Oh yeah, of course. Maybe
we
were bugged. That'd be a weird form of humor: to use a bug to spy on someone who'd found a leak about bugs and then leak the leak to the press using the bug... It was weird enough that it made me feel dizzy if I thought about it enough. I decided to fall back on Occam's Razor. The idea that someone blabbed was a
lot
simpler.
> I know I can trust you and the rest of our crew and Tasty Ducks
-- that was Ange --
> but what about all your friends? -Nasty Locomotive
> Wait why should we trust YOUR crew? Who died and made you infallible? -Restless Agent
That was one of the people Jolu had brought in, though I didn't know anything else about him (or her). Jolu and I had decided it'd be better if we kept everything on a need-to-know basis. I didn't need to know who Restless Agent was, just that the handle represented someone Jolu trusted utterly.
But Jolu or no, I found myself getting ready to clobber this Restless Agent person. How
dare
anyone call Darryl and Van and Ange and me into question? Ange, meanwhile, had already read the message on her screen. She was sitting cross-legged on my bed, hair in her eyes, bent over her laptop. As soon as my fingers began to pound angrily on the keyboard, she said, "Woah there, hoss. Calm down."
"But --" I said.
"I know, I know. Someone is wrong on the Internet. Count to ten. In ternary."
"But --"
"Do it."
"One. Two. Ten. Eleven. Twelve. Twenty. Twenty one. Twenty two. One hundred. One oh one. One oh two." I stopped. "Wait, I lost count. Is one-oh-two ten or eleven?" I could count in binary when I was angry, but counting in ternary -- base three -- took too much concentration. "Fine, you win. I'm calm."
> You're right, you can't. -Tasty Ducks
> You don't know us and we don't know you. And we can't keep this up if someone here is showing off by letting blabby writers into the darknet. So what do we do? Shut it down? -Tasty Ducks
> I could turn on logging and make it visible to everyone. Then we'd know who got to see every document. If a doc leaked we'd have the list of everyone who saw it. If enough docs leaked we'll be able to narrow down the list and find the one person who saw everything -Swollen Rabbit
> Assuming only one person is blabbing -Nasty Locomotive
> Yeah maybe we're all running our mouths -Poseidon Snake
That was another of Jolu's buddies.
> Logging sounds like a good plan. If we can all see what everyone's done, it'll keep us all honest -Nasty Locomotive
> Unless I'm the rat in which case I could be editing the logs and you suckers would never know -Swollen Rabbit
> Ell Oh Ell. You're such a comedian. If you're the rat we're all dead meat. Don't be the rat, dude -Tasty Ducks
"All right, fine, that's settled for now," I said. "Thanks for keeping me from turning into Angry Internet Man."
"Any time. It was kind of weak for you to just say 'how can we trust your friends' where everyone could see it."
I wanted to argue, but it wasn't really an arguable point. After all, I'd lost my cool when Restless Agent did exactly the same thing.
"Yeah, okay, fine." I paged up and down through the monster spreadsheet with its 800,000-plus rows. "So what are we going to read through today, anyway?"
"More of the lawful intercept stuff, I guess. There's hundreds more suggested docs. Since the story's out there, it'd make sense to find out more."
"Okay," I said. "You take suggested docs from the first half, I'll take the ones from 400,000 onward. My mom says you're welcome to stay for dinner, by the way."
"Deal," she said, and we got to work.
One thing about the darknet docs I should probably mention: they were mostly unbelievably boring. Rows of numbers. Indecipherable memos written in bureaucratic jargon, laden with acronyms and names of people and agencies I'd never heard of. It was tempting to skip over these and look for juicy ones -- or at least ones I could understand -- but every so often I'd find something that made some other doc make sense, a piece of the puzzle falling into place, and I'd be glad I'd read it.
For example, there was a list from the San Francisco Unified School District about schools that had participated in a "laptop anti-theft trial" that had run the year before. It used some kind of phone-home software on all the school-issued laptops that checked in with the school district every day or two. The district used it to track down stolen laptops -- getting IP addresses from the software and turning them over to the cops. I noted without much interest that Chavez High was on the list of trial sites, the name standing out immediately, seeing as how I'd carried a backpack with the school's name through four years of attendance.
But ten or fifteen documents later, I found myself looking at a brochure for a product called LaptopLock, which was the product used in the trials. I wondered why Jolu's algorithm had tagged this stuff as relevant to the lawful intercept documents -- which keywords had made it jump out. It turned out that the matching words were "covert activation" and "webcam." "Covert activation" was self-explanatory -- if you had software that phoned home after a laptop was stolen, you wouldn't want it to advertise that that was what it was doing. "Attention thief: I am about to tell the police your IP address. Do you want me to continue? [OK] [CANCEL]."
But why would you want to activate the webcam on a stolen laptop? I paged through the brochure. Oh, right, to take pictures of the thief. The software could covertly activate the webcam -- turn it on without turning on the little "camera on" light -- take a pic and silently send it back to the school board. Well that
was
creepy. I wondered if any students had ever found a password and login and used that little "feature" to spy on other students. My laptop sat open on my desk all the time -- when I was sleeping, when I was getting dressed, when Ange and I were --
Yikes.
So then I went digging for more docs. I had a product name now, something I could use to search on, and hoo-boy were there a
lot
of hits for LaptopLock in the darknet docs. I did my sort-by-date trick and found myself reading through emails from a worried IT manager at the San Francisco Unified to her boss about the fact that there was a principal who was using LaptopLock's administrative interface to watch students -- not laptop thieves -- at all sorts of hours, including early in the morning (when they might be getting dressed), and late at night (when they might be sleeping).
The IT manager had looked at the principal's shared-drive folder and found thousands of pics of students and their families, sometimes naked, sometimes asleep. There was also audio and video of students and their parents having private conversations. The IT manager's boss was furious -- because the IT manager wasn't supposed to be "snooping" on school principals. The argument got more and more vicious, as the IT manager pointed out that her snooping was nothing compared to this principal, and ended with the IT manager's resignation letter. I felt bad for her -- she was an honorable geek, and it wasn't easy to find new jobs in this bad old modern world of ours.
It wasn't just the San Francisco United School Board where a principal got a little power-crazy with the old LaptopLock control panel. It turns out that pretty much every school district had someone (or a few people) in positions of power who felt that spying on students was part of their job. But in the case of the San Francisco Unified School District, that someone was a certain school board member named Fred Benson.
Once upon a time, Fred had been a vice principal at Chavez High, and from that lordly height, he'd presided like a warden or a king, doling out harsh justice against anyone who offended his delicate sense of conservative morality.
Such as, ahem, me.
But old Fred had "retired" when it became clear that San Francisco and California were no longer going to put up with a city occupied by the forces of "law and order" -- that is, the torturing, kidnapping, lying paramilitary who'd taken the city hostage in the name of "protecting us from terrorism." It had been
so
sad to see him pack up his desk and hit the bricks, just another casualty of the war on the war on terror.
But Fred was a retired athlete, the kind of thrusting, vigorous guy who just can't take it easy. He'd run for the school board -- unopposed, except for a crank candidate who'd been convicted of three counts of felony fraud in a real estate swindle, who nevertheless got nearly half the vote -- and had been collecting a tidy public salary and enjoying his ascent to the exalted pinnacle of the education system by bossing around teachers and trying to impose his "leadership style" on the whole school district.
In case you didn't catch it, I don't like this guy.
But even I was surprised to discover that old Fred was such a prolific user of the district's LaptopLock system. After all, he wasn't responsible for students at all, but look at that, he requested so many specific LaptopLock activations that the district's IT department had given him his own login, to save on work. Someone in that department wasn't happy about it, and that person had helpfully logged Fred's many, many,
many
uses of the system.
Did I say uses? I mean
abuses.
"Come on, we've
got
to leak this," I said. "I mean, come
on
, Ange. Seriously? You don't think I should go public with this?"
"No, Marcus, I think it's a really stupid idea. You've just got through yelling at everyone about a leak. Once you do it, everyone'll do it. We agreed that we'd catalog the whole dump, decide on the highest priority stuff, then publish it in a way that kept us all safe. If you get us all busted tomorrow, Masha and Zeb are doomed. Hell,
we're
doomed. You don't have any right to put us all in jeopardy just to settle a score with some vice principal you have a hate-on for."
"He's a Peeping Tom! It's not just a personal vendetta. People have the right to know that this guy is spying on their kids. That could have been me, Ange. I've still got friends at Chavez High, kids that Benson
hates
-- you can bet he's all over them, night and day."
"You're just picturing him sitting in his house and rubbing his hands and getting off on all his power and secrecy, admit it. Benson's not the worst monster in these files. Look at what the others have been up to. Look at 439,412."
I scrolled to the line, read the summary:
STATE DEPARTMENT BILL OF LADING. FREIGHT FORWARDING FOR LAWFUL INTERCEPT APPLIANCE TO SYRIA. SEE 298,120
And 298,120:
EMBASSY STAFF INTELLIGENCE REPORT ON TORTURE-MURDER OF DISSIDENTS CAUGHT WITH LAWFUL INTERCEPT APPLIANCE
"Oh," I said.
"Yeah," she said. "Oh. So cut it out. Maintain discipline. This isn't kid's stuff, it's the big leagues."
And before I had a chance to get angry with her -- really angry, the kind of angry you get when you've been totally wrong and someone calls you out and you don't have any excuse so you get mad instead -- my mom called up the stairs, "Marcus, Ange, time for supper!"
There'd been a time when we'd had "family dinner" practically every night -- either something that my mom or dad cooked in a huge frenzy of pots, pans, clatter, and smells, or, if everyone was too tired, something from a delivery restaurant. I'd even been known to cook from time to time, and I liked it, though it took a lot of energy to get started. Facing down the empty kitchen always seemed like a major chore. But I made a mean rack of lamb, and when I cooked pizza, there weren't ever any leftovers, no matter how much I made.
Family dinners had evaporated along with my parents' jobs. The contract work they got in pieces sometimes kept one or another away at suppertime, but the real reason was that they were trapped in the house together all day, and half the time I was there with them, and so no one much wanted to spend an hour at the table playing pass-the-peas. There just wasn't much small talk available to us. "How was your day?" was a painfully stupid question when the farthest apart you've been since getting up is about five yards.
But everyone put in an effort when Ange came over. My parents really liked her. Hey, so did I. Plus it was fun to watch her eat.
"Smells great!" she said as she came into the kitchen, as she always did. She already had her mister in her hand. When I'd met her, she was mixing up her chili oil at about 200,000 Scovilles, as hot as a mild Scotch Bonnet Pepper. But she was always in training, working her way up to higher heights of culinary daring. She mixed up a new batch of oil once a month, starting with a lethal, tight-stoppered bottle of crushed Red Savina Habanero in a few ounces of oil. She diluted this a little less every month, playing with the levels until it was just right. For Ange, "just right" was the temperature that made sweat appear on her upper lip within a minute of putting a drop of oil on her tongue.
A couple times a year, she'd actually taken the temperature of her oil, mixing a little alcohol in with her month's dose, then progressively diluting it in sugar water until she could barely taste the heat. The last time she checked, she'd been up to 320,000 Scovilles. It was around then that I started insisting that she brush her teeth between her eating and us kissing. I was starting to get chemical burns on my lips.
"It's just chips and sausages," Mom said. "Proper British comfort food, you know."
"Cooked by an American, no less," Dad said from the stove.