Revealed: Air Force ordered software to manage army of fake virtual people
These days, with Facebook and Twitter and social media galore, it can be increasingly hard to tell who your "friends" are.
But after this, Internet users would be well advised to ask another question entirely: Are my "friends" even real people?
In the continuing saga of data security firm HBGary, a new caveat has come to light: not only did they plot to help destroy secrets outlet WikiLeaks and discredit progressive bloggers, they also crafted detailed proposals for software that manages online "personas," allowing a single human to assume the identities of as many fake people as they'd like.
The revelation was among those contained in the company's emails, which were dumped onto bittorrent networks after hackers with cyber protest group "Anonymous" broke into their systems.
In another document unearthed by "Anonymous," one of HBGary's employees also mentioned gaming geolocation services to make it appear as though selected fake persons were at actual events.
"There are a variety of social media tricks we can use to add a level of realness to all fictitious personas," it said.
...
As the text explains, the software would require licenses for 50 users with 10 personas each, for a total of 500. These personas would have to be "replete with background , history, supporting details, and cyber presences that are technically, culturally and geographacilly consistent."
It continues, noting the need for secure virtual private networks that randomize the operator's Internet protocol (IP) address, making it impossible to detect that it's a single person orchestrating all these posts. Another entry calls for static IP address management for each persona, making it appear as though each fake person was consistently accessing from the same computer each time.
The contract also sought methods to anonymously establish virtual private servers with private hosting firms in specific geographic locations. This would allow that server's "geosite" to be integrated with their social media profiles, effectively gaming geolocation services.
http://www.informationclearinghouse.inf ... e27522.htm