugshots [ezra quit resisting] are included.” Barr raises issues about the pricing for this six-month project, pointing out that HBGary and Berico will be doing all the work, and asks for a 40/30/30 split. Ryan agrees on behalf of Berico. Steckman says “we got approval from Dr. Karp and the Board to go ahead with the modified 40/30/30 breakdown proposed” for pricing the project. He notes “it will seem like money falling from the sky for those of us used to working in the govt sector.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 19, Sean Stenstrom (Palantir) sends a license agreement to Berico for the use of Palantir’s services.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 22, Palantir general counsel Matt Long signs a “teaming agreement” contract between Palantir and Berico, signed by Hallam the next day.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 23, Kremin emails Woods with the contracts between Palantir & Berico and Berico & HBGary. He also attaches a costing proposal, for $200,000 for 11/23 – 12/23, then $2 million total for 12/24 to 6/24/11. The proposal includes creating “in-depth target dossiers for key entities and groups; will include key biographic data, relationships, intentions, etc.” Woods and Kremin discuss setting up a conference call with Bob Quackenboss, “our key client contact operationally.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 24, H&W and Themis have a conference call. After the call, Steckman says: “We need to blow these guys away with descriptions of our capabilities, IP, and talent. Make them think that we are Bond, Q, and money penny all packaged up with a bow.” As they discuss how to bill the client, Steckman reiterates that H&W and the Chamber need to know why they should spend so much: “Most of all that we are the best money can buy! Dam it feels good to be a gangsta.” By the end of the day Katie Crotty had sent a more detailed breakdown of the abilities of the team’s staff to H&W in a “labor category spreadsheet.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 29, Berico completes sample “reports” for H&W and collects resumes of the team members, per H&W’s request. H&W tells Berico the NDA language “needs to be reworked.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On November 30, Steckman meets with John Woods and briefly meets Bob Quackenboss. Although the $2 million price tag was high, Woods says that Richard Wyatt is “looking to push that number to the Chamber.” Woods tells Steckman the Themis group “has potential for huge gains in this market especially since ‘the results of the election made some people angry.’”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">DECEMBER</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On December 1, John Woods and Bob Quackenboss receive sample “reports” from Themis that involve scraping Facebook to create dossiers of the Chamber’s political opponents (including people at MoveOn).</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On December 2, Woods asks Themis for “five to six slides on Wikileaks” for “a large US Bank.” The group eagerly begins work on the presentation.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On December 3, Barr tells the Themis group “I think we need to highlight people like Glenn Greenwald” for the WikiLeaks presentation. By 11:18 am, they have sent a Powerpoint presentation to John Woods.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On December 10, Sam Kremin complains to Aaron Barr that H&W wasn’t responding to them. He also explains to Barr how to upload personal information “scraped” from Facebook onto Palantir’s systems.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On December 13, Berico & HBGary emails John Woods to basically ask what was going on.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On December 21, Guy Filippelli, Berico CEO, meets with Bob Quackenboss who complained about the price.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On December 23, Palantir has a meeting with John Woods and “we are all in for this first opp (obviously lot’s of understood caveats/implications/long term thoughts/etc here).”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On December 28 they email Quackenboss again, who replied that he would try to get back to them the next day. He doesn’t.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On December 30-31 Aaron Barr and Mark Trynor discuss the Facebook scraper app that Trynor developed.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">JANUARY</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On January 13, H&W gives Themis a “very basic” document “that shows the connections between groups and people involved.” That document is not forwarded over email but sent on CD by courier. The Themis team assumes this act represents official initiation of the $200,000 Phase 1. Aaron Barr and Ted Vera at HBGary talk about finally landing $50K.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Meanwhile, Barr spends two hours giving a presentation on social media exploitation at the United States Army Intelligence and Security Command in Springfield, VA.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On January 14, Ted Vera tells HBGary president Penny Leavy-Hoglund that HBGary will get the contract. Kremkin tells the team that “phase 1 has started” and believes that Bob Quackenboss “will hopefully be able to meet with us to give us his vision and guidance for the project.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On January 18, Barr goes to the Berico offices to discuss the project.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On January 19, Amanda McDonald (Palantir) creates the Berico Themis instance. Barr tells Leavy-Hoglund: “The law firm deal has been agreed upon but the lawfirm has still not written us a contract. Berico says they have verbally areed [sic] to the pricing and want us to get started but we don’t have the contract yet.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On January 20, in a conversation with Mark Trynor about Wikileaks, Barr says, “I really dislike corporations. They suck the lifeblood out of humanity,” although: “Governments and corporations should have a right to protect secrets, sensitive information that could be damage to their operations.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On January 25, Barr asks Ryan for news. “Still waiting for Bob [Quackenboss] to return my calls,” Ryan replies, “also had our lawyer/contracts person reach out to their contracts person to push from that direction. Im pretty much calling bob daily at this point.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On January 26, Barr tells Woods about the research he’s been doing on Anonymous. Woods puts him in contact with Bill Wansley at Booz Allen. Wansley and Barr set up a meeting for the 28th.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">FEBRUARY</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On February 3, Berico’s Pat Ryan discusses a “long-overdue” meeting he had with Bob Quackenboss, who told him that “H&W is unable/unwilling to pay any fees/costs to us for the “Phase I” demo build-out” and “they won’t commit any funds to this project until we’ve helped them earn buy-in from their Client (the Chamber).” Quackenboss “apologized for the confusion/misunderstanding and said he thinks there is a high likelihood of selling the Chamber on this, but asked that we be willing to share the risk with H&W up-front.” Berico is willing to work on a demo to present to the Chamber on February 14.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">On February 4, the Financial Times publishes the story about Aaron Barr and Anonymous, and Anonymous soon goes after HBGary. Email record ends February 6. http://thinkprogress.org/chamberleaks-timeline/</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"></font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">update; vouched for by Just Dept?</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">hbg ceo quits</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">HB Gary Federal, Palantir, and Berico Technologies (collectively called Team Themis)</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">http://projects.washingtonpost.com/top-secret-america/companies/berico-technologies/</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> est 2006 pvt co 6m$ rev, 75 employees</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Number of Locations 9</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Number of Government Clients 3</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Types of Work (4) </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Cyber operations</font></div><div><font size="4" face="Times New Roman">Ground force operations</font></div><div><font size="4" face="Times New Roman">Specialized military operations</font></div><div><font size="4" face="Times New Roman">Technical intelligence</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">ctr attack http://www.examiner.com/libertarian-in-san-jose/anonymous-announces-us-chamber-of-commerce-target</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"></font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Greenwald reactions:</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">...</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">My initial reaction to all of this was to scoff at its absurdity. Not being familiar with the private-sector world of internet security, I hadn’t heard of these firms before and, based on the quality of the proposal, assumed they were just some self-promoting, fly-by-night entities of little significance. Moreover, for the reasons I detailed in my interview with The Tech Herald — and for reasons Digby elaborated on here — the very notion that I could be forced to choose “professional preservation over cause” is ludicrous on multiple levels. Obviously, I wouldn’t have spent the last year vehemently supporting WikiLeaks — to say nothing of aggressively criticizing virtually every large media outlet and many of their leading stars, as well as the most beloved political leaders of both parties — if I were willing to choose ”career preservation over cause.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">But after learning a lot more over the last couple of days, I now take this more seriously — not in terms of my involvement but the broader implications this story highlights. For one thing, it turns out that the firms involved here are large, legitimate and serious, and do substantial amounts of work for both the U.S. Government and the nation’s largest private corporations (as but one example, see this email from a Stanford computer science student about Palantir). Moreover, these kinds of smear campaigns are far from unusual; in other leaked HB Gary emails, ThinkProgress discovered that similar proposals were prepared for the Chamber of Commerce to attack progressive groups and other activists (including ThinkProgress). And perhaps most disturbing of all, Hunton & Williams was recommended to Bank of America’s General Counsel by the Justice Department — meaning the U.S. Government is aiding Bank of America in its defense against/attacks on WikiLeaks....</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">http:/www.salon.com/2011/02/11/campaigns_4/</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">----</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">subst work: </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Somehow, Dr. Karp forgot to apologize to Brad Friedman, another journalist WBGary–in projects bid in partnership with Palantir–has targeted.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">As a reminder, Palantir Technologies is one of the two other security firms that HBGary partnered with to try to get spying business with Bank of America and the Chamber of Commerce.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">But perhaps more relevant is Palantir’s primary focus: working with the national security apparatus. They’ve done at least $6,378,332 in business with entities like SOCOM and FBI in the last several years. And while they say they have no plans to adopt “offensive cyber capabilities,” that’s not to say they’re not helping the government analyze data on our presumed enemies.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">[The United States Special Operations Command (USSOCOM or SOCOM) is the Unified Combatant Command charged with overseeing the various Special Operations Component Commands of the Army, Air Force, Navy and Marine Corps of the United States Armed Forces. The command is part of the Department of Defense and is the only Unified Combatant Command legislated into being by the U.S. Congress. USSOCOM is headquartered at MacDill Air Force Base in Tampa, Florida.]</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">I would imagine Palantir has pretty good reason to know that the government will not do business with a contractor using the same technologies to target Glenn Greenwald (and maybe Brad Friedman).</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">At least not publicly. Remember–DOJ recommended Hunton & Williams (which put Palantir and HBGary together for the bid) to Bank of America.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">New SAP® Solution Extension for Public Sector by SAP Partner Palantir to Help Public Safety and Security Agencies Run Better, So That Communities Run Safer</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">May 25, 2011 (PR Newswire) --</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">KARLSRUHE, Germany, May 25, 2011 /PRNewswire/ -- In pursuit of its stated vision to help the world run better, SAP AG (NYSE: SAP) is teaming up with Palantir Technologies, a leading provider of intelligence analysis tools, to help government agencies improve public safety and security. The companies have signed a global reseller agreement through which SAP will resell Palantir's market-leading intelligence analysis platform as the SAP® Intelligence Analysis for Public Sector application by Palantir. The solution will allow public safety agencies, in particular, to upgrade their intelligence management capabilities to better anticipate security threats. It provides officials' improved access to information so that they can make better decisions and act faster. The announcement was made at the SAP Public Services Ecosystem Summit, being held May 25-26, 2011.</font></div><div><font size="4" face="Times New Roman">----</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Palantir</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Dr. Alex Karp, the Co-Founder and CEO of Palantir Technologies</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Dr. Alex Karp is co-founder and Chief Executive Officer of Palantir Technologies. Prior to Palantir, Dr. Karp founded the Caedmon Group. He earned his law degree from Stanford University and his Ph.D. from the University of Frankfurt, Germany. A U.S. citizen, Dr. Karp is bilingual in English and German, and also speaks French.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Peter Andreas Thiel (born 1967) is an American entrepreneur, hedge fund manager, libertarian and venture capitalist of German descent. With Elon Musk and Max Levchin, Thiel co-founded PayPal and was its CEO. He currently serves as president of Clarium Capital, a global macro hedge fund with under $700M in assets under management, and a managing partner in The Founders Fund, a $275 million venture capital fund that he launched with Ken Howery and Luke Nosek in 2005. He was an early investor in Facebook, the popular social-networking site, and sits on the company’s board of directors. Thiel was ranked #365 on the Forbes 400 in 2010, with a net worth of US$1.5 billion.[1] However, this number now underestimates his wealth as his Facebook share alone, at a 2010 valuation, is worth US$1.7 billion.[2] Peter Thiel lives in San Francisco, California.[3] also stanford</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"></font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">http://www.dailykos.com/story/2011/02/15/944614/-HBGary,-Themis,-bloggers,-and-traditional-media:-What-a-tangled-Web</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">US CoC</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">http://thinkprogress.org/2011/02/10/lobbyists-chamberleaks/</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">EXCLUSIVE: US Chamber’s Lobbyists Solicited Hackers To Sabotage Unions, Smear Chamber’s Political Opponents</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">ThinkProgress has learned that a law firm representing the U.S. Chamber of Commerce, the big business trade association representing ExxonMobil, AIG, and other major international corporations, is working with set of “private security” companies and lobbying firms to undermine their political opponents, including ThinkProgress, with a surreptitious sabotage campaign.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">According to e-mails obtained by ThinkProgress, the Chamber hired the lobbying firm Hunton and Williams. Hunton And Williams’ attorney Richard Wyatt, who once represented Food Lion in its infamous lawsuit against ABC News, was hired by the Chamber in October of last year. To assist the Chamber, Wyatt and his associates, John Woods and Bob Quackenboss, solicited a set of private security firms — HBGary Federal, Palantir, and Berico Technologies (collectively called Team Themis) — to develop tactics for damaging progressive groups and labor unions, in particular ThinkProgress, the labor coalition called Change to Win, the SEIU, US Chamber Watch, and StopTheChamber.com.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">--</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">http://arstechnica.com/tech-policy/news/2011/02/the-ridiculous-plan-to-attack-wikileaks.ars/</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">cyberwar, keystroke recording?</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> sockpuppers in SL:</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Psyops</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">In mid-2010, HBGary Federal put together a PSYOP (psychological operations) proposal for SOCOM, which had issued a general call for new tools and techniques. In the document, the new HBGary Federal team talked up their past experience as creators of "multiple products briefed to POTUS [President of the United States], the NSC [National Security Council], and Congressional Intelligence committees, as well as senior intelligence and military leaders."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The document focused on cartoons and the Second Life virtual world. "HBGary personnel have experience creating political cartoons that leverage current events to seize the target audience's attention and propagate the desired messages and themes," said the document, noting that security-cleared cartoonists and 3D modelers had already been lined up to do the work if the government wanted some help.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Cartoon example of Ahmadinejad with a puppet ayatollah </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The cartooning process "starts with gathering customer requirements such as the target audience, high level messages and themes, intended publication mediums… Through brainstorming sessions, we develop concept ideas. Approved concepts are rough sketched in pencil. Approved sketches are developed into a detailed, color end product that is suitable for publishing in a variety of mediums."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">A sample cartoon, of Iranian President Ahmadinejad manipulating a puppet Ayatollah, was helpfully included.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The document then went on to explain how the US government could use a virtual world such as Second Life to propagate specific messages. HBGary could localize the Second Life client, translating its menu options and keyboard shortcuts into local dialects, and this localized client could report "valuable usage metrics, enabling detailed measures of effects." If you want to know whether your message is getting out, just look at the statistics of how many people play the game and for how long.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">As for the messages themselves, those would appear within the Second Life world. "HBGary can develop an in-world advertising company, securing small plots of virtual land in attractive locations, which can be used to promote themes using billboards, autonomous virtual robots, audio, video, and 3D presentations," said the document.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">They could even make a little money while they're at it, by creating "original marketable products to generate self-sustaining revenue within the virtual space as well as promote targeted messaging."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">We found no evidence that SOCOM adopted the proposal.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">But HBGary Federal's real interest had become social media like Facebook and Twitter—and how they could be used to explore and then penetrate secretive networks. And that was exactly what the Air Force wanted to do.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Fake Facebook friends</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">In June 2010, the government was expressing real interest in social networks. The Air Force issued a public request for "persona management software," which might sound boring until you realize that the government essentially wanted the ability to have one agent run multiple social media accounts at once.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">It wanted 50 software licenses, each of which could support 10 personas, "replete with background, history, supporting details, and cyber presences that are technically, culturally and geographically consistent."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The software would allow these 50 cyberwarriors to peer at their monitors all day and manipulate these 10 accounts easily, all "without fear of being discovered by sophisticated adversaries." The personas would appear to come from all over the world, the better to infiltrate jihadist websites and social networks, or perhaps to show up on Facebook groups and influence public opinion in pro-US directions.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">As the cyberwarriors worked away controlling their 10 personas, their computers would helpfully provide "real-time local information" so that they could play their roles convincingly.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">In addition the Air Force wanted a secure virtual private network that could mask the IP addresses behind all of this persona traffic. Every day, each user would get a random IP address to help hide "the existence of the operation." The network would further mask this persona work by "traffic mixing, blending the user's traffic with traffic from multitudes of users from outside the organization. This traffic blending provides excellent cover and powerful deniability."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">This sort of work most interested HBGary Federal's Aaron Barr, who was carving out a niche for himself as a social media expert. Throughout late 2010 and early 2011, he spent large chunks of his time attempting to use Facebook, Twitter, and Internet chat to map the network of Exelon nuclear plant workers in the US and to research the members of Anonymous. As money for his company dried up and government contracts proved hard to come by, Barr turned his social media ideas on pro-union forces, getting involved in a now-controversial project with two other security firms.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">But e-mails make clear that he mostly wanted to sell this sort of capability to the government. "We have other customers, mostly on offense, that are interested in Social Media for other things," he wrote in August 2010. "The social media stuff seems like low hanging fruit."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">How does one use social media and fake "personas" to do anything of value? An e-mail from Barr on August 22 makes his thinking clear. Barr ponders "the best way to go about establishing a persona to reach an objective (in this case ft. belvoir/INSCOM/1st IO)."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The Army's Fort Belvoir, like any secretive institution, might be more easily penetrated by pretending to be an old friend of a current employee. "Make your profile swim in a large sea," Barr wrote. "Pick a big city, big high school, big company. Work your way up and in. Recreate your history. Start by friending high school people. In my case I am in the army so after you have amassed enough friends from high school, then start friending military folks outside of your location, something that matches the area your in, bootcamp, etc. Lastly start to friend people from the base, but start low and work your way up. So far so good."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Once the persona had this network of friends, "I will start doing things tricky. Try to manipulate conversations, insert communication streams, etc," said Barr. This sort of social media targeting could also be used to send your new "friend" documents or files (such as the Al-Qaeda poison document discussed above) [that] come complete with malware, or by directing them to specially-crafted websites designed to elicit some specific piece of information: directed attacks known as "spear phishing."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">But concerns arose about obtaining and using social media data, in part because sites like Facebook restricted the "scraping" of its user data. An employee from the link analysis firm Palantir wrote Barr at the end of August, asking, "Is the idea that we'd want to ingest all of Facebook's data, or just a targeted subset for a few users of interest?"</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The more data that was grabbed from Facebook, the more chance a problem could arise. The Palantir employee noted that a researcher had used similar tools to violate Facebook's acceptable use policy on data scraping, "resulting in a lawsuit when he crawled most of Facebook's social graph to build some statistics. I'd be worried about doing the same. (I'd ask him for his Facebook data—he's a fan of Palantir—but he's already deleted it.)"</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Still, the potential usefulness of sites like Facebook was just too powerful to ignore, acceptable use policy or not.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Feeling twitchy</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">While Barr fell increasingly in love with his social media sleuthing, Hoglund still liked researching his rootkits. In September, the two teamed up for a proposal to DARPA, the Defense Advanced Research Projects Agency that had been instrumental in creating the Internet back in the 1960s.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">DARPA didn't want incrementalism. It wanted breakthroughs (one of its most recent projects is the "100-Year Starship Study"), and Barr and Hoglund teamed up for a proposal to help the agency on its Cyber Insider Threat (CINDER) program. CINDER was an expensive effort to find new ways to watch employees with access to sensitive information and root out double agents or disgruntled workers who might leak classified information.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">So Barr and Hoglund drafted a plan to create something like a lie detector, except that it would look for signs of "paranoia" instead.....</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Law & Disorder / Civilization & Discontents</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Black ops: how HBGary wrote backdoors for the government</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The attacks last week by Anonymous on security firm HBGary have yanked back …</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">by Nate Anderson - Feb 21 2011, 6:30am PST</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Black Hat</font></div><div><font size="4" face="Times New Roman">Government</font></div><div><font size="4" face="Times New Roman">297</font></div><div><font size="4" face="Times New Roman">The HBGary saga</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Colbert Report features Ars Anonymous/HBGary coverage</font></div><div><font size="4" face="Times New Roman">Anonymous vs. HBGary: the aftermath</font></div><div><font size="4" face="Times New Roman">Anonymous speaks: the inside story of the HBGary hack</font></div><div><font size="4" face="Times New Roman">Spy games: Inside the convoluted plot to bring down WikiLeaks</font></div><div><font size="4" face="Times New Roman">(Virtually) face to face: how Aaron Barr revealed himself to Anonymous</font></div><div><font size="4" face="Times New Roman">Back to basics</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">In January 2011, Barr had moved on to his research into Anonymous—research that would eventually do his company in. Over at HBGary, Hoglund continued his pursuit of next-gen rootkits. He had hit on a new approach that he called "Magenta."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">This would be a "new breed of Windows-based rootkit," said a Magenta planning document, one that HBGary called a "multi-context rootkit." The Magenta software would be written in low-level assembly language, one step up from the ones and zeroes of the binary code with which computers do their calculating. It would inject itself into the Windows kernel, and then inject itself further into an active process; only from there would the main body of the rootkit execute.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Magenta would also inject itself routinely into different processes, jumping around inside the computer's memory to avoid detection. Its command-and-control instructions, telling the rootkit exactly what to do and where to send the information, wouldn't come from some remote Internet server but from the host computer's own memory—where the control instructions had been separately injected.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">"This is ideal because it’s trivial to remotely seed C&C messages into any networked Windows host," noted Hoglund, "even if the host in question has full Windows firewalling enabled."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Nothing like Magenta existed (not publicly, at least), and Hoglund was sure that he could squeeze the rootkit code into less than 4KB of memory and make it "almost impossible to remove from a live running system." Once running, all of the Magenta files on disk could be deleted. Even the best anti-rootkit tools, those that monitored physical memory for signs of such activity, "would only be of limited use since by the time the responder tried to verify his results Magenta will have already moved to a new location & context."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Hoglund wanted to build Magenta in two parts: first, a prototype for Windows XP with Service Pack 3—an old operating system but still widely installed. Second, if the prototype generated interest, HBGary could port the rootkit "to all current flavors of Microsoft Windows."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Shortly thereafter, Anonymous broke into HBGary Federal's website, cracked Barr's hashed password using rainbow tables, and found themselves in a curious position; Barr was also the administrator for the entire e-mail system, so they were able to grab e-mail from multiple accounts, including Hoglund's.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">A world awash in rootkits</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The leaked e-mails provide a tantalizing glimpse of life behind the security curtain. HBGary and HBGary Federal were small players in this space; indeed, HBGary appears to have made much of its cash with more traditional projects, like selling anti-malware defense tools to corporations and scanning their networks for signs of infection.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">If rootkits, paranoia monitors, cartoons, and fake Facebook personas were being proposed and developed here, one can only imagine the sorts of classified projects underway throughout the entire defense and security industry.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Whether these programs are good or bad depends upon how they are used. Just as Hoglund's rootkit expertise meant that he could both detect them and author them, 0-day exploits and rootkits in government hands can be turned to many uses. The FBI has had malware like CIPAV (the Computer and Internet Protocol Address Verifier) for several years, and it's clear from the HBGary e-mail leak that the military is in wide possession of rootkits and other malware of its own. The Stuxnet virus widely believed to have at least damaged Iranian nuclear centrifuge operations is thought to have originated in the US or Israeli governments, for instance.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">But the e-mails also remind us how much of this work is carried out privately and beyond the control of government agencies. We found no evidence that HBGary sold malware to nongovernment entities intent on hacking, though the company did have plans to repurpose its DARPA rootkit idea for corporate surveillance work. ("HBGary plans to transition technology into commercial products," it told DARPA.)</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">And another document, listing HBGary's work over the last few years, included this entry: "HBGary had multiple contracts with a consumer software company to add stealth capability to their host agent."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The actions of HBGary Federal's Aaron Barr also serve as a good reminder that, when they're searching for work, private security companies are more than happy to switch from military to corporate clients—and they bring some of the same tools to bear.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">When asked to investigate pro-union websites and WikiLeaks, Barr turned immediately to his social media toolkit and was ready to deploy personas, Facebook scraping, link analysis, and fake websites; he also suggested computer attacks on WikiLeaks infrastructure and pressure be brought upon journalists like Glenn Greenwald.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">His compatriots at Palantir and Berico showed, in their many e-mails, few if any qualms about turning their national security techniques upon private dissenting voices. Barr's ideas showed up in Palantir-branded PowerPoints and Berico-branded "scope of work" documents. "Reconnaissance cells" were proposed, network attacks were acceptable, "target dossiers" on "adversaries" would be compiled, and "complex information campaigns" involving fake personas were on the table.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Critics like Glenn Greenwald contend that this nexus of private and public security power is a dangerous mix. "The real issue highlighted by this episode is just how lawless and unrestrained is the unified axis of government and corporate power," he wrote last week.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Especially (though by no means only) in the worlds of the Surveillance and National Security State, the powers of the state have become largely privatized. There is very little separation between government power and corporate power. Those who wield the latter intrinsically wield the former.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The revolving door between the highest levels of government and corporate offices rotates so fast and continuously that it has basically flown off its track and no longer provides even the minimal barrier it once did. It's not merely that corporate power is unrestrained; it's worse than that: corporations actively exploit the power of the state to further entrench and enhance their power.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Even if you don't share this view, the e-mails provide a fascinating glimpse into the origins of government-controlled malware. Given the number of rootkits apparently being developed for government use, one wonders just how many machines around the globe could respond to orders from the US military. Or the Chinese military. Or the Russian military.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">While hackers get most of the attention for their rootkits and botnets and malware, state actors use the same tools to play a different game—the Great Game—and it could be coming soon to a computer near you</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">http://arstechnica.com/tech-policy/2011/02/black-ops-how-hbgary-wrote-backdoors-and-rootkits-for-the-government/3/</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">...</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Faking documents seemed like a good idea, too, documents which could later be "called out" so as to make WikiLeaks look unreliable.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">And Barr wanted to go further, pushing on people like civil liberties Salon.com columnist Glenn Greenwald—apparently hoping to threaten their livelihoods. "These are established professionals that have a liberal bent, but ultimately most of them if pushed will choose professional preservation over cause, such is the mentality of most business professionals," he wrote. "Without the support of people like Glenn WikiLeaks would fold."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">When the US Chamber of Commerce wanted to look into some of its opponents, Barr teamed with two other security companies and went nuts, proposing that the Chamber create an absurdly expensive "fusion cell" of the kind "developed and utilized by Joint Special Operations Command (JSOC)"—and costing $2 million a month. And if the fusion cell couldn't turn up enough opposition research, the security firms would be happy to create honeypot websites to lure the Chamber's union-loving opponents in order to grab more data from them.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The security companies even began grabbing tweets from liberal activists and mapping the connections between people using advanced link analysis software most often used by the intelligence community. (Some of the Chamber material was unearthed by ThinkProgress and other liberal bloggers, while The Tech Herald and Crowdleaks.org first wrote about the proposed WikiLeaks attacks.)</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">While waiting to see if his proposals would result in work for HBGary Federal, Barr turned in January to unmask the leadership of the hacker collective Anonymous. This part of the story is well known by now (read our investigative feature): when Barr went public with his findings, Anonymous took down his website, stole his e-mails, deleted the company's backup data, trashed Barr's Twitter account, and remotely wiped his iPad.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">In the days since the attack and the publication of Barr's e-mails, his partners at other security firms threw him under the bus. "I have directed the company to sever any and all contacts with HB Gary," said the CEO of Palantir.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Berico Technologies, another private security firm, said that it "does not condone or support any effort that proactively targets American firms, organizations or individuals. We find such actions reprehensible and are deeply committed to partnering with the best companies in our industry that share our core values. Therefore, we have discontinued all ties with HBGary Federal."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Glenn Greenwald unleashed both barrels of his own, claiming that "what is set forth in these proposal... quite possibly constitutes serious crimes. Manufacturing and submitting fake documents with the intent they be published likely constitutes forgery and fraud. Threatening the careers of journalists and activists in order to force them to be silent is possibly extortion and, depending on the specific means to be used, constitutes other crimes as well. Attacking WikiLeaks' computer infrastructure in an attempt to compromise their sources undoubtedly violates numerous cyber laws."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">How did Barr, a man with long experience in security and intelligence, come to spend his days as a CEO e-stalking clients and their wives on Facebook? Why did he start performing "reconnaissance" on the largest nuclear power company in the US? Why did he suggest pressuring corporate critics to shut up, even as he privately insisted that corporations "suck the lifeblood out of humanity"? And why did he launch his ill-fated investigation into Anonymous, one which may well have destroyed his company and damaged his career? </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Thanks to his leaked e-mails, the downward spiral is easy enough to retrace. Barr was under tremendous pressure to bring in cash, pressure which began on November 23, 2009.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">players attract players</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">That's when Barr started the CEO job at HBGary Federal. Its parent company, the security firm HBGary, wanted a separate firm to handle government work and the clearances that went with it, and Barr was brought in from Northrup Grumman to launch the operation.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">In an e-mail announcing Barr's move, HBGary CEO Greg Hoglund told his company that "these two are A+ players in the DoD contracting space and are able to 'walk the halls' in customer spaces. Some very big players made offers to Ted and Aaron last week, and instead they chose HBGary. This reflects extremely well on our company. 'A' players attract 'A' players."...On October 19, a note arrived. HBGary Federal might be able to provide part of "a complete intelligence solution to a law firm that approached us." That law firm was DC-based powerhouse Hunton & Williams, which boasted 1,000 attorneys and terrific contacts. They had a client who wanted to do a little corporate investigative work, and three small security firms thought they might band together to win the deal...</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Once that was done, Team Themis staffers could start churning out intelligence reports for the Chamber. The team wrote up a set of "sample reports" filled with action ideas like:</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Create a false document, perhaps highlighting periodical financial information, and monitor to see if US Chamber Watch acquires it. Afterward, present explicit evidence proving that such transactions never occurred. Also, create a fake insider persona and generate communications with [union-backed Change to Win]. Afterward, release the actual documents at a specified time and explain the activity as a CtW contrived operation.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">If needed, create two fake insider personas, using one as leverage to discredit the other while confirming the legitimacy of the second. Such work is complicated, but a well-thought out approach will give way to a variety of strategies that can sufficiently aid the formation of vetting questions US Chamber Watch will likely ask.</font></div><div><font size="4" face="Times New Roman">...</font></div><div><font size="4" face="Times New Roman">In October 2010, HBGary CEO Greg Hoglund had tossed out a random idea for Barr, one that did not apparently seem unusual: "I suggest we create a large set of unlicensed windows-7 themes for video games and movies appropriate for middle east & asia. These theme packs would contain back doors."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Barr's ideas about WikiLeaks went beyond attacks on their infrastructure. He wrote in a separate document that WikiLeaks was having trouble getting money because its payment sources were being blocked. "Also need to get people to understand that if they support the organization we will come after them," he wrote. "Transaction records are easily identifiable."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">........</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">At 7:30am the next morning, Barr had another great idea—find some way to make WikiLeaks supporters like Glenn Greenwald feel like their jobs might be at stake for supporting the organization.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">"One other thing," he wrote in his morning message. "I think we need to highlight people like Glenn Greenwald. Glenn was critical in the Amazon to OVH [data center] transition and helped WikiLeaks provide access to information during the transition. It is this level of support we need to attack. These are established professionals that have a liberal bent, but ultimately most of them if pushed will choose professional preservation over cause, such is the mentality of most business professionals. Without the support of people like Glenn WikiLeaks would fold."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">This seems an absurd claim on a number of levels, but it also upped the "creep factor" dramatically. Barr was now suggesting that a major US corporation find ways to lean on a civil liberties lawyer who held a particular view of WikiLeaks, pressuring him into silence on the topic. Barr, the former Navy SIGINT officer who had traveled around the world to defend the US right to freedom of speech, had no apparent qualms about his idea.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"></font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">from newcomplex</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">------</font></div><div><font size="4" face="Times New Roman">spy</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">At a senate hearing March 1, Centcom commander James N. Mattis said, "Our enemies operate within cyberspace (and its associated relevant physical infrastructure) to plan, coordinate, recruit, train, equip, execute and garner support for operations against the U.S., its allies and interests. Clearly, in the information age, our military must adapt to this new domain of warfare."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The online persona project is thought to fall under the domain of Operation Earnest Voice, which oversees Centcom's Information Operations, and in the words of Mattis, "seeks to disrupt recruitment and training of suicide bombers; deny safe havens for our adversaries; and counter extremist ideology and propaganda."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The users controlling the personas would be hidden in a variety of ways, including randomizing the IP addresses they accessed the software with, and "traffic mixing," or blending web traffic with that outside of Centcom to provide "excellent cover and powerful deniability."</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The strategy may sound familiar. Last month, hacker group Anonymous unloaded a batch of 50,000 emails from security firm HBGary, where documents indicated that the firm was in the process of developing their own persona management software. The document outlined some of the proposed strategies for creating verisimilitude:</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> Using hashtags and gaming some location based check-in services we can make it appear as if a persona was actually at a conference and introduce himself/herself to key individuals as part of the exercise, as one example. There are a variety of social media tricks we can use to add a level of realness to all fictitious personas</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">http://www.huffingtonpost.com/2011/03/17/online-persona-management_n_837153.html?utm_source=DailyBrief&utm_campaign=031811&utm_medium=email&utm_content=NewsEntry&utm_term=Daily+Brief</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">dailykos http://www.dailykos.com/story/2011/02/16/945768/-UPDATED:-The-HB-Gary-Email-That-Should-Concern-Us-All</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">perm:</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">http://www.dailykos.com/story/2011/02/16/945768/-UPDATED:-The-HB-Gary-Email-That-Should-Concern-Us-All</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Wed Feb 16, 2011 at 10:56 PM EST</font></div><div><font size="4" face="Times New Roman">UPDATED: The HB Gary Email That Should Concern Us All</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">As I wrote yesterday , there is a leaked email that has gotten surprisingly little attention around here. It's the one where Aaron Barr discusses his intention to post at Daily Kos - presumably something negative about Anonymous, the hacking group. But that's not the email I'm talking about here.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">As I also mentioned yesterday, in some of the emails, HBGary people are talking about creating "personas", what we would call sockpuppets. This is not new. PR firms have been using fake "people" to promote products and other things for a while now, both online and even in bars and coffee houses.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">But for a defense contractor with ties to the federal government, Hunton & Williams, DOD, NSA, and the CIA - whose enemies are labor unions, progressive organizations, journalists, and progressive bloggers, a persona apparently goes far beyond creating a mere sockpuppet.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">According to an embedded MS Word document found in one of the HBGary emails, it involves creating an army of sockpuppets, with sophisticated "persona management" software that allows a small team of only a few people to appear to be many, while keeping the personas from accidentally cross-contaminating each other. Then, to top it off, the team can actually automate some functions so one persona can appear to be an entire Brooks Brothers riot online.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> Persona management entails not just the deconfliction of persona artifacts such as names, email addresses, landing pages, and associated content. It also requires providing the human actors technology that takes the decision process out of the loop when using a specific persona. For this purpose we custom developed either virtual machines or thumb drives for each persona. This allowed the human actor to open a virtual machine or thumb drive with an associated persona and have all the appropriate email accounts, associations, web pages, social media accounts, etc. pre-established and configured with visual cues to remind the actor which persona he/she is using so as not to accidentally cross-contaminate personas during use.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">And all of this is for the purposes of infiltration, data mining, and (here's the one that really worries me) ganging up on bloggers, commenters and otherwise "real" people to smear enemies and distort the truth.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">This is an excerpt from one of the Word Documents, which was sent as an attachment by Aaron Barr, CEO of HBGary's Federal subsidiary, to several of his colleagues to present to clients:</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> To build this capability we will create a set of personas on twitter,? ?blogs,? ?forums,? ?buzz,? ?and myspace under created names that fit the profile? (?satellitejockey,? ?hack3rman,? ?etc?)?.? ?These accounts are maintained and updated automatically through RSS feeds,? ?retweets,? ?and linking together social media commenting between platforms.? ?With a pool of these accounts to choose from,? ?once you have a real name persona you create a Facebook and LinkedIn account using the given name,? ?lock those accounts down and link these accounts to a selected? ?#? ?of previously created social media accounts,? ?automatically pre-aging the real accounts.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Yes!!! That's how democracy and the first amendment are supposed to work.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">In another Word document, one of the team spells out how automation can work so one person can be many personas:</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman"> Using the assigned social media accounts we can automate the posting of content that is relevant to the persona. In this case there are specific social media strategy website RSS feeds we can subscribe to and then repost content on twitter with the appropriate hashtags. In fact using hashtags and gaming some location based check-in services we can make it appear as if a persona was actually at a conference and introduce himself/herself to key individuals as part of the exercise, as one example. There are a variety of social media tricks we can use to add a level of realness to all fictitious personas</font></div><div><font size="4" face="Times New Roman">...</font></div><div><font size="4" face="Times New Roman">HBGary and its subsidiary, HBGary Federal, as well as Berinco and Palantir, employed a lot of extremely qualified people with backgrounds in the NSA and ATT and other major organizations/corporations. These guys are pros.</font></div><div><font size="4" face="Times New Roman">----</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">idea: dataviz of money (and ----) analogous to blood flow in brain catscan</font></div><div><font size="4" face="Times New Roman"></font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">biz: </font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Mark Anderson</font></div><div><font size="4" face="Times New Roman">Staff Writer- Sacramento Business Journal</font></div><div><font size="4" face="Times New Roman">Sacramento cyber security company HBGary Inc. is being bought by ManTech International Corp.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Terms of the deal are not being disclosed.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">HBGary’s office in Sacramento will remain open and its 40 employees are expected to stay with the company, which will now become a division of Fairfax, Va.-based ManTech (NASDAQ: MANT).</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The deal is expected to close in March.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">“This is great news. We have a billion-dollar company backing us,” said Greg Hoglund, founder and chief executive officer of HBGary.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Hoglund started HBGary nine years ago. The company was entirely privately held and was privately financed by its founders.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">ManTech has clients in many departments of the government. Its technologies and solutions are used by the Department of State, Department of Defense, Homeland Security, Department of Energy, Department of Justice and the Federal Bureau of Investigation.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">HBGary has been selling its cyber intrusion detection and forensics suite of products to private businesses, corporations and law enforcement.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">“This expands our opportunities for products and sales,” Hoglund said, adding that both companies will benefit from the merger.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">HBGary will become an integral part of ManTech’s broad cyber security offering, according to ManTech release.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">“This acquisition enhances our capabilities in the growing cyber security market,” said L. William Varner, president and chief operating officer of ManTech’s mission, cyber and technology solutions group, in a statement. “The HBGary leadership team are recognized thought leaders in this market. The combination of ManTech and HBGary will create a broader cyber security solution capability for both our commercial and government customers.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">HBGary’s products search for intrusions and also infections of malicious software on computers and computer networks.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">“Cyber security is getting worse every day,” Hoglund said. “In a large enterprise, intrusion is inevitable.”</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">HBGary products seek out intrusions and reconstruct a timeline of the intrusion to show what was done, how it was done and what was changed.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Sophisticated hackers are not just looking to be malicious, they can be searching out high-value intellectual property such as schematics, legal documents, construction and design information or financial information, he said.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">HBGary’s own email server was hacked a year ago by the anarchist collective of hackers called Anonymous, which found a way into the shared email server of an affiliate of HBGary and published its email online. The now-closed affiliate was called HBGary Federal.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">Interestingly, HBGary saw rapid growth in the year since that it got all the notoriety of having its email server hacked.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">In September, London’s Metropolitan Police Service’s Central e-Crime Unit arrested two men for hacking crimes and computer misuse, including one of the men thought to be associated with the HBGary incident.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">The arrests came as part of an ongoing investigation in collaboration with the FBI, South Yorkshire Police and other law enforcement bodies in the United Kingdom and overseas.</font></div><div><font size="4" face="Times New Roman">
</font></div><div><font size="4" face="Times New Roman">
</font></div></div><div><font size="4" face="Times New Roman">=</font></div>