These issues are not new for Facebook. In 2006 I created a Facebook app […]

Tuesday 9:17pm: I post a message to my courses Slack channel advising students that Wednesday’s 6PM class will be moved online to a […]

ONLINE EDUCATION: Successes, Challenges, and Best Practices

2nd Annual All Day CUNY-wide Conference

April 8, 2016, 9AM – 5PM

John Jay College of Criminal Justice 5 […]

I have spent the past few years researching the emerging field of 3D Printing. I presented on the topic at a NYS legislative committee roundtable. I warned at the annual meetings of both Academy of Criminal Justice Science and the American Society of Criminology that within the next 1-3 years, a viable metallic printing solution will become available. I predicted that once it does, chaos will follow. The ability to print full metallic small weapons and parts of larger weapons from home is a very dangerous ability for anyone to have. These weapons would not have serial numbers and would be untraceable.

I have been warning about it for 3 years… and now that has finally arrived.

Dubbed the “Ghost Gunner” this $1,200 device takes solid aluminum blocks and using a technology called computer-numerically-controlled milling, gradually grinds away at a solid block of aluminum until only the design is left. The process is completely computer controlled. The user just inputs the design (weapons schematics are available online) inserts a block of Aluminum and “hits” go. Many hours later a gun part made of solid aluminum emerges.

This technology has been used for years in iPhone and other electronics manufacturing. However, for the first time, the technology is being made affordable enough for home use.

(Wired Ran a Story on This Yesterday)

Here is where you can buy your very own “Ghost Gunner.”

Computer-numerically-controlled mills can make very dangerous objects. Now that they are being sold for home use manufacturing weapons without serial numbers has become easy. It is my belief that this type of technology is dangerous and should be regulated at both the Federal and State level.

One option could be to require federal registration for sale or ownership. Another policy option could require licensure for these devices.

I believe Congress and the States should pass legislation categorizing this device and institute legislation to keep these devices from being misused on a large scale.

There is not much time before thousands of these printers will be shipped around America.
I believe one was used to print this 80% Lower AR Receiver. Note: “315 In Stock.”
A possible scenario to leave you with: a criminal prints out a functioning small firearm and uses it to kill someone. The criminal can just put the firearm back in the machine that created it. The machine could then turn the murder weapon to dust.
Adam Scott Wandt, J.D., M.P.A., is an Assistant Professor of Public Policy at John Jay College of Criminal Justice, where he serves on both the Graduate faculty of the Digital Forensics and Cyber Security program and the Masters of Public Administration in Inspection and Oversight program. Professor Wandt is an Attorney and Counselor-at-Law in the State of New York.
Media requests on this issue should be sent to the attention of apiyapinansook@jjay.cuny.edu with “Ghost Gunner” clearly identified in the subject line.

Professor Wandt On Twitter: @Prof_Wandt

Being that my last blog was of such a serious nature… I am delighted to be blogging on something much more uplifting: The release of the iPhone 6 and iPhone 6 Plus.

I have made several different videos of varying depths:  unboxing, examining, discussing, and comparing these phones.

Full 45 Minute  (Six and Six Plus): Unboxing, Setup and Fist Impressions 

[youtube]https://www.youtube.com/watch?v=4PDwHPQfTXI[/youtube]

Short 5 Minute (Six and Six Plus): Unboxing Only  

[youtube]http://www.youtube.com/watch?v=FkDtQSe045s[/youtube]

The iPhone 1-6 Showdown

[youtube]https://www.youtube.com/watch?v=bCJGyG0Qes8[/youtube]

As a Professor, attorney, and technologist, I deliver many academic lectures at John Jay College of Criminal Justice, lecture at conferences to professional organizations, and train law enforcement around the country. In 2012, I began warning of FinFisher, a German-based company (previously U.K.-based) that produces and sells computer intrusion systems, including remote monitoring solutions, and had recently developed the ultimate spyware for smartphones and computers.

Back then, details of FinFisher and its software were not publicly available. The company is secretive as its clients are government intelligence agencies. Some of FinFisher’s clients include nations with poor records on human rights, personal liberties, and privacy, including Mongolia, Pakistan, Vietnam, Nigeria, and Singapore. FinFisher has also reportedly sold software to intelligence communities in South Africa, Australia, Belgium, Slovakia, and the Netherlands.

In 2012, there was little information publicly available as to the full capabilities and reach of FinFisher’s software products. However, since then, information has slowly leaked out through WikiLeaks and other reputable sources. Today, FinFisher is known to produce the most powerful commercial weaponized surveillance malware software packages on the planet.

Two products of significance are FinSpy PC (computer spyware) and FinFisher Relay (smartphone spyware), which when installed grant the ability to intercept all files/documents and communications, such as those over Skype, email, and even video and audio through the webcam and microphone. These two software products can be remotely “pushed” (installed without the user’s knowledge or actions via a Trojan Horse or other method) to any computer or smartphone. This includes OS X, Windows and Linux computers, as well as Android, iOS, BlackBerry, Symbian, and Windows mobile devices. Users of these devices do not have to be anywhere near the vicinity of the person installing the malware. Furthermore, it is nearly impossible to identify that the malware has been installed without conducting a deep forensic analysis.

Disturbingly, researchers at citizenlab.org published evidence and reports showing the use of FinSpy PC and FinFisher Relay against journalists, activists, and political non-desirables around the world by government intelligence agencies. But at least the software was only available to international government intelligence agencies and generally kept out of the hands of cyber criminals… until now.

In 2013, during a presentation to the United States Association of Inspectors’ General, I warned that it was only a matter of time until FinFisher’s software would leak out on the web, becoming accessible to cyber criminals and others with malicious intent.

That day has arrived.

Yesterday, on September 15, 2014, Julian Assange, WikiLeaks Editor-in-Chief, allowed both FinSpy PC and FinFisher Relay to be openly published on WikiLeaks.org. In other words, as of yesterday, millions of cyber criminals around the world have access to a weaponized surveillance malware package that can be installed with very little effort, giving access to almost all the data on a user’s computer or smartphone.

Within minutes of the site going live, I received a barrage of communications via phone, email, Twitter, and text message from students, law enforcement, and researchers around the world. Most people just wanted to talk about the release of the software, while others asked how long it would take me to download and analyze the software.

Before lunchtime, my lab at John Jay College of Criminal Justice (The Advanced Research Domain for Information Security in Public Policy) had downloaded all available software and documentation. While my team and I obviously cannot deploy the software “in the wild,” we are able to analyze its code to determine exactly how virulent the software really is. We will be devoting a significant amount to time in the near future to analyze this threat and report our findings.

There is a glimpse of bright light shining through the murky water… Julian Assange and WikiLeaks did not release this software for cyber criminals to obtain and use, although it will be an unintended result. Their primary goal was to allow security researchers to analyze the code to come up with methods to protect us all (the public). While we are all at risk today, you can be sure that future software updates from Apple, Google, and Microsoft will contain significant security improvements rendering this software obsolete. That is, of course, until FinFisher updates the code within their products, and the cycle starts over again…

Adam Scott Wandt, J.D., M.P.A., is an Assistant Professor of Public Policy at John Jay College of Criminal Justice, where he serves on both the Graduate faculty of the Digital Forensics and Cyber Security program and the Masters of Public Administration in Inspection and Oversight program. Professor Wandt is an Attorney and Counselor-at-Law in the State of New York.

Media requests on this issue should be sent to the attention of apiyapinansook@jjay.cuny.edu with FinFisher clearly identified in the subject line.

Professor Wandt On Twitter: @Prof_Wandt

It’s the first day of the semester and once again CUNYFirst is down. (For the second day in a row). Since I am constantly hearing that CUNYFirst cost around $1Billion to fully implement… I must ask […]

When it comes to smartphone security, there are several “best practices” you can take to protect your data. First, be sure to always update your smartphone to the latest version of the operating system. This will ensure your smartphone receives important security updates that will help keep your data safe. Second, always use a password, even if you think you do not need one. Using a password tells the smartphone you want to keep the information safe, and most smartphones will actually handle your information/data differently than if you do not set up a password. Third, Android users should install anti-virus software. While iPhone users do not need to install anti-virus software, it is an absolutely necessity for Android users. Android users can download one of several free anti-virus programs from the Google Play store. Android users should also enable phone encryption, if supported by the phone model, which can be accessed in the “settings” menu. Android users should also make sure “USB Debugging” is disabled in the settings menu.

Finally, there is a five-step process you should engage in when you are ready to dispose of your smartphone. You should use this process no matter your method of disposal, whether you are disposing of your smartphone through a recycling program, gifting it to a friend, or selling it to someone through gazelle or e-bay, etc. Following this process will minimize the risk that others will be able to recover information/data after you wipe it.

(1) Reset your smartphone to factory default.

Instructions for resetting iPhone: Access settings —> general —> reset —> erase all content and settings.
Instructions for resetting Android: Varies by phone and provider. Look for “reset phone” or “reset phone to factory default” under the settings menu.

(2) Set the smartphone up again in order to access the App store (iPhone) or Google Play store (Android).

(3) Download and run a secure file shredder that will forensically wipe information from the device. I recommend the file shredder contained in a free secure communications application called Wickr. You can download Wickr from the App store (iPhone) or Google Play store (Android). Once installed, access “Secure Shredder” from the settings menu in Wickr and click “start.”

(4) Reset the phone again following the directions in step 1.

(5) Remove and keep SIM and MicroSD Cards.

While no method can absolutely guarantee your information/data is wiped completely from the phone, this proven method is a proven best practice to ensure that you keep yourself, family, friends, and co-workers safe.

WATCH THE WNBC 4 NEWS INVESTIGATIVE PIECE ON SMARTPHONE SECURITY 

I have prepared a video tutorial to assist faculty members in entering grades into CUNYfirst. Due to small text/fonts and icons within the CUNYfirst system, the video is best watched in high definition at 720p in full screen. YouTube viewers can adjust the screen resolution by selecting the gear icon in the bottom right corner of the video player, and selecting 720p. Watching the video in a lower resolution will result in a blurry image.

[youtube]http://www.youtube.com/watch?v=YqaNyjgEM7Q[/youtube]

Here is the link: http://x.wandt.us/CUNYfirst-grades

Please let me know if you have any questions or comments on this Entering Grades tutorial.

After running disk speed tests on both the Promise Pegasus R4 and R6, we now pit them against each other in a Blackmagic speed test. Who will win?

In this video I run  a disk speed test on the Promise Pegasus R4 (RAID 5) Thunderbolt backup system using Blackmagic software.

I ran a speed test on the Apple 751 Gb Flash Storage iMac 27-Inch Late 2012, 3.4 ghz, Intel i7 processor, 32 Gb RAM, using Blackmagic speed test software.

I ran a speed test on the Promise Pegasus R6 (RAID 5) backup system. Watch the YouTube video below to see how the Pegasus stacks up.

In this unboxing we will take a look at the new Google Nexus 7 by Asus. This is the second generation Nexus 7 which was released with version 4.3 of Android Operation System. The Nexus 7 is an almost 8 […]

I first began teaching as an Adjunct in January 2005. I teach graduate school students who often work part- or full-time, have families and other responsibilities, and arrive to a 6 PM evening class tired […]

Professor Wandt’s Presentation at the Association of Inspectors’ General 2013 Annual Meeting. The topic of the presentation is “Mobile Device Investigations: Thinking Outside the Box.”

With Apple’s announcement and release of OS X 10.9 Mavericks, many of you will want to perform a clean install by completing formatting your existing hard drive and starting from scratch. This brand new […]

Most people living in Manhattan do not own cars. The main methods of transportation are subways, buses, and cabs. If you are a regular taxi rider like me, you know that hailing a cab may be quick and […]

Did 4Chan Identify the Boston Bombers?

Americans tend think of hacking groups like Anonymous and 4Chan as mischievous criminals who cause damage and cost corporations and governments millions upon millions […]

A+ is the new monthly academic technology podcast hosted by the Skunkworks: Academic Technology Research and Development Group. Skunkworks will be […]

I am pleased to announce the launch of sociopolitical.org, what I believe is the Internet’s most complete and easily accessible data set of the social media accounts of elected members of the U.S. […]

This is a recent lecture I gave, entitled “Mobile Devices: Investigations, Privacy and Policy.” It does not deal directly with academic technology, but with mobile device privacy. As more and more of higher […]

I am devoting my second “90-Second Academic Technology Update” podcast to a basic but important question I get asked all the time: How does a professor hookup a Macbook to an overhead projector? What adaptor […]

In this video I answer the common question: “What equipment do I need to hookup a Macbook Air or Macbook Pro to an overhead projector?”

CLICK HERE TO WATCH THE VIDEO: http://x.wandt.us/vga

Adam

Thank you for putting this together. I am looking forward to attending.

Adam

Dear CUNY Community:

This video is the first of my new series: “The 90-Second Academic Technology Update.”

This series will regularly explore emerging academic technologies in a short 90 second format. I […]

It is truly amazing what we are able to accomplish on the commons. I look forward to another great year of getting to know my CUNY colleagues.

Happy New Year to everyone!

The iPad Mini Experiment – Week 2: Using Your iPad or iPad Mini: Managing Documents, Files and Data. In this video Professor Wandt examines methods to manage, access and manipulate files on iOS 6 devices […]

I am looking forward to this event!

Adam