cryptogon.com

Chet Uber, the director of Fort Pierce, Fl.-based Project Vigilant, says that he personally asked Lamo to meet with federal authorities to out the source of a video published by Wikileaks showing a U.S. Apache helicopter killing several civilians and two journalists in a suburb of Baghdad, a clip that Wikileaks labelled “Collateral Murder.” Lamo, who Uber said worked as an “Adversary Characterization” analyst for Project Vigilant, had struck up an online friendship with Bradley Manning, a former U.S. Army intelligence analyst who currently faces charges of releasing the classified video.

In June, Uber said he learned from Lamo’s father that the young researcher had identified Manning as the video’s source, and pressured him to meet with federal agencies to name Manning as Wikileaks’ source. He then arranged a meeting with employees of “three letter” agencies and Lamo, who Uber said had mixed feelings about informing on Manning.

“I’m the one who called the U.S. government,” Uber said. “All the people who say that Adrian is a narc, he did a patriotic thing. He sees all kinds of hacks, and he was seriously worried about people dying.”

Uber says that Lamo later called him from the meeting, regretting his decision to inform on Manning. “I’m in a meeting with five guys and I don’t want to do this,” Uber says Lamo told him at the time. Uber says he responded, “You don’t have any choice, you’ve got to do this.”

“I said, ‘They’re not going to throw you in jail,'” Uber said. “‘Give them everything you have.'”

…

According to Uber, one of Project Vigilant’s manifold methods for gathering intelligence includes collecting information from a dozen regional U.S. Internet service providers. (ISPs) Uber declined to name those ISPs, but said that because the companies included a provision allowing them to share users’ Internet activities with third parties in their end user license agreements (EULAs), Vigilant was able to legally able to gather data from the Internet carriers and use it to craft reports for federal agencies. A Vigilant press release says that the organization tracks more than 250 million IP addresses a day and can “develop portfolios on any name, screen name or IP address.”

“We don’t do anything illegal,” says Uber. “If an ISP has a EULA to let us monitor traffic, we can work with them. If they don’t, we can’t.”

And whether that massive data gathering violates privacy? The organization says it never looks at personally identifying information, though just how it defines that information isn’t clear, nor is how it scrubs its data mining for sensitive details.

ISP monitoring is just one form of intelligence that Vigilant employs, says Uber. It also gathers variety of open source intelligence and numerous agents around the world. In Iran, for instance, Uber says Vigilant created an anonymous Internet proxy service that allowed it to receive information from local dissidents prior to last year’s election, including early information indicating that the re-election of Mahmoud Ahmadinejad was skewed by fraud.

Uber, who formerly founded a private sector group called Infragard that worked closely with the FBI, compares the organization’s techniques with Ghostnet, the Chinese cyber espionage campaign revealed last year that planted spyware on computers of many governments and NGOs. “We’ve developed a network for obfuscation that allows us to view bad actors,” he says.

Uber says he’s speaking publicly about Vigilant because he wants to recruit the conference’s breed of young, skilled hackers. By July 2011, the organization hopes to have more than 1,300 new employees.

Vigilant was described by its chief Chet Uber as a sort of cyber “A-Team” taking on terrorists, drug cartels, mobsters and other enemies on the Internet.

“We do things the government can’t,” Uber said on Sunday. “This was never supposed to have been a public thing.”

Vigilant is an alliance of slightly more than 600 volunteers and its secret ranks reportedly include chiefs of technology at top firms and former high-ranking US cyber spies.

The group scours Internet traffic for clues about online attacks, terrorists, cartels and other targets rated as priorities by members of the democratically run private organization.

Vigilant also claimed to have “collection officers” in 22 countries that gather intelligence or coordinate networks in person.

“We go into bars, look for lists of bad actors, get tips from people…” Uber said.

“But, a significant amount of our intelligence comes from our monitoring the Internet. We are looking at everything on websites, and websites are public.”

He was adamant that Vigilant stays within US law while being more technologically nimble than government agencies weighed down by bureaucracy and internal rivalries.

“Intelligence is a by-product of what our research is,” Uber said. “Our research is into attacks, why they happen and how we can prevent them.”

Vigilant shares seemingly significant findings with US spy agencies, and is so respected by leading members of the hacker community that Uber was invited to DefCon to recruit new talent.

Uber said that Vigilant came up from underground after 14 years of operation in a drive to be at “full capacity” by adding 1,750 “vetted volunteers” by the year 2012.

“We are good people not out to hurt anybody,” Uber said. “Our one oath is to defend the US Constitution against all enemies foreign and domestic.”

Anything that can be looked at legally on the Internet is fair game for Vigilant, with email and encrypted transactions such as online shopping off limits.

The holy grail for Vigilant is finding out who is behind cyber attacks. Inability to figure out who launches online assaults routinely leaves companies or governments without targets to fire back at.

“This is a completely unsolved problem,” Uber said. “We’ve probably been working on it as long as the government has.”

Vigilant has developed its own “obfuscation” network to view “bad actors” on the Internet without being noticed.

He told of uncovering evidence of fraud in the latest presidential election in Iran while testing a way for people to slip information out of countries with oppressive regimes.

The information obtained was given to US officials.

“They expected fraud but they didn’t expect the wholesale fraud that we passed along,” Uber said.

Vigilant’s network claimed a role relaying Twitter messages sent by Iranian protestors in the aftermath of the election.

The group is bent on gathering intelligence by any legal means and then putting the pieces together to see bigger pictures.

“The wholesale tapping of the Internet around the world can’t be done,” Uber said. “We are looking at what people write, how people attack, how attacks happen…we don’t care who that person is.”

Uber is working on a mathematical model to spot when terrorist organizations are recruiting teenagers online. The group has 100 projects in the works.

“Our end goal is to provide software as a service to government agencies so we can get out of the business of intelligence,” Uber said.

Along with technology savants, Vigilant is recruiting sociologists, psychologists, and people with other specialties.