Archive for the ‘honeypot’ Category

Is kiddie Porn Dead?

April 3, 2009

I recieved the folloowing email at my contact email address.

Dear Sir,

Sorry for being so formal first of all, it’s a force of habit I’m afraid.

I’m a little curious having come across your blog, as to what evidence you have on Level 3, and their connection to CP? (I don’t want CP links – UK laws thankfully prevent my having to investigate the sites themselves, I generally pass them on to a law enforcement “colleague” in the US). I’m also a little curious, now that we in the security community, haveremoved Atrivo/Intercage, as to whether you’ve seen a drop in the number of  CP sites since your posts on Google dorking/hacking? Or whether you are aware of any of the sites owners being charged due to their running such sites?

For clarity, I’m from the UK, and run the hpHosts blacklist. In addition to this, I am involved in malware investigation, and when I do come across them, like to hope that the sites I report, get taken down (it strangely seems harder to get CP sites taken down, than malware sites).

Regards

Steven

Naturally I responded to his sincere view of Governments desire to police the net with my Jaded outlook of the real villain.

Dear Steve:

Obviously I lack the structured formality of the Brits in my writings and see the government as more of an enemy in the area of (CP) kiddie porn.

Check the following post which is about Choopa, one of the biggest porn hosting firms in America.

https://fatsavage.wordpress.com/2007/04/07/new-jersey-%E2%80%93-the-missing-link/

At the end of the post, their cable to the level 3 backbone is described as follows.

“Oh yeah, I forgot to mention that Choopa is so big they are part of the backbone fiber optic network. There cable is officially called “CHOOPA-LLC.car2.Newark1.Level3.net”.

Cut the link and good-by to a major player in kiddie porn (CP).

If your really bored or think anyone will take this crap off line, try the Google search I mention and every page of results has a notice of offensive material. Take the main url and do a Whois and a trace root on the sites. After the trace root takes you to an American location, Google the company name and connect that to a search of criminal complaints.

I would do all that work on a computer without a hard drive using a live Linux cd and don’t be surprised if one of the honeypots takes out your mother board.

Or more simply you could go to the following link and search the sites in the fatsavage/wordpress blog search engine located on my site but before you do, put “Domestic Spying” in my blog search engine to see what I have to say about your privacy after you have visited my site and interacted with it.

When it comes to government protected Kiddie Porn Honeypots, your safest path is walk away and stop caring.

Sincerely,

Fatsavage

Why Fuck Wade Rowland Sanders?

April 1, 2009

Who is this man and why did he plead guilty to Child Pornography?

He was a U.S. Navy Swift boat captain during the Vietnam War, where he earned the Silver Star, Bronze Star and Purple Heart. He retired from the U.S. Navy as a captain. He was chosen by fellow Swift boat veteran John Kerry to introduce him at the 2004 Democratic Convention, when the Senator accepted the presidential nomination.

Previously, he entered the 2000 congressional race in a San Diego district, but withdrew citing lack of funding. He also served as the senior adviser to California Lt. Gov. John Garamendi for Veterans and Military Affairs until the time of his arrest, according to the U.S. Attorney’s office. He was also in the Clinton administration as a deputy assistant secretary of the Navy.

When Garamendi’s office announced his appointment in July 2007, it said he was a practicing lawyer and a community activist. “He is a member of the San Diego Police Department Senior Oversight Committee and has served on many non-profit boards,” the lieutenant governor’s office said.

His name is Wade Rowland Sanders.

FBI agents raided Sanders’ home last May after they suspected his home Internet service account was used to download several pictures and a video showing underage girls having sex with adult men, according to an investigator’s sworn statement. “Sanders admitted that he had downloaded child pornography using the program Limewire but that he deleted the files once he noticed that they had been downloaded,” FBI Special Agent John Caruthers said.

Now for those who don’t know, Limewire is a very insecure file sharing program. A remote attacker can request and read any file on a host running an affected version of Limewire. The files accessible to a remote attacker include all of the user’s private, local files, and any file on the machine if the user has administrator privileges.

In plain English, it doesn’t matter what a person does to delete a file after it’s been downloaded. There is probably a record in the download file and and another in a Temp file where it was viewed after downloading. It doesn’t take a genius to move a file from the Temp file to the “My Documents” folder so any computer personnel for FBI or Home Land Security could make the transfer.

A search of Sanders’ computer found the child porn files saved on his hard drive in two “My Documents” folders. Which is certainly not the default storage place for Windows.

Wade Rowland Sanders admitted to having 600 images of minors on his computer, including a video depicting “several prepubescent females engaged in sexual conduct with an adult male and performing oral sex on one another,” according to a statement from U.S. Attorney Karen Hewitt.

When Sanders, 67, is sentenced on March 30, he could get up to 10 years in prison and be ordered to pay a $250,000 fine.  The minimum sentence for the charge is five years with supervised release for his lifetime and registration as a sex offender, the prosecutor said.

Now a couple of items are strange. The 600 images are about the same number as the Stefano Computer and these are the easiest to find as they are all hashed and archived in the National Archive of Kiddie Porn Pics. Like any other celebrity prosecution by the government, they picked a pillar of the community who is a veteran and had a noble career (like Stephano). I don’t know what Sanders did to become an enemy of the Bush administration but am getting a better idea of what Stephano did.

So why did he plead guilty of possession?

Kiddie porn is such a heinous crime that once you are charged and a story about you developed by an all powerful government, you have no defense. You may as well crawl in a hole in the ground and die. Just plead guilty and done.

As a footnote to planted evidence, this method is far cleaner than the one used against Stephano. In his case, Agent Carter went on line with Stephano’s computer and surfed known kiddie porn sites. He then went to hidden files which were beyond the technological grasp of Stephano and copied the pictures in order to support a warrant to seize the computer and gather evidence that there were 600 pictures in hidden files in cache memory. All in all a pretty primitive method to plant evidence.

In the case of Mr. Sanders, he downloaded a movie from a honeypot which he found offensive enough to delete. Somebody went to the Temp files and moved it into “My Documents” where it was available to a casual observer without going on line.

Oh well Life sucks and then you die.

The End of Kiddie Porn???

March 27, 2009

Since I stopped actively Blogging about a year ago, much has changed and much has stayed the same.  Military Veteran, Charles Stephano, is still incarcerated in a Puerto Rican Jail for an indeterminate term. (That’s two years in jail without ever having been sentenced.)  Now we are not talking about terrorists in Guantanamo, we are discussing a native born American Veteran who never touched another human but was hit by porn loaders on the Internet.

The one thing which has changed is that young-models. org is down off the net and intercage.com is no longer engaged in criminal activity.  It would seem that in the waning days of the Bush Administration some of the truly nasty crap was taken off line (or maybe the code for the pornloader  became so well known that the technology became obsolete).

It is still easy to Google for kiddie porn by just inserting the following in the search bar:

site:*/cgi-bin/ucj/

Your search will take you to a bunch of sites like

http://www.kiddieporn.com/cgi-bin/ucj/etc.  (not an actual site)

Take off  the garbage at the end  and visit the site home page i.e.

http://www.kiddieporn.com

For each page of results, you will find at least one site with enough kiddie porn to send you to jail.  (usually about one site per page of results)

The sad part is that Google could easily block this search and make access to kiddie porn a little more difficult.

A spot check shows that there are still plenty of Kiddie porn sites on line and only users of this crap are going to jail.  Web Hosting Companies and backbone carriers operate with immunity.  Well even if the government is not working to take down kiddie porn, the economic community seems to be rejecting the wages of sin.  When I first mentioned Level 3, a carrier and host of kiddie porn,  the stock was valued at $6.38. Last week the stock was 70 cents and it’s been as low as 57 cents.

So the more things change the more they stay the same.

Success??

October 9, 2008

I can’t believe it.  Young-models.org is actually offline.  I have hammered this site for 18 months identifying hosting and backbone carriers and even companies profiting from kiddie porn. This is one nasty and very well protected kiddie porn site that has been protected by the government for about 5 years and it’s finally down. Good riddance!!

Is this just a temporary ploy to reintroduce Bush/McCain as the new McCain/Palin moral majority to divert attention from the economic collapse of the Republic of Texas formally know as the United States of America??

Stock Review – LVLT- Level 3 Communications

July 24, 2008

Since I started writing in this blog again, I started reviewing old posts and one of the things I was curious about was how jaded is Wall Street.

One of the first players I identified in the Kiddie Porn Industry was Level 3 Communications with the following post. At the time the stock price was $6.26 and it’s easy enough to check both the blog date and stock price. Level 3 was identified as a key player in delivering kiddie porn including the establishment of direct cable to the Host and corporate acquisitions which facilitated Kiddie porn delivery.

The Players: Level 3

April 6, 2007

About six weeks later, I did a post on the government protection of and subsidies for Kiddie porn and once again identified Level 3 as a beneficiary of these subsidies. The stock price was $5.36 per share.

Your Tax Dollar’s at Work?

May 15, 2007

On Septemnber 11, 2007, when the price had declined to $4.72, I clearly identified Level 3 as a direct investment in Kiddie porn.

Level 3 – An Investment in Kiddie Porn!

September 11, 2007 4.72

Since that time the stock has declined to $3.11 or less than half when first identified as a kiddie porn supplier or a drop of over 50%. As a benchmark, the Dow industrials have dropped less than half suffering about a 20% loss.

Now before Wall Street gets too smug and starts basking in moral superiority, I might point out that 94% of all their stock is still institutional holdings and still in your pension fund.

So who’s profiting from Kiddie Porn?

You probably are!

Independence Day

July 22, 2008

This case reminds me of the movie “Independence Day” where the space ship lays dormant for 50 years and all of a sudden jumps to life. Well, this hasn’t taken quite as long. I stopped writing in April and and nothing much happened with traffic dwindling down to 40 hits a day. Actually, I surprised it was that much with no new posts and Google content filtering there was very little reason for even my most devoted fans to come back. Then last week all hell broke loose on all fronts.

The lawyer for the defense called. He had a virus which he and his trial expert didn’t know how to get rid of. I mean, that’s sick. Here we have the trial of this century invoking the Patriot Act, Protected lying Federal witnesses, planted evidence and a mockery of a trial and the lawyer and his expert can’t protect a computer from a virus or get rid of it once it’s infected. The lawyer on this case is a fucking disgrace but that’s another story.

This provoked me to check my blog and all of a sudden I find my traffic has jumped four fold and I found the reason why. Apparently, the feds have a new tactic in kiddie porn prosecutions. instead of fighting my blog, they and Google seem to have embraced it as a weapon in the war on kiddie porn. When you now Google a kiddie porn site, I have commented on or even visit Alexa to find out about it my comments are well represented in the top 10. Actually, this is a smart move on the part of the Feds. Regular readers know that this blog has documented all the involuntary ways to get kiddie porn on your computer. But for true perverts, that defense is gone.

I mean, if you Google young-models.org and still go there after reading comments that the site is illegal, deserved to be nuked and is blatant born in America kiddie porn from the Federal Archives, you not only deserve to go to jail but deserve to go to hell as well.

A Final Chapter????

April 9, 2008

Dear Reader,

I am posting a copy of the cover letter for a package that I have sent to Judge Raymond Finch documenting Shannon Perkins perjury. Pretty much it proves what regular visitors to this blog already know: Federal Expert Witnesses lie to get a conviction, and the Attorney on this case is a fuck-up. Meanwhile Charles Stephano rots in Jail and the expert moves on to bigger and better cases.

The principle point I would like to convey to all is that computer evidence is not immutable when presented by the Feds. You can find evidence of keystroke loggers, spyware and shutdown programs. You can also find the trail of planted evidence. If you can explore all of this “secret information” at a trial and the expert lies to get a conviction, you stand an excellent chance of using the logs to find evidence of perjury and also setting up for a dismissal or retrial if you don’t win.

I will probably pass this along to CNN and the Electronic Freedom Foundation to see if they can bring this type of prosecution to the light of day. While it’s common knowledge in our community among Judges and Lawyers that Federal Experts lie, I believe the general public doesn’t even dream of how widespread and pervasive the practice is.

At any rate, I have worked on this for about a year and am bored with it. As I have unfortunately discovered; resistance is futile, knowledge is soporific.

Sincerely,

The FatSavage

PS I’m glad I’m old – it really does make it easier to cope with the Brave New World of electronic surveillance of all Americans

Google Dorking 4 Kiddie Porn

February 11, 2008

When you Google Dork for porn, you can never be quite sure of the result you will get and not all Google based searches are created equal.  Now while Google dorking for kiddie porn sites with one search I did hit the mother load of hundreds of sites where every page of 10 results had a warning at the bottom of the page that some pages had been removed because of kiddie porn complaints.  When I clicked on the complete URL, most pages came up dead ends or redirected to advertising content.  However, when I just put the main domain name in the URL locator, many of the sites showed suspiciously young girls with a disclaimer they were all 18 and many had a ucj cookie the sames as other “go to jail” type sites. Usually, a page would yield three  domains suspected of hosting Kiddie Porn.

I thought that the search was;

site:*/cgi-bin/ucj/

Now the reason I couldn’t initially repeat the experiment was because when I went back I tried to play it safe. I went to scroogle.org and did my annomyuous surfing only to turn up a list of crap domains which took you to them phony advertising dumps. Next, I used Firefox and killed all cookies only to get the same list of crap.

I tried Lynx on a live cd and got a very evil list but I was forced to yield to cookies to get in.  Well, once your screwed, you may as well go all the way.  When, I allowed cookies in the machine, bam I was back to the Mother of all Kiddie Porn Portals – straight from the fine folks at Google.

The only problem is they will have this search and my cookies on file until 2038 when it finally expires. 

You know you can trust Google to give you any result you want.  You just can’t do it annomyously.

Beyond Google – Viral Traffic

February 6, 2008

If your discussing matters which are touchy to our government, you really have to expect their best effort at suppressing the information. It’s no secret that Google is cooperating with China in suppressing knowledge on a broad range of topics. It’s also obvious that as a socially responsible corporation, they probably hide or fail to list content on a broad range of topics. When they fail to list a site page, they sometimes let you know that the supporting documentation is at chillingeffects.org but only when the content is totally illegal.

For legal but sensitive material, they don’t really acknowledge content filtering but when caught, just release a statement about unintended errors which led to technical difficulties and an inability to find a specific YouTube movie etc. In our particular case, serious content filtering started at my Fatsavage blog with a condemnation of a known kiddie porn site, youngerbabes.com, which is still online. The technical proof of content filtering is offered on this blog.

Of course the immediate effect of content filtering is that your traffic gets slammed and you lose visitors, but there is an obvious solution, just keep on writing. My traffic at fatsavage has started rising again, and the site is ranked in the top million of 20 million sites monitored by quantcast.com. Yeah, I get more traffic if I avoid censored topics, but I’m not a singing caged bird.

Interestingly, my new exulted status is almost independent of Google referrals (Correlation Coefficient 33%) and much more dependent on loyal visitors.

This post is being published at both Fatsavge and Tigerstail Blogs, not because I’m lazy, but because I want the information to get out. If Google were bothering to feed my blog, this would almost certainly get this post de-listed for laziness or plagiarism. However, since they are no longer doing a great job for my traffic, it doesn’t matter which rules I break.

Google Content Filtering is Specific!

February 1, 2008

You might expect that a search engine developed by a brilliant guy (Sergi Brin) attending a fantastic school (Stanford) would be cerebral and that is the case. College professors who study such things say the top 5 posts on any search term at Google are far superior in content, spelling and grammar than the bottom and that fresh verbal content gives a higher rating than superior graphics.

With this in mind, it’s easy to see how the Fatsavage blog makes it up to the top ten when discussing kiddie porn. After all, there is very little poetic prose or any kind of prose at all. The vocabulary is quite restricted and in the range that a chimpanzee could learn. Youngerbabes.com has about 250 unique words on the home page and a well educated chimp can have a vocabulary between 250 and 500 words.

Still, this is a site which is in the top 4300 in the world and about the same as thehun.net (3900) or elephantlist.com (3200) which are clearly legal porn portals. Putting this popularity into numbers, one million people a month visit this site and about 4000 are addicted enough to visit daily. (Don’t worry, I’m sure there all being observed and will get a visit from the man in the near future.) Joking aside, that happens to be about the number of child pornography cases tried each year, so you do know where they find them.

Thus, it’s easy to conceive that a highly negative post about youngerbabes.com gets about about 1000 hits in the two days after posting before it is filtered out of existence and never gets more than one or two a day after that. My two favorite and very popular rants which got virtually no traffic after the first three days are:

Youngerbabes Suck Bad

Youngerbabes, A curse on everyone Involved!

Of course, linking to them will relegate this post to Search Siberia, despite the interest in the subject. Seems to me if the Government and Google really wanted to restrict access to illegal kiddie porn, there would be a bigger effort to get out the word on youngerbabes.com

On the other hand, if this is a government Honeypot tracking domestic and foreign nationals, then there would be a very focused effort to filter out negative comments which warn people off.

Well, it’s your life so you can decide.