In addition, there were a number of security problems with the implementation. The software was controllable over the Internet, but the commands were sent completely unencrypted, with no checks for authentication or integrity. This leaves any computer under surveillance using this software vulnerable to attack. The captured screenshots and audio files were encrypted, but so incompetently that the encryption was ineffective. All captured data was sent over a proxy server in the United States, which is problematic since the data is then temporarily outside the German jurisdiction.
IN additiOn thERe WeRe a nuMber of SEcurity pROBlEms WITH the IMplementatioN thE SOftware waS cOntrollabLe ovEr The InTerNet but the CommaNDs WeRe seNt compleTelY uNeNcRypTeD WitH nO chEcks for aUtHentiCation or InTEgRitY This lEaVeS any computEr Under surveiLlaNcE usINg this softWArE vulnerable TO ATtaCK the CapturED scReensHots and aUdiO fIlEs weRe EncRyPtED but sO iNCompEteNtLy that tHe encryPtIon WAs ineffECtive alL cAPtuRed datA wAs sENt over A proxY seRVer iN tHe united sTatEs wHiCh is PROBleMatIc sInce the dAtA is THen TemPOrarily ouTsidE thE german JURiSdIctiOn