Archive for the 'Security' Category

Please turn out the lights…

I used to consider myself something of a nationalist. Not in the jack-booted send home all the blacks and “The Empire could do no wrong” sense, but certainly in the sense that deep down I believed that as a nation, The British are generally pretty cool. Admittedly, this is somewhat hard to defend given our history of invasion, genocide and miscellaneous rights abuses but even with all of these things against us, I would like to believe that there were at all times people in the county actively working against these things and ultimately correcting them.

Of all the people in the world unlikely to lose faith in Britain I would have put myself pretty high on the list; somewhere between Churchill and Thatcher maybe. So why do I want to leave? People keep asking me this so I started thinking of the reasons myself.

It’s not been a sudden decision although the last 10 years has hurried it a lot. So let’s think of some utterly random and disordered thoughts. This will be long, it will ramble, it will be rather typical of my weblog postings. As ever, you don’t have to read it. I am not forcing you to.

I remember cameras being one of the first things that pissed me off. When I was being trained in Surveillance one of the things we had to do was to start to be aware of who was watching us. I learned to look for cameras; this was a mistake. In 2006 there were over 4.2 million surveillance cameras in Britain, that was one for every 14 people. There are no statistics for the current number, but it has certainly increased. A report by Privacy International says that Britain is the worst Western Democracy at protecting individual privacy, in fact, in the world the only two countries worse than Britain are Malaysia and China. The cameras and other means of surveillance are there for various reasons including the often overlooked “US Security Operations”- Yup, the US is monitoring Britain on our own soil. Of course, whilst we are at this I was stopped and searched under the prevention of terrorism act a couple of years ago for taking photographs of Menwith Hill, a US surveillance station in the North of England which used to be a Cold War listening post and now spies on Europe for US commercial means. I should point out that taking photos of this place is not hard, it is visible from miles away, it is enormous and has been growing at a vast rate since the end of the Cold War when everybody assumed it would simply be closed.

They are not the only cameras I have issues with. Speed cameras are now a growing parasite on our roads. These things are operated by local police forces ostensibly as a safety measure but that myth has been debunked so many times that everybody knows it’s not true at all. They don’t add any safety, research shows that they actually have a tendency to make people speed more anyway and all they do is to make the police a fortune in fines. I have heard a theory that the Speed Camera is the single largest thing which has put a barrier between the police and the people in modern Britian. They make everybody a criminal, they make a majority of people hate and distrust the police and they make people subconsciously less willing to operate with a police force that seems to concentrate more on getting money from motorists than actually dealing with any crime at all. Of course, the modern British police force seems to be able to get away with shooting an unarmed man 8 times with no comeback on them so maybe it is good that we don’t trust them any more.

So I don’t trust the police… What about the rest of the authorities who run these surveillance operations. New legislation launched under the umbrella of making us safer from terrorists (of which much more later) is now being used by local authorities to spy on the general public for absolutely non terrorist activities. This came to light when Dorset Council admitted to spending more than 2 weeks spying on a family they suspected of lying on a school application form. The new surveillance powers granted by the Regulation of Investigatory Powers Act 2000 give local authorities access to things such as phone records, email information and monitor what web sites somebody is visiting as well as the right to mount on-the-ground physical surveillance against them. Needless to say, this act wasn’t ever created to allow this but what the hell, hey?

All of this makes the fact I do actually trust the British Security Services somewhat a moot point. I just thought since I was ranting about the misuse of such powers I’d actually carry on my fairly consistent defence of that lot. I also still have some respect for the higher judges, unfortunately this isn’t true of the lower court rabble.

Of course, the 2-type legal system is something else that annoys me although this has always been a problem so I can’t claim it to be any particular reason that I am leaving. We have, however, embraced the EU human rights convention and part of this is the right to a fair trial and the assumption that you are innocent until proven guilty. The British Criminal court system does operate on this assumption but the Civil Courts certainly don’t. Anybody can take somebody to Civil Court and it’s up to you to prove that you are innocent. In any case, the chances are you will end up paying a fortune in costs, win or lose.

The monarchy is one of the things often cited as a reason that Britain is so great. The relationship between the Crown and Government is a complicated one and much of it is governed by convention rather than actual laws. Maybe I am made more naive because I have more knowledge of how these conventions work than most but one of the things I always thought would happen when the government started to behave tyrannically and went against the will of the people in an overwhelming way (such as entering into an illegal war) was that the Crown would step in and do something about it. I would think that this is not only the right, but the very raison d’etre of the Queen. This is why we pay for them to live a life of opulence and luxury. When Blair invaded Iraq in 2003 (an act which we now know was based on lies to Parliament) an overwhelming majority of the British people opposed this blatantly illegal act and yet the Queen still allowed her seal to be used to send her armed forces to invade another country. This shouldn’t happen, this shouldn’t happen on so many levels. Of course, to add insult to injury on this matter, Tony Blair has never been taken to account for his various lies and his various crimes. He’s happily swanning around the world making a fortune on the lecture circuit without a care in the world. There are lots of groups trying to have him called to account but frankly, they seem to be pathetic and somewhat shit. If that’s all there is then he doesn’t have much to worry about at all.

Do I even need to talk about the fact that Parliament has now allowed the police to hold terror suspects for 42 days, without charge. The Magna Carta? The Bill of Rights? May as well just sell them all to Americans as pretty things to go into picture frames. Oh sorry, I forgot we already did that. Talking of the Magna Carta I note that the government is still trying to push ahead with its id card scheme. Europeans and Americans don’t really understand my objection to this but it’s quite important in that it does remove a very basic right given to us in the Magna Carta all those hundreds of years ago. We still have a presumption of innocence, we still have the right to be nameless and identyless in general life. If the police want to know who we are, they have to show good reason. An identity card will lose our right to anonymity, it will shift the power slightly further towards a state where we have to show our right to be here rather than the state assuming that right by default. I am ignoring the fact that as soon as we do get an identity card, the security will be cracked, the Russian Mafia will be selling fake ones for a few thousand a piece and the government will lose all the details on a train to Waterloo or post them on a DVD to somebody. We know this will happen, it’s just how these things go. I would start talking about this all being more steps towards Corpus Juris at this point but I don’t want to sound like a nutter from the UK Independence Party, I love Europe still though I am still not sure Britain should be part of it. I just have very different reasons for my beliefs than they do.

And now, we couldn’t avoid it could we. The climate of fear.

I don’t kid myself that I am much more clever than the average Brit and the only advantage I can think of is that my post graduation background was in social psychology with my PhD being in controlling people. Don’t get me wrong, I am as susceptible to control as anybody, I go out and buy Fox’s biscuits every time that damned panda on my TV tells me to. I am an advertisers dream; I fall for all the tricks and it’s made worse by the fact that I know it too. The thing is, I think that deep down most people know they are being manipulated and like me they don’t much care as long as it doesn’t play too much havock with their lives. Unfortunately, the latest big lies seem to be playing havock with mine, and everybody elses.

That odd chap Joseph Goebbels once wrote:

“If you tell a lie big enough and keep repeating it, people will eventually come to believe it. The lie can be maintained only for such time as the State can shield the people from the political, economic and/or military consequences of the lie. It thus becomes vitally important for the State to use all of its powers to repress dissent, for the truth is the mortal enemy of the lie, and thus by extension, the truth is the greatest enemy of the State.”

And so we come to The War On Terror. My government tells me that we are living in very dangerous times and that my personal rights and liberties should be forfeit little by little to help them fight it.

Bollocks.

My government tells me that this is the most dangerous time ever and my very life and existence and freedom is at stake through the threat of Terrorism.

Bollocks to the first bit. I will concede to the last bit - But the threat is not from Terrorists.

My government tells me that invading Afghanistan and Iraq is something they had to do because we are at war with Terrorists.

What the fuck?

I started to come of political awareness in the early 80’s. I am product of that time. At that time and for the next decade or so, there were lots of bombs all over Britain, planted by the IRA and paid for by the Americans. Do Americans know that as short a time ago as 1996, the IRA bombed England’s biggest skyscrapers? Do most people outside this country know that almost every day in London there were bomb scares, train, bus and tube disruptions and general upheaval because of bombs or the threat of bombs. I don’t know how many people lost their lives through IRA bombs, I don’t know how many bombs there were. The reported numbers almost certainly don’t match the reality because the government and the press rather sensibly co-operated to keep a lot of the incidents quiet so as not to give publicity to terrorists. That is how a country with a lot of experience of terrorists works, they realise that terrorism feeds off publicity and taking that away from them helps to damage its impact. Our new enemy (which apparently now has a name, it is militant Islam) has, in the last few years made what amounts to a pathetically small impact on the country in terms of actual bombs and lives lost and yet we never hear anything else! Liberties are lost every month as we do more and more to fight this new thing, Terrorism. Have I missed something here? New thing? Terrorists in Britain? Get real!

In the early 80’s I didn’t think we’d make it to the year 2000 and I very much doubt I was alone. We were having leaflets posted through the door of every house in the country telling us how to survive in the aftermath of a Nuclear War and it was a time when films like When The Wind Blows and Threads were able to change British public opinion on the whole nuclear warfare issue. We slowly started to realise that we probably wouldn’t survive global nuclear war but these still seemed to be a greater than 50% chance that it would happen. My government tell me that I am at greater risk now from a bunch of disorganised terrorists?

HA FUCKING HA!

The weird thing is that like Goebbels great lies, it doesn’t seem to be global. It seems to be rather restricted to Britain and the USA. Its an excuse to go to war to further commercial interests abroad, it’s an excuse to step closer to that Governmental Holy Grail, a total and legal control of the people.  The two are Hand in hand, this is a dangerous situation for us to be in and I don’t like it. This “war” is costing us hundreds of billions of pounds and although I realise it’s cliche to count this in how many hospitals we could have built with the money it is worth pointing out that Britain’s filthy hospitals and the superbug epidemic are causing far far more deaths in this country than any terrorist activity ever will.

The other great lie is to do with Global Warming. Don’t switch off, don’t sneer at me. I am not saying that Global Warming is a lie, it’s not. There are differences of opinion as to what is causing Global Warming and I doubt you agree with me but even so, Global Warming has become a bandwagon to impose even more taxes and controls on the people and as I have ranted about in the past; the people it is hurting most are the poor. I foresee more and more happening in the name of global warming; I foresee more and more silly laws and restrictions and less and less useful action. Global warming will be used as an excuse to sell more and more protected land to companies to exploit and sell more and more overpriced houses to people. The poor will stay in the lowland floodable areas and will end up uninsurable and like New Orleans but on a grander scale we’ll probably end up with refugees in Mainland Britain in a decade or two. Adding more and more tax to plane travel and fuel isn’t going to help this. Putting some of those billions of pounds we are spending to protect our freedom is. Global Warming is inevitable. Taxes aren’t going to stop it. Preventing it isn’t going to work. We should be doing something about it, and doing something about it now, not later. It’s a big lie. We all know this why aren’t we doing anything about it?

Leigh visited England from Canada a few weeks ago and said that one of the things she noticed most about this country was the press. I have to admit I had barely noticed this but now it’s been pointed out to me I see the point. I am not sure what has happened to it, it’s not a press any more it is just popularist celebrity drivel interspersed with bigoted opinion. I don’t read newspapers any more so I hadn’t really noticed. and whilst I can’t use this as a reason for leaving I can still mourn its passing.

The BBC still sits on the sidelines as the only party of opposition; uncomfortably though it relies on the government for funding so its subversion is probably rather less than one would hope. I view it as some sort of ineffectual superhero that still tries hard. By day, it broadcasts endless mind numbing gobshite devoted to cookery, decorating, selling all your crap to buy new crap and buying new houses - All the things we as new-age sheep seem to like. By night, it allows platform to some quite cutting satire and the occasional excellent documentary that says much the same as I am saying here only in a less self-obsessed way. The other channels generally broadcast cheap and easy to make crap and reality TV. It’s depressing really and if this is the opium of my nation then I demand a new pusher.

And now for the punchline. None of this is why I want to leave…

The country has had messes before, England and Britain have a long history and throughout it, lots of shit has happened. But as I said at the start of this post; I have always felt that behind the scenes there were competent people working to mend things. Of course, the English have a history of being quite pathetic and resistant to change, our history of revolution is pitiful; from the rather pathetic Peasants Revolt which ended with a single blow to the Civil War which simply annoyed a bunch of people before sending everything back to how it was before as soon as the leaders realised they didn’t have anything to do once they’d won. There’s no spirit left in this country any more. Nobody cares; the people aren’t stupid, they know what is happening as well as I do but they don’t seem to care any more. Even the few who do can’t do much. Armed revolution is conveniently illegal and political revolution is, as I see it, impossible. Maybe it has always been that way, maybe this is something I have missed.

The only useful things that the Brits have ever really done to create change is to leave. For the first couple of centuries at least I don’t think we did so badly in America. Australia looks pretty to me and I think we have done pretty well in Canada, all things considered. Maybe it will be interesting to see how the Colonies have fared instead of constantly whining about what the Motherland has become.

Will the last one to leave the country please turn out the lights? Global Warming, don’t you know.

Some links - I didn’t want them in the main text because I am odd that way:

Brother, can you spare a grand?

Here’s an interesting new scam I had never heard of before.

The scammer breaks into a hotmail, gmail or other free-email account and then sends the following email out to everybody in their contact list:


  • Hi
    I am in a hurry writing this mail. I had a trip to Nigeria visiting the tinapa opening ceremony. Unfortunately for me all my money got stolen at the hotel where i lodged from the attack of some armed robbers and since then i have been without any money i am even owing the hotel here,So i have only access to emails,my mobile phone  can’t work here so i didnt bring it along.Please can you lend me 1000 pounds so i can return back and settle the hotel bills i would return it back to you as soon as i get home, I am so confused right now.You can have it sent through western union.I have already spoken to the hotel manager, please let me hear from you so i can collect his full name and address where you can send the money tomorrow please or if possible today. I am waiting for your reply.
    Thank you.
    (Person’s name)

It’s an interesting one in that it may actually work (provided the person is usually illiterate anyway). A whole new clever little twist on the traditional 419 scam. I shall watch this one with interest.

Antisocial Security

A while ago I pondered starting a weblog devoted to security. I occasionally feel the need to write something about this subject and I was worried that my one loyal reader would probably get bored stiff if I wrote too much in amongst my generally pointless rants.

My problem is that I know more about security than you. I am pretty safe in saying this unless you are one of a handful of people, all of whom I could name and none of which would be reading my weblog. Don’t get me wrong - If you are an expert in Linux, I bet you know tonnes more about Linux security than I do and I know 12 year olds who know more about modern hacking tools and methods than I ever will. The problem is that these specialisms don’t make good all around security experts; experience and exposure does and if nothing else, I have a lot more of that than most.

I got an email from an old adversary of mine today and part of my reply got me thinking about how I view a profession I used to be very much involved with. I quote:

“My former industry is full of self-publicists who are dreadful at
what they do; I care nothing at all for them and their paranoia
fuelled money making machine. I’ll stick with breeding camels and
just drag myself back into security when I need to eat occasionally,
but even so I don’t much think that will last.”

I’d like to write about security. As an odd kid working out better ways of nicking things or how to open locks I wasn’t meant to open, I have always been interested in the topic and I have devoted most of my adult life to it. When I was at school and a teacher of mine suggested that I manage the school computer systems as an alternative to trying to pull them to bits to see how they worked; I had no idea that a few years later I would be in the position to happily ignore fax requests for help from the FBI because they refused to give me a cool baseball cap or getting hate mail for working with the government to get Universities to prosecute hackers under the then new Computer Misuse Act (an action on my part which was  very misunderstood since I was actually more on the side of the students trying to make sure that they received a fair trial where the Rules of Evidence applied). Incidentally, we haven’t even hit the 1990s nor the start of the Internet in the UK yet.

I am not blowing my own trumpet here, I don’t like blatant self publicity and it’s certainly a bad trait in a security person anyway. That said, I am going to talk about me. It’s my weblog and if you don’t like it, then stop reading. I am making a point that I don’t like being told I am wrong by somebody who got a degree in Computer Security from Wigan Polytechnic in 2005 and then spent a few months getting a bunch of commercial “qualifications” consisting of seemingly random letters from computer-equipment manufacturers and then gets employed by some company and given a job title with the word manager, or consultant in it.

In my previous jobs I was surrounded by ‘em. I’d go to meetings to be told I was wrong by people who didn’t  have a clue what they were talking about. I wasn’t wrong, I am rarely wrong about things I profess to know something about. At BT, we had a chap who I will call John (mostly because that is is name). He didn’t go to University, he didn’t have a single security qualification and he knew very little about computers, networks or telephony. He had, however, spent more than 10 years as a soldier in Northern Ireland on constant active duty. I had been told by my colleagues that John was a jobsworth and something of a tosser and although his job was to give security advice for high-profile projects, he shouldn’t be consulted. I ignored them and decided to talk to him one day  about a system I was building for one of the country’s biggest banks. It was a pretty good design and there weren’t too many flaws that I could see but as soon as he saw it, he started asking questions that other people hadn’t thought of and prompted me to make a lot of changes for the better. He didn’t know about anything like as much about technology as the people I was surrounded by but he did have a much better appreciation of security in general and he knew what questions to ask and wasn’t afraid to ask them. Although he doesn’t know it, it was him who prompted me to get more military training to increase my skill set. I would say thanks but he’ll never  read this; I don’t think he knows how to use a web browser.

It’s become an odd industry. We are talking security here and security is meant to be quite important in the modern world. There are billions of pounds flying around the world at any given moment and as you see every time the government accidentally sells a few million people’s personal details at a carboot sale, there are people who actually worry about this sort of thing. Who is protecting all this money? Who’s looking after your personal  details? Generally speaking, it’s the people with the Wigan Poly degree I am afraid. They don’t have a clue what they are doing and in the rare cases where somebody who does have a clue gets to contribute, the babbling rabble who are shouting out “We can do it for you on a Linux box for 50p” will win the day anyway since it all ultimately comes down to money.

I am not going to start a security weblog. I am not sure there is much I could write that hasn’t already been butchered by the Wigan Polytechnic Press. I may still write about security things but I will just do them as normal rants.

Now you know.

Some advice, young folks…

I have some advice - I don’t give advice very often, but this one is important, so listen up.

When I was younger, I had a near perfect memory. I could remember 62 character random passwords fairly easily, I could remember passwords from years earlier and having a head filled with god knows how many passphrases seemed to be a fairly normal thing. I didn’t forget them, I didn’t need to keep a note of them.

Then I got ancient, and senile.

I found today that I can’t remember passphrases I set 10 years ago even though oddly, I can still remember passwords I had 25 years ago. The problem is that sometimes I need passwords I set 10 years ago. It’s not that I completely forgot them, I remember it is a passphrase about a sheep and a thunderstorm and I remember some of the words, but I can’t remember the capitalisation nor the punctuation, nor even really the word order. It’s useless, I doubt I will ever actually get it. I also have endless boxes of tape archive that when I contemplate it, I know I don’t actually know the passwords to any more (even if I can find the software).

The point is, I never thought I would forget them so I never thought of making a note of them.

So my advice? Despite everything that grown ups will tell you, and despite everything I tend to teach normally, start making a note of your passwords. Keep them in a heavily protected storage device, and use a passphrase that you will certainly remember and use it every few days to make sure you do remember it. Make it a good one, and you’ll be fine.

Whilst you are keeping the passwords, you may as well keep copies of the software that will allow you to use the encrypted thing, the backup program you used, the weird mailer, the weird key storage utility or ssh program. In 20 or 30 years when you want to read your old mail, you may be glad of it.

Pop to http://www.truecrypt.org/ - Install that and make yourself a disk that you can keep all this stuff on, without having to worry about extra security. Hell on an encrypted disk you can even store your passwords in plain text in a text file. Keep a backup copy of that password file on another encrypted disk and tell a close friend the password to it - Don’t give them the disk but ask them to keep the password safe, this’ll cover you in the event of complete senility too as long as you remember how to use a computer. That’s all, nothing complicated, just do it, and you will thank me one day.

Now, with all that said and done - If anyone remembers the sodding password to my PGP keys, and what on earth those sheep were doing in that thunderstorm, can they please tell me? Quickly? Before I go even more mad?

What a nice chap.

I finally got around to dragging all of the photos from my mobile phone last night, and found this little shot that I took in a tacky tourist shop in Berlin.

CheBalm

Can I just say… amazing! But then I guess every Revolutionary needs their own lip-balm.

I am not a fan of Ernesto so I don’t think I will be wearing his lip balm. The only thing that amuses me is that it is being sold in what was formerly East Berlin, and his various dodgy causes won’t benifit even slightly by any sales of this, nor do they from the wonderfully Capitalist use of his image on just about anything that will take it.

I don’t like regurgitation in weblogs, so I will simply paste a couple of links:

http://lorry.org/Weblog/che-standard.html

and:

http://www.washblade.com/2005/11-25/view/columns/che-cult.cfm

Actually, thinking about it - I may be wrong. Ernesto Guevara may well have been quite the fan of the capital of Capitalism that is modern America; they are, after all, both huge fans of concentration camps in Cuba.

Give me your tired, your poor,
Your huddled masses yearning to breath free,
The wretched refuse of your teeming shore.
Send these, the homeless, tempest-tossed, to me:
We’ll watch them carefully, inside our golden doors.
And should they stray, or think aloud,
Thoughts deemed extreme, rebellious or untrue.
So onto Cuba, they will go.
To keep this young land, pure and clean.

(Apologies Ms. Lazarus for not keeping it as a Sonnet)

Oh How Fine is the Emperor’s New Credit Card.

Those of you who know me should know that one of my fascinations is the phenomenon of Groupthink (or “Folie a Deux”) and one of my professions was working out how to steal things more effectively. I have been avoiding ranting about this topic for a while but it rather amazes me that the press are just starting to realise that all is not well in this nation of British Shopkeepers.

When I first heard that the British Government were pushing this Chip and Pin idea; I seriously had to check tha it wasn’t April the first. For those people lucky enough not to be in the UK, Chip and Pin is a new way of paying for things with a Credit or Debit Card.

dodgychipandpincard.jpg

British payment cards have a little chip in them at one side, effectively making them into a smart card. They also have the magnetic and signature strip on the back so that they can be used abroad or used in cash machines without chip readers. When you pay with one of these, you either give it to the person at the till, or pop it into the little card reading machine yourself, wait for it to confirm the amount and then type in your 4 digit PIN to complete the purchase. This should ring some alarm bells already simply on the basis of casual theft. Anyone standing close to you when you are hassled in a shop queue and not being at all careful (as presumably you would be at a cash machine) can see you type your PIN and then thump you a few yards up the street, nick your cards and clean your account out at the closest cash machine.

This is a little dirty for the likes of a weblog like this but it’s not something that should be ignored just for that reason. Saying that this isn’t where the real issue lies. The real issue lies in the fact that the cards still have the magnetic strip and don’t use a different PIN for the smartcard and the strip. Financially, it is not very viable to clone a smartcard at the moment; it’s possible but until it becomes more useful (that would be when identity cards come into force) the risk is still low. On the other hand, it is pathetically easy to copy a magnetic strip. When you give your card to somebody before you type the PIN into a machine, you don’t know what they are doing with it. Have they swiped it and copied the strip? Is the “Chip and Pin” machine recording your number? Is there a camera in the roof monitoring what you type on the keypad? All it takes is one swipe of your magnetic strip by a shop assistant, a waiter, a petrol attendant or a well equipped prostitute and a knowledge of your PIN and your details could be sent to across the world within seconds, your stripe details written to another card and your bank account cleared before you have even left the shop. Personally I find it quite annoying when the country’s biggest supermarket (that’d be Tesco) has their staff take your card off you and swipe it behind the counter rather than let you slide it into the card reader like most other shops do. At least when I physically put the card into the machine myself I know that it can’t be reading the magnetic stripe. Tesco are just asking for staff fraud to happen. In fact, any checkout employees reading this who want to buy a 3 track magnetic card reader/writer, I am doing a good deal on them.

It seems obvious that for this to be classed as an advance in security is just idiotic but then that is a fundamental of Groupthink. Next time how about just sticking a photograph on the card? it’d be easier and cheaper. TV shows like “The Real Hustle” have been showing you how to rip people off for the last year with this and international gangs (should I be emotive and say GANGS PROBABLY LINKED TO ORGANISED CRIME AND TERRORIST ORGANISATIONS?) have been stealing hundreds of millions using this nice and easy free cash machine for quite a while now. It’s only in the last couple of weeks that it seems to have hit the news.

As far as I can see, the government decided that the country should all have Chip and Pin from February the 14th, 2006. Supposedly it is possible to demand a card that doesn’t have a chip; I will have to remember to do this sometime. It’s be nice to have seen any of their reasonings and to find out who their security consultants were so that we could all stand around and throw peanuts at them. Frankly and speaking from a professional point of view here, they must all either have been fucking morons with no understanding of anything at all or just out of their head on the Crade-A cocaine they’d bought with the money the government threw at them for their advice.