StormWarning’s Counterterrorism

This is critically important.  Throughout the days and months since September 11th, we (the "good guys") have been able to intercept messages from the "bad guys" and often, interfere with their plans.  Earlier this week it was revealed that the jihadists may have a new tool, "the first Islamic computer program for secure exchange on the Internet."  The fact that it is written in Arabic is expected to make it "user friendly" to the Arabic-speaking terrorist.

Andy Cochran at the Counteterrorism Blog posted this article written by Jim Melnick, iDefense Intelligence Team, VeriSign, Inc. about this on January 26th in his post, Internet Security Company Cracks Special Jihadist Software.  In his post, he describes how a pro-terrorist group, "Global Islamic Media Front" (GIMF) has developed "Mujahedine Secrets," an encryption program that is portable (can be used form a USB memory stick) and will cloak the identity of those who use the program, and may
make it increasingly difficult or even impossible for investigators to
track down the source of activity further than the Internet café itself.

It is critical to remember here that the jihadists that we face today, are no simple terrorist group.  Many are college educated, many have advanced degrees and often have degrees in engineering or computer science.  These terrorists are not just suicide attackers!

Analysis: Encryption tool aids terrorist cause

• "Mujahedin Secrets" by its authors, is an executable file that can be
  installed on removable media, like a thumb drive, and used on computers
  in libraries other public places to encrypt e-mail or other files being
  sent over the Internet…

• "The program’s ‘portability’ as an application (not requiring
  installation on a personal computer) will become an increasingly
  desirable feature, especially considering the high use of Internet
  cafés worldwide by pro-terrorist Islamic extremists…"

• "Mujahedin Secrets," which can be downloaded for free, offers "the five
  best encryption algorithms, with symmetrical encryption keys (256 bit),
  asymmetrical encryption keys (2048 bit) and data compression…"

• ZDNet blogger Mitch Ratcliffe: "The difference is an Islamist skin, which seems more a gimmick to inspire confidence in the
  software than a guarantee it will be effective."

Ratcliffe said
that the release of the program would likely revive a debate about the
ethics of publicly releasing encryption software, which makes Internet
communications essentially not interceptable.

Growing Technical Competance

• Melnick said another unusual, though not unique feature of the
  software, in addition to its portability, was that it did not supply
  so-called "public keys." Keys are the code that allows encryption users
  to talk to each other. Possessing a key does not allow anyone to
  decrypt messages sent using it, but does mean the user can set up a
  secure session with anyone else using the same key.

"Most
encryption packages are designed to be interoperable," he said, but
this program is not. As a result, users "must get the key to decrypt
email (or other files) from the person who sent it or through other
private means."

Also see:
Al Qaeda’s Tech Traps
Investigations, arrests highlight how technology aids and weakens terror network.
Tom Spring, PC World
Wednesday, September 01, 2004 12:00 AM PDT
"Al Qaeda operatives may be comfortable crossing ancient deserts and
employing guerrilla tactics, but they’re also adept at using with the
Web and computers."

What we see are men (and women) willing to commit suicide in the name
of jihad.  What we see are terrorists in robes and who wear beards, maybe ride camels and hide in caves.
What is often forgotten is that in their hierarchy, the terrorists are
well educated and capable of using technology and the media to their
advantage in ways unlike any enemy has ever been able.

Current Affairs, International Issues, National Security, Opinions, Technology