By

There should be ads in Google Cache

There should be ads in Google Cache, so we can sell the RCMP a clue! Once again, I decided to check my logs, and once again I see that the RCMP have been reading my blog via Google Cache. Some of this is clearly the people at the RCMP ATIP branch, like Sgt. Kent Swim and Normand Sirois (who may or not be an officer, I have no idea), since it’s someone googling for Kent’s name. (I’m actually starting to like the ATIP officers a bit, to be honest. Too bad the RCMP sucks!)

199.212.150.16 - - [02/Mar/2011:14:55:57 +0000] “GET /metaatip/rcmp-poilist.pdf HTTP/1.1” 403 529 “http://www.google.ca/search?hl=en&source=hp&q=kent+swim%2Brcmp&meta=&aq=f&aqi=&aql=&oq=” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; INFOWEB-APPROVED; INFOWEB-APPROVED-IE6-EN; INFOWEB-APPROVED-IE6-FR; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)” </em>

Also, this looks directly related to my ATIP request:

199.212.150.16 - - [07/Mar/2011:16:34:37 +0000] “GET /2011/02/rcmp-fail/ HTTP/1.1” 403 529 “http://www.google.ca/search?hl=en&q=hackerspaces+rcmp&btn=Google+Search&meta=” “Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)” </em>

I’m also certain that they got a kick out of this:

199.212.150.16 - - [16/Mar/2011:19:13:07 +0000] “GET /2011/03/rcmp-and-blogging-krop-talk/ HTTP/1.1” 403 529 “http://www.google.ca/search?q=Krop+Talk+blog&hl=en&source= hp&safe=images&aq=f&aqi=&aql=&oq=” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; INFOWEB-APPROVED; INFOWEB-APPROVED-IE6-EN; INFOWEB-APPROVED-IE6-FR; .NET CLR 1.1.4322; .NET CLR 2.0.50727)” </em>

This is probably Ryan Kenny of the Vancouver 2010 Integrated Security Unit - Joint Intelligence Group googling himself to see what is on the Internet about him. Probably something all RCMP officers are advised to do:

199.212.150.16 - - [22/Mar/2011:02:08:33 +0000] “GET /visu/visit.pdf HTTP/1.1” 403 529 “http://www.google.ca/url?sa=t&source=web&cd=1&ved=0CBUQFjAA&url=http%3A%2F%2Fpar oxysms.ca%2Fvisu%2Fvisit.pdf&rct=j&q=ryan%20kenny%20jig&ei=1AaITfnhIojj0gHUuaz_DQ&usg=AFQjCNHFEGFxH5fy-qhONBqzgFKoUlBrjA” “Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)” </em>

And once again I pissed off the RCMP, as far as I’m aware, sending in ATIPs and being a pain in the ass isn’t a crime in this country:

199.212.150.16 - - [21/Mar/2011:17:20:49 +0000] “GET /uploads/cropped-redgate_hastings.jpg HTTP/1.1” 403 529 “http://webcache.googleusercontent.com/search?q=cache:3beh9 hGTNgsJ:paroxysms.ca/2011/01/v2010isu/+joe+bowser+jig&cd=2&hl=en&ct=clnk&gl=ca&source=www.google.ca” “Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .N ET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)” </em>

I think the RCMP then get the hint that I can see their IP address, just like they can see mine and every other Canadian. The difference is that I can’t get a warrant and request it from Shaw or Rogers. I don’t need to.

199.212.150.16 - - [22/Mar/2011:17:09:45 +0000] “GET /page/2/ HTTP/1.1” 403 529 “http://www.google.ca/search?q=199.212.150.16&hl=en&prmd=ivns&ei=PdmITcrIEoWT0QGXr-36DQ& start=40&sa=N” “Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; INFOWEB-APPROVED; INFOWEB-APPROVED-IE6-EN; INFOWEB-APPROVED-IE6-FR; .NET CLR 1.1.4322; . NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648)” </em>

Then they look for the PRIME BC website. This is troubling if they don’t know where it is either: 199.212.150.16 - - [23/Mar/2011:17:00:06 +0000] “GET /2011/03/prime-bc/ HTTP/1.1” 403 529 “http://www.google.ca/search?hl=en&q=PRIME+BC+website&btn=Google+Search&meta=” “Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)” </em>

It looks like the RCMP like reading the Google Cache. I’m perfectly OK with that, since I can still see what the RCMP are doing when they conduct Open Source surveillance. It’d be interesting to see if the RCMP can adopt new tools, like Google Reader, so that I can have more subscribers to my RSS feed. The goal of the exercise is to see what the RCMP would do if I denied the SINGLE IP access to their website, and I’m really sad to see that not a single one on this wall of shame figured out to use Firefox.

Also, based on the search for Georges El-Azzi, Ryan Kenny and myself, as well as the search for the Vancouver Sun, combined with the fact that most of the Government of Canada uses IE6, I suspect that the majority of the IE8 requests came from the Lower Mainland, and that I’m pissing off members of the ISU who have migrated to other parts of Division E Headquarters. I’m glad that the RCMP in the Lower Mainland decided to upgrade to a better browser. I just don’t know why Firefox or Google Chrome can’t be INFOWEB Approved!

But yeah, looks like I’ll be changing the 403 page on my website, because it gets visits quite often!