利用热门手机软件保安漏洞 美英通过“愤怒鸟”等收集情报 (E/C)

357 views

利用热门手机软件保安漏洞 美英通过“愤怒鸟”等收集情报 (E/C)

(华盛顿综合电)“愤怒鸟”(Angry birds)和谷歌地图等热门手机软件,已经成为美国国家安全局和英国政府通信总部的情报收集园地。

《纽约时报》引述斯诺登外泄的资料说,美英情报机构开发出从个人手机程序中窃取个人资料的技术,玩家下载并使用有保安漏洞的手机程序,包括年龄、性别、所在位置等都会曝光。

报道说,美国国家安全局前雇员斯诺登泄露的几十份机密文件披露,美国国安局和英国政府通信总部对新一代手机流入互联网的大量个人数据感兴趣,这类数据规模日益庞大,成了收集情报的资源,其中智能手机存有“漏洞”的应用程式,能够透露用户的地点、年龄、性别和其他个人资料。

美英情报机构早在七年前就联手,从几十款手机软件中收集用户数据,双方还交换集体的收集方法。虽然目前仍不清楚这种数据收集的规模有多大,不过iPhone手机和安卓手机是收集的来源之一。

爆料文件没透露多少手机用户受影响

斯诺登的爆料文件并没有透露,有多少个手机用户受影响,或当中是否包括美国公民。

美英两家机构对谷歌地图手机软件特别有兴趣,这是因为它能准确地显示用户地点。报道也说,利用手机上网,在面簿、推特等社交网站发送照片和其他联络资料等,都成了情报收集的目标。

至于“愤怒鸟”,英国政府通信总部在2012年一份机密报告中,就记录当局如何利用“愤怒鸟”手机游戏来收集用户数据。

“愤怒鸟”是芬兰Rovio公司开发的,至今下载量超过10亿次。该公司表示,他们不知道美英情报机构利用“愤怒鸟”来收集情报。

斯诺登去年揭发美国的监控计划后逃离美国,目前在俄罗斯寻求庇护。美国当局已经以间谍罪名对他提出控诉。不过随着监控计划曝光,美国遭受国内和国际社会的指责,迫使奥巴马总统本月17日宣布新的改革监控方案,包括禁止监听美国盟友国的领导人和对收集电话通话记录设限。

对于手机软件成了情报收集目标,白宫发言人卡尼说,美国监控机构只对那些对美国构成安全威胁的外国情报目标如恐怖分子及不良分子等收集情报,不会收集一般美国民众的资料。

Angry Birds come crashing down: Rovio's site hacked after NSA spy scandal revealed it was a 'leaky app' used to gather data on users

·Site hacked early on Wednesday - but Rovio claim 'no user data' was at risk

·Claims made in documents provided by Edward Snowden and published in The New York Times, The Guardian, and ProPublica

·Location sharing apps such as Facebook, Flickr and Twitter are also implicated

The web site of Angry Birds app maker Rovio has been hacked two days after reports that the personal data of its customers might have been accessed by U.S. and British spy agencies.

Rovio spokeswoman says the hacking lasted a few minutes early Wednesday and that end-user data 'was in no risk at any point.'

The hacking came after documents leaked by former National Security Agency contractor Edward Snowden suggested that the NSA and Britain's GCHQ had been able to extract information through a host of smartphone apps across the globe, including the Angry Birds game franchise.

Rovio has denied the claims, saying it does not "share data, collaborate or collude" with any spy agencies and that it would re-evaluate third-party advertising networks.

'Our fans’ trust is the most important thing for us and we take privacy extremely seriously,' said Mikael Hed, CEO of Rovio Entertainment.

'We do not collaborate, collude, or share data with spy agencies anywhere in the world.

'As the alleged surveillance might be happening through third party advertising networks, the most important conversation to be had is how to ensure user privacy is protected while preventing the negative impact on the whole advertising industry and the countless mobile apps that rely on ad networks.

'In order to protect our end users, we will, like all other companies using third party advertising networks, have to re-evaluate working with these networks if they are being used for spying purposes.'

Popular smartphone apps such as Angry Birds and Google Maps are being used to secretly collect personal data on their users, it has been claimed.

According to documents provided by Edward Snowden, location-sharing apps like Facebook, Flickr and Twitter have also been implicated, sharing data with the National Security Agency (NSA) and Britain's Government Communications Headquarter (GCHQ).

It is claimed the system has been in place since 2007, and also uses apps to gain access to address books and friend lists.

Developers today slammed the move as 'unacceptable.

'Uninhibited collection of consumers’ personal data by governments hacking into apps is unacceptabl,' said the App Developers Alliance President Jon Potter.

'Developers are surprised and disappointed to learn that personal information entrusted to them by users has been secretly collected and stored,'

'Consumer trust is paramount in the app industry.

'This surveillance damages our entire industry and undermines the hard work of app developer entrepreneurs everywhere.'

The latest claims have been published in The New York Times, The Guardian, and ProPublica.

The efforts were part of an initiative called 'the mobile surge,' according to a 2011 British document seen by the New York Times, an analogy to the troop surges in Iraq and Afghanistan.

It says 'One N.S.A. analyst’s enthusiasm was evident in the breathless title — “Golden Nugget!” — given to one slide for a top-secret 2010 talk describing iPhones and Android phones as rich resources.'

The top-secret flow charts produced by the British agency in 2012 reveal incoming streams of information taken from from smartphone traffic by the Americans and the British.

The streams are divided into 'traditional telephony', and others marked 'social apps,' 'geo apps,' “http linking,' webmail, MMS and traffic associated with mobile ads, among others.

It is believed the mobile app initiative between the two spy agencies has been up and running since 2007, the year the NSA saw its budget balloon from $204 million to $767 million.

It is not yet known whether any mobile app companies, like Angry Birds-creator Rovio, were aware of the operation.

'Nothing in the secret reports indicates that the companies cooperate with the spy agencies to share the information; the topic is not addressed,' The New York Times reports.

'Rovio doesn't have any previous knowledge of this matter, and have not been aware of such activity in 3rd party advertising networks,' Saara Bergström, Rovio's VP of marketing and communications, told The Guardian.

'Nor do we have any involvement with the organizations you mentioned [NSA and GCHQ].'

Read more: http://www.dailymail.co.uk/sciencetech/article-2548134/Angry-Birds-come-...
Follow us: @MailOnline on Twitter | DailyMail on Facebook

图① Claims made in documents provided by Edward Snowden claim popular apps such as Angry Birds (pictured) are being used to siphon up user's data.
图② The claims are made in documents provided by Edward Snowden, and also implicate service such as Facebook and Twitter, which contain a user's location as well as their friends list.