#2

Some responses (all anonymous because I didn't want to take any chances) to the question about multiple bugging devices.

Tim - Interesting questions, can't help but ask the 5 w's about your associate !

Because it's you though, and because your questions are quite pointed, my reply to the first one (multiple devices) Answer is yes - but not too often (usually 'selective targeting' - where 2 / 3 phones in a large company are cross connected to o/g spare pairs for obvious reasons.

Answer to second one (Battery operated TX's in Crimnal/covert ops) - a

big 'yes' - when circumstances dictated same from an operational standpoint.

hope this is a help

---------

> Has anyone out there ever found multiple devices in the same
> location on the same sweep?

Not devices, but found four hookswitch bypasses on the same system on the same job about 15 years ago.

> Have any of you former Federal types ever used battery operated > transmitters in criminal/covert operations?

Very frequently. Have you not seen the pictures of entire hollow doors stacked full of 9 volt batteries? Battery packs above the damper in unused fireplaces?

Now a former phed and manufacturing equipment for them, the pheds are fairly heavy (50-100 pieces a year between all domestic agencies) users of our video/audio body wire. They use them about 50% body worn and 50% mobile or fixed portable.

I'm at NATIA this week and hearing these stats from hundreds of guys using our stuff.

Look in any of the professional elsur catalogs (AID, HDS, Tactical, us, LEA) and look at all the battery operated devices.

Do people think covert transmitters are line operated?

---------

Yes, to the second question regarding the use of battery operated devices. Several times. Not sure that I want to get into it.

----------

Yes. I have found multiple devices at the same location on the same sweep on more than one occasion.

----------

I haven't, but I know someone who has. He found 3 telephone taps in one location. I'll contact him and let him decide if he wants to share with you.

----------

On one occasion, I found three hits in one large conference room. They were mike & wire to identical Panasonic VOX recorders at either ends of the room. The mikes were concealed in the drapery valances. The third hit was a hot phone. Sorry, NFI.

---------

Tim......You know we have!!! The stuff OSI had worked great. Can't do it much any more except for consentual. About the only tech equipment I use now are audio recorders with powered mikes and photography. Been busy lately with a death penalty case, but it is interesting to say the least. Keep in touch.

---------

I found a inductive tape and a parasitic transmitter in a phone. Does that help?

LESSONS OF LIFE

The easiest wayto find something lost around the house is to buy a replacement.

Never take life seriously. Nobody gets out alive anyway.

One good turn gets most of the blankets.

Sex is like air; it's not important unless you aren't getting any.

There are two kinds of pedestrians--the quick and the dead.

An unbreakable toy is useful for breaking other toys.

If quitters never win, and winners never cheat, then who is the fool who said "Quit while you're ahead"?

A closed mouth gathers no feet.

Health is merely the slowest possible rate at which one can die.

It's not hard to meet expenses, they're everywhere.

Jury Twelve people who determine which client has the better lawyer.

Never lick a gift horse in the mouth.

The only difference between a rut and a grave is the depth.

Marriage is the triumph of imagination over intelligence. Second marriage is the triumph of hope over experience.

Before marriage, a man yearns for the woman he loves. After marriage, the 'Y' becomes silent.

If you want your spouse to listen and pay strict attention to every word you say, talk in your sleep.


The following unique terms have been used to describe certain people, maybe even some of whom we know.

Not the sharpest knife in the drawer.

Got into the gene pool while the lifeguard wasn't watching.

A room temperature IQ.

Got a full 6-pack, but lacks the plastic thingy to hold them together.

A gross ignoramus--144 times worse than an ordinary ignoramus.

A photographic memory, but the lens cover is glued on.

A prime candidate for natural deselecting.

Bright as Alaska in December.

One-celled organisms outscore him in IQ tests.

Donated his body to science...before he was done using it

. During evolution his ancestors were the control group.

Fell out of the family tree.

Gates are down, the lights are flashing, but the train isn't coming.

Has two brains; one is lost and the other is out looking for it.

He's so dense, light bends around him.

If brains were taxed, he'd get a rebate.

If you give him a penny for his thoughts, you'd get change back.

If you stand close enough to him, you can hear the ocean.

It's hard to believe that he beat 100,000 other sperm.

One neuron short of a synapse.

Some drink from the fountain of knowledge, but he just gargled.

Takes him 1.5 hours to watch "60 Minutes".

Was left on the Tilt-A-Whirl a bit too long as a baby.

=============

From: "James M. Atkinson, Comm-Eng"
Subject: Spread Spectrum Update

Several weeks ago I had a chance to examine a number of spread spectrum microwave bugging devices.

Since that time I've conducted some analysis and gathered further intelligence on the circuit.

Here are a few of my observations.

1. Most of the products use a high bandwidth QPSK/BPSK modulator, multi channel audio CODEC, and a RISC micro-controller chip (all components are either surface mounted ICs or multiple dice potted in epoxy).
2. RF Circuit seems to be a simple homodyne audio transmitter (6 Ghz Gilbert Cell Mixer) which is driven by a single CPU/microcontroller (with a clock speed of 180 Mhz).
3. Frequencies used for the ultra low power device are clean from 130 Mhz to 4 Ghz, circuit starts to fail above 5.5 Ghz (but is still operable to about 8 Ghz).
4. Emitter is driven directly from vector modulator chip, with no power amp circuits. PIN diode found on output appears to provide gain control or disconnect of circuit, but provides no amplification of signal.
5. Noise floor of circuit is -135 dBm (below 2 ghz), -142 dBm (2-4 ghz), and -150 dBm above 4 Ghz.
6. Signal has a variable bandwidth which varies between 350 Mhz and 900 Mhz. Appears to be designed for a 900 Mhz bandwidth signal. Device operates "deep" inside the noise floor.
7. Virtually impossible to detect at close range with a conventional RF spectrum analyzer (492/494/8566/etc).
8. Detectable with most wideband systems (with IF BW above 300 - 900 Mhz, 700 Mhz ideal).
9. VCC = +3.0 VDC, all circuits functional 2.3 to 6.8 VDC
10. Output applied to PIN diode ranges between -28 and -42 dBm (depending on frequency and span)
11. Device enters some type of sleep mode when power is present but audio level is low (seems to auto squelch). Total current draw when in sleep mode is 12 ľA. Device does not emit RF energy when in sleep mode.
12. One of the devices has no type of connection for external power, but instead uses a uses a network of Schottky diodes and capacitors which constitute an effective RF to DC converter.
13. The RF to DC circuit requires an un-modulated 10-15 Ghz RF signal, and seems to respond well to X-Band microwave motion detectors used for many corporate alarm systems.
14. Device also has a small microphone built onto the circuit, microphone measures 4.5mm * 1.6mm * 4.1mm.
15. Entire device measured 3.2 cm * 5.2 cm and about 3 mm thick (or about the thickness of a standard business envelope).
16. Device contains some type of adhesive on both sides of a foil backing. Suspect it's applied as some type of "sticky label". Once the device is installed any attempt to remove results in its total destruction (unless you freeze it off).
17. The French government has been know to use a similar device in some of its "Diplomatic" activities.

Hello everyone,
I am interested in knowing if anyone has delt with a company called "CCS". If so, How was their product line, knowlege, customer service, ranking among other supplers and anything else that you have time to pass. Thank you very much.

===========

I've recently purchased a Scout in Hong Kong and have spent a bit of time understanding it and talking with the Opto people in Ft Lauderdale.

There are a few things about the Opto Scout to know (based on my experience anyway- it will only display the locked on frequency when that frequency is 10% greater than the ambient surroundings. The Scout also generates its own frequency (about 245 Mhz) from within and this will be displayed on the Scouts display with the aerial I have. When you begin to receive a stonger signal (say from a bug) the frequency will move towards the bugs frequency. If you have FILTER switched on, it might lock on to the frequency (although you do not have the benefit of seeing the frequency move towards it)

If the bug/transmitter does not have a precise frequency, but rather tends to jump about (eg. Do It Yourself Kit Bugs available at your friendly HK electronics hobby shop for $US3 per set) the Scout will NOT always lock on to the frequency when in FILTER mode. The gate settings on the Scout, in my opinion, are not suitable for DIY bugs- at least those available in HK and you can easily miss the bug- even if the Scout is sitting on top of it. (This is a function of the Scout's filtering software- everything to the 2nd decimal place or more. If it detected to the 1st decimal place the Scout would be "near" perfect for TSCM work.)

However, in scan mode the bargraph of the Scout will increase as you near the bug. So if you take a test of the outside environment and again when you enter the target area, you will notice the frequency changes. My friend, who also debugs here in Hong Kong for a major debugging company also uses a Scout, but does not use the FILTER on method to detect bugs. He uses the bargraph. (I might add the Scout is also the first piece of equipment he turns on when he arrives.)

You also have to consider the antenae being used. The short stubby one is best around 800MHz. I use an 3' extendable 70 to 1000MHz antenae, but this is no good for 70MHz or less. Opto Electronics can sell you a 40MHZ antenae, a mid range antennae and an upper frequency antenae, plus a couple of filters which are NOT suitable for TSCM work as they each block out a lot of the spectrum. OE also used to produce an amplifier antenae/booster, but does not any more.

The Scout is very particular about the antenae used. There is no one antenae that can pick up the entire 40MHz to 1.4 Gig range of signals the Scout can receive. The distance from the device means little if the antenae is not tuned to the frequency you wish to receive (unless of course its a powerful transmitter close enough to the Scout.)

The Scout DOES NOT lock onto digital signals. (eg GSM mobiles). But I am told will easily lock on to analogue mobile frequencies, taxis etc at a fair distance. (300' was what I was told.)

There is a very knowlegeable sales manager at Opto Electronics (forgotten his name) and a technician called Kenny. They are really helpful. Give them a call. I would also like to know others views on the Scout as I have described above.

=========

Until Later,

Tim Johnson