[7466] in cryptography@c2.net mail archive
Re: FBI announcement on email search 'Carnivore'
daemon@ATHENA.MIT.EDU (Steven M. Bellovin)
Wed Jul 12 19:49:40 2000
From: "Steven M. Bellovin" <smb@research.att.com>
To: Marc Horowitz <marc@MIT.EDU>
Cc: Meyer Wolfsheim <wolf@priori.net>,
"P.J. Ponder" <ponder@freenet.tlh.fl.us>, cryptography@c2.net,
Law & Policy of Computer Communications <CYBERIA-L@listserv.aol.com>
Mime-Version: 1.0
Content-Type: text/plain
Date: Wed, 12 Jul 2000 16:25:06 -0400
Message-Id: <20000712202507.10C9635DC2@smb.research.att.com>
In message <t53sntfayrj.fsf@horowitz.ne.mediaone.net>, Marc Horowitz writes:
>"Steven M. Bellovin" <smb@research.att.com> writes:
>
>>> In this situation, everyone's email has to be scanned in order to
>>> isolate the desired traffic.
>
>I've seen this claim before, and I don't think it's true. It's like
>saying to wiretap my phone calls, you need to tap an entire fiber, and
>do voiceprint ID to find my calls. It's much easier and more
>effective only to tap my line.
>
....
>
>In general, I can't see why the FBI needs tools like Carnivore to tap
>email. The store-and-forward nature of email means there's a place
>you can go to find the email, and the structure of most email systems
>means there's a place which contains only the email for that user.
Right -- but this is a network device. From the AP wire:
Marcus Thomas, who heads the FBI's cybertechnology section,
told the Wall Street Journal that the bureau has about 20
Carnivore systems, which are PCs with proprietary software.
He said Carnivore meets current wiretapping laws, but is
designed to keep up with the Internet.
``This is just a specialized sniffer,'' Thomas told the
Journal, which first reported details about Carnivore.
If the FBI says that it's a sniffer, rather than something that looks
at spool files, I'm not really in a position to argue...
