E-gold Tracks Cisco Code Thief

E-gold Tracks Cisco Code Thief
( Page 1 of 2 )

The electronic currency site says it can track down the Source Code Club, which is selling Cisco firewall source code on the Web. Security experts, however, doubt the validity of the code.The electronic currency site that the Source Code Club said it will use to accept payment for Cisco Systems Inc.s firewall source code is confident it can track down the perpetrators.

Dr. Douglas Jackson, chairman of E-gold Ltd., which runs www.e-gold.com, said the company is already monitoring accounts it believes belong to the Source Code Club, and there has been no activity to date.

"Weve got a pretty good shot at getting them in our system," said Jackson, adding that the company formally investigates 70 to 80 criminal activities a year and has been able to determine the true identity of users in every case.

On Monday, a member of the Source Code Club posted on a Usenet group that the group is selling the PIX 6.3.1 firewall firmware for $24,000, and buyers can purchase anonymously using e-mail, PGP keys and e-gold.com, which doesnt confirm identities of its users.

Click here to read more about the sale of Cisco code.

"Bad guys think they can cover their tracks in our system, but they discover otherwise when it comes to an actual investigation," said Jackson.

The purpose of the e-gold system, which is based on 1.86 metric tons of gold worth the equivalent of roughly $25 million, is to guarantee immediate payment, avoid market fluctuations and defaults, and ease transactions across borders and currencies. There is no credit line, and payments can only be made if covered by the amount in the account. Like the Federal Reserve, there is a finite value in the system. There are currently 1.5 million accounts at e-gold.com, 175,000 of those Jackson considers "active."

To have value, or e-gold, in an account, users must receive a payment in e-gold. Often, new account holders will pay cash to existing account holders in return for e-gold. Or, in the case of SCC, they will receive payment for a service.

The only way to cash out of the system is to pay another party for a service or cash trade, which Jackson said creates an increasingly traceable web of activity.

He did offer a caveat, however: "There is always the risk that they are clever enough to figure out an angle for offloading their e-gold in a way that leads to a dead end, but that tends to be much more difficult than most bad guys think."

This is all assuming the SCC actually receives a payment, or even has the source code in the first place.

Resource Library:

David Coursey says securing source code must be a priority. Read about it here.

Its the ultimate buyer beware—the code could be made up, tampered with or may not exist. And because the transaction through e-gold is instantaneous and guaranteed, there is no way for the buyer to back out.

Next Page: Just a publicity stunt?

>>> More Network Security & Hardware Articles          >>> More By Michael Myser