Iranian Hacker Rattles Security Circles

- By SOMINI SENGUPTA - The New York Times - September 11, 2011

He claims to be 21 years old, a student of software engineering in Tehran who reveres Ayatollah Ali Khamenei and despises dissidents in his country.

He sneaked into the computer systems of a security firm on the outskirts of Amsterdam. He created fake credentials that could allow someone to snoop on Internet connections that appeared to be secure. He then shared that bounty with people he declines to name.

The fruits of his labor are believed to have been used to tap into the online communications of as many as 300,000 unsuspecting Iranians this summer. What’s more, he punched a hole in an online security mechanism that is trusted by millions of Internet users all over the world.

Comodohacker, as he calls himself, insists he acted on his own and is unperturbed by the notion that his work may have been used to spy on antigovernment compatriots.

“I’m totally independent,” he said in an e-mail exchange with The New York Times. “I just share my findings with some people in Iran. They are free to do anything they want with my findings and things I share with them, but I’m not responsible.”

In the annals of Internet attacks, this is likely to go down as a moment of reckoning. For activists, it shows the downside of using online tools to organize: an opponent with enough determination and resources just might find a way to track their every move.

It also calls into question the reliability of a basic system of trust that global Internet brands like Google and Facebook, along with their users, rely upon. The system is intended to verify the authenticity of a particular Web site — to ensure, in effect, that Gmail is Gmail, and that the connection to the site is encrypted and difficult for an outsider to monitor.

Hundreds of companies and government authorities around the world, including in the United States and China, have the power to issue the digital certificates that the system relies upon to verify a site’s identity. The same hacker is believed to be responsible for attacks on three such companies.

In March, he claimed credit for a breach of Comodo, in Italy. In late August came the attack on the Dutch company DigiNotar. On Friday evening, a company called GlobalSign said it had detected an intrusion into its Web site, but not into more confidential systems.

Armed with certificates stolen from companies like these, someone with control over an Internet service provider, like the Iranian authorities, could trick Internet users into thinking they were safely connected to a familiar site, while eavesdropping on their online activity.

Fearing the prospect of other breaches similar to those carried out by this hacker, Mozilla, the maker of the Firefox Web browser, last week issued a warning to certificate authority companies to audit their security systems or risk being booted off Firefox.

“It is a real example of a weakness in security infrastructure that many people assumed was trustworthy,” said Richard Bejtlich, the chief security officer of Mandiant Security in Alexandria, Va. “It’s a reminder that it is only as trustworthy as the companies that make up the system. There are bound to be some that can’t protect their infrastructure, and you have results like this.”

Comodohacker said via e-mail that he began his explorations by scrolling through a list of certificate authority companies. DigiNotar caught his interest because it was Dutch. He said he was motivated by the failure of Dutch peacekeepers to prevent the massacres of Muslims in Srebenica in 1995. He also said he chose the Dutch company because of a Dutch legislator, Geert Wilders, who has built a political career out of criticizing Muslims in his country.

DigiNotar, which is owned by an Illinois company called Vasco Data Security International, did not make the attack particularly difficult, according to a report by Fox-IT, a security company that was commissioned by the Dutch government to investigate. The company’s critical servers contained malicious software that should have been spotted by antivirus tools, the report said, and the servers related to certificates were all protected by just one weak password. DigiNotar did not respond to requests for comment last week.

There was fallout in the Netherlands as well. The government there said last week that it was widening its investigation into the breach in an effort to learn whether the private data of Dutch citizens, many of whom file income tax returns online, had been compromised.

Comodohacker apparently began poking around DigiNotar’s systems in early June, the Fox-IT report said. He gained control of the server in about 10 days and generated 531 fake certificates, including some for well-known sites like Google, Skype and Facebook, along with a few foreign intelligence sites. He shared them with a person or organization believed to have had control over dozens of Internet service providers and university networks in Iran — perhaps the government itself.

Fox-IT concluded that over the course of a month, 300,000 people were served up fake certificates produced by Comodohacker. E-mails, chats, user names and passwords could have been monitored, revealing who they were talking to and what they were planning.

Google on Thursday issued an unusual warning to its users in Iran, calling on them to change passwords and check if their e-mails were being forwarded to unfamiliar or suspicious addresses.

Word of the Google warning caught the attention of Jubeen Sharbaf, an Iranian in Toronto. He is not ignorant of the Iranian government’s attempts to spy on its people, he said via e-mail. “This was alarming though because Google is perceived to be very secure, and beside Skype it has been used for the line of communication within and outside Iran,” he said.

Comodohacker was plainspoken about his motivations.

“My country should have control over Google, Skype, Yahoo, etc.,” he said by e-mail. “I’m breaking all encryption algorithms and giving power to my country to control all of them.”

In the days since his attack was discovered, Comodohacker posted lengthy explanations on Pastebin, a sort of Internet bulletin board, of how he had penetrated the system of the Dutch firm and why, along with his e-mail address.

He has also boasted of his own skills, calling his work the “most sophisticated hack of all time,” and at one point exclaiming: “I’m really sharp, powerful, dangerous and smart!”

Mikko Hypponen, a security researcher with F-Secure Labs of Helsinki, said the hacker was “somebody who has skills, and he also has the old-school hacker mentality where he likes to boast.” Mr. Hypponen added: “If he were an intelligence analyst for the secret police he wouldn’t be doing this.”

Asked whether he was paid for his services, the hacker replied in broken English: “I don’t fight for my belief for award in this world.”

The e-mail he sent appears to have come from a computer in Russia, according to an independent security analyst who reviewed it. Comodohacker has either remotely taken control of someone’s computer in Russia, or he may not be an Iranian software engineer at all.

Artin Afkhami and Kevin J. O'Brien contributed reporting.




A message from Comodo Hacker - March 26th, 2011

Hello

I'm writing this to all the world, so you'll know more about us..

At first I want to give some points, so you'll be sure I'm the hacker:

I hacked Comodo from InstantSSL.it, their CEO's e-mail address This email address is being protected from spambots. You need JavaScript enabled to view it.
Their Comodo username/password was: user: gtadmin password: globaltrust
Their DB name was: globaltrust and instantsslcms

Enough said, huh? Yes, enough said, someone who should know already knows...

Anyway, at first I should mention we have no relation to Iranian Cyber Army, we don't change DNSes, we just hack and own.

I see Comodo CEO and other wrote that it was a managed attack, it was a planned attack, a group of cyber criminals did it, etc.

Let me explain:

a) I'm not a group, I'm single hacker with experience of 1000 hacker, I'm single programmer with experience of 1000 programmer, I'm single planner/project manager with experience of 1000 project managers, so you are right, it's managed by 1000 hackers, but it was only I with experience of 1000 hackers.

b) It was not really a managed hack. At first I decided to hack RSA algorithm, I did too much investigation on SSL protocol, tried to find an algorithm for factoring integer, for now I was not able to do so, at least not yet, but I know it's not impossible and I'll prove it, anyway... I saw that there is easier ways of doing it, like hacking a CA. I was looking to hack some CAs like Thawthe, Verisign, Comodo, etc. I found some small vulnerabilities in their servers, but it wasn't enough to gain access to server to sign my CSRs. During my search about InstantSSL of Comodo, I found

InstantSSL.it which was doing same thing under control of Comodo. After a little try, easily I got FULL access on the server, after a little investigation on their server, I found out that TrustDll.dll takes care of signing. It was coded in C#.

Simply I decompiled it and I found username/password of their GeoTrust and Comodo reseller account.

GeoTrust reseller URL was not working, it was in ADTP.cs. Then I found out their Comodo account works and Comodo URL is active. I logged into Comodo account and I saw I have right of signing using APIs. I had no idea of APIs and how it works. I wrote a code in C# for signing my CSRs using POST request to APIs, I learned their APIs so FAST and their TrustDLL.DLL was too old and was sending too little parameters, it wasn't enough for signing a CSR. As I said, I rewrote the code for !AutoApplySSL and !

PickUpSSL APIs, first API returns OrderID of placed Order and second API returns entire signed certificate if you pass OrderID from previous call. I learned all these stuff, re-wrote the code and generated CSR for those sites all in about 10-15 minutes. I wasn't ready for these type of APIs, these type of CSR generation, API calling, etc. But I did it very very fast.

Anyway, I know you are really shocked about my knowledge, my skill, my speed, my expertise, that's all OK, all of it was so easy for me, I did more important things I can't talk about, so if you have to worry, you can worry... I should mention my age is 21 Let's back to reason of posting this message.

I'm telling this to the world, so listen carefully:

When USA and Israel write Stuxnet, nobody talks about it, nobody gots blamed, nothing happened at all, so when I sign certificates nothing happens, I say that, when I sign certificates nothing should happen. It's a simple deal.

When USA and Isarel could read my emails in Yahoo, Hotmail, Skype, Gmail, etc. without any simple little problem, when they can spy using Echelon, I can do anything I can. It's a simple rule. You do, I do, that's all. You stop, I stop. It's rule #1 (My Rules as I rule to internet, you should know it already...)

Rule#2: So why all the world got worried, internet shocked and all writers write about it, but nobody writes about Stuxnet anymore? Nobody writes about HAARP, nobody writes about Echelon... So nobody should write about SSL certificates.

Rule#3: Anyone inside Iran with problems, from fake green movement to all MKO members and two faced terrorist, should afraid of me personally. I won't let anyone inside Iran, harm people of Iran, harm my country's Nuclear Scientists, harm my Leader (which nobody can), harm my President, as I live, you won't be able to do so. as I live, you don't have privacy in internet, you don't have security in digital world, just wait and see...

Rule#4: Comodo and other CAs in the world: Never think you are safe, never think you can rule the internet, rule the world with a 256 digit number which nobody can find it's 2 prime factors, I'll show you how someone in my age can rule the digital world.

Rule#5: To microsoft, mozilla and chrome who updated their softwares as soon as instructions came from CIA. You are my targets too. Why Stuxnet's Printer vulnerability patched after 2 years? Because it was need in Stuxnet? So you'll learn sometimes you have to close your eyes on some stuff in internet, you'll learn... You'll learn... I'll bring equality in internet. My orders will equal to CIA orders, lol ;)

Rule#6: I'm a GHOST

Rule#7: I'm unstoppable, so afraid if you should afraid, worry if you should worry.

A message in Persian: Janam Fadaye Rahbar

U.S. treasury department used to print Continental Money, or "Green Back" debt free notes at no interest to the American people and government

1862 U.S. treasury department print green back notes at no interest to the federal government

In 1861, when President Lincoln goes to New York and ask to borrow money for the civil war, from the money changers, and or the criminal bankers, they offered him loan at 36% interest, Lincoln refused and asked Colonel Dick Taylor, a close friend of his to help out. After some times investigating the matter, he reports back saying:

"Why, Lincoln, that is easy; just get congress to pass a bill authorizing the printing of full legal tender treasury notes, and pay your soldiers with them and go ahead and win your war with them also." Colonel Dick Taylor

And when Lincoln ask Colonel Dick Taylor, will people of the United States accept the notes.? He was told:

"The people or anyone else will not have any choice in the matter, if you make them full legal tender. They will have the full sanction of the government and be just as good as any money; as Congress is given that express right by the constitution." Colonel Dick Taylor

And that is exactly what Lincoln did, in 1862-1863 U.S. treasury department printed 450 million dollars of new money at no interest to the federal government, and in order to distinguish them from other private bank notes in circulation, he printed them using green ink, the money became known as "Green Back".

President Lincoln fully understood the destructive role private bankers and or money changers have been playing. He said:

"The Government should create, issue, and circulate all the currency and credit needed to satisfy the spending power of the Government, and the buying power of the consumers."  

"The privilege of creating and issuing money is not only the supreme prerogative of Government, but it is the Government's greatest creative opportunity."

"By the adoption of these principles, the taxpayers will be saved immense sums of interest. Money will cease to be master and become the servant of humanity."  16th President, Abraham Lincoln

Soon after, a remarkable editorial, boldly expressing the criminal private bankers, and or money changers attitude towards U.S. treasury's "Green Back" printed American notes, was printed in the Times of London.

"If this mischievous financial policy, which has its origin in North America, shall become indurated down to a fixture, then all Governments will furnish its own money without cost. It will pay off debts and be without debt. It will have all the money necessary to carry on its commerce. It will become prosperous without precedent in history of the world.  The brains, and wealth of all countries will go to North America. That country must be destroyed, or it will destroy every monarchy on the globe." - Times of London

Precisely the reason why President Abraham Lincoln was murdered, soon after the civil war ended, to the contrary of the criminal private bankers, and or money changer's wishes.

20th President, James Garfield was elected in 1881, he was fully aware of the devastating effect of fiat money on U.S. economy. After his inauguration, President Garfield exposes the criminal private bankers, and or money changers by saying:

"Whosoever controls the volume of money in any country is absolute master of all industry and commerce. And when you realize that the entire system is very easily controlled, one way, or another, by a few powerful men at the top, you will not have to be told how periods of inflation and depression originate." - President James Garfield

Sadly within two weeks after his speech, on July 02, 1881 President Garfield was murdered too.

35th President, John F. Kennedy had already put his plan of action to U.S. treasury department by signing an executive order # 11110, on June 4,1963, ordering the treasury to begin printing money just the same as Abraham Lincoln did; unfortunately six months later he was murdered on November 22, 1963. Lyndon Baines Johnson's first order of business was canceling JFK's executive order to U.S. treasury department.

Worth mentioning that when 7th U.S. President, Andrew Jackson refused to renew the money changers charter, an unsuccessful assassination attempt were made against him.

The following is from American Bankers Association's memo sent to its members in 1891, directing them three years in advance how to create a depression and plunder the American people's farms, homes and money.

"On September 1st, 1894, we will not renew our loans under any consideration. On September 1st, we will demand our money."

"We will foreclose and become mortgagees in possession. We can take two-third of the farms west of the Mississippi, and thousands of them east of the Mississippi as well, at our own price. Then the farmers will become tenants as in England." - 1891 American Bankers Association - As printed in the Congressional Record of April 29, 1913.

The United States Federal Government's Debt is estimated to be $20,400,000,000,000.00 trillion dollars. The so-called National Debt, is paper money printed simply at the cost of ink and paper and put in circulation by the criminal bankers. We, the people, will never be debt free, because to be debt free, U.S. Treasury Department has to print our own money instead of borrowing fiat money from the murderers, the criminal bankers.

The Interest Expense Fiscal Year 2017 on the so-called National Debt amounts to: $434,628,040,135.35, which means we, the people are forced to pay income tax, and four-hundred-thirty-four billion dollars of our money is paid annually to the criminal bankers for interest on the fiat money they printed and put in circulation in this country.

https://www.treasurydirect.gov/govt/reports/ir/ir_expense.htm

It is the duty of every American to inform our congress representatives and remind them of their job's responsibilities, encouraging them to do the right honorable thing, or we, the people, must vote them out.

For more information please visit: http://www.themoneymasters.com/

All Wars Are Banker Wars, All Bank Owners are Jews

In Shift, Iran's President Calls for End to Syrian Crackdown

- By NEIL MacFARQUHAR - The New York Times - September 8, 2011

For years, posters celebrating the decades-old alliance joining Syria and Iran festooned the streets and automobiles of the Syrian capital — the images of Presidents Bashar al-Assad and Mahmoud Ahmadinejad embroidered with roses and daffodils.

But that alliance is now strained, and on Thursday, President Ahmadinejad of Iran became the most recent, and perhaps the most unexpected, world leader to call for President Assad to end his violent crackdown of an uprising challenging his authoritarian rule in Syria.

When the Arab Spring broke out, upending the regional order, Iran seemed to emerge a winner: its regional adversary, Hosni Mubarak of Egypt, was ousted from power and its most important ally, Syria, was emboldened.

But the popular demands for change swept into Syria, and now, as Mr. Assad’s forces continue to shoot unarmed demonstrators, Iran sees its fortunes fading on two fronts: its image as a guardian of Arab resistance has been battered, and its most important regional strategic ally is in danger of being ousted.

Even while it has been accused of providing financial and material support for Mr. Assad’s crackdown, Iran has increased calls for Syria to end the violence and reform its political process, a formula Tehran apparently hopes will repair its image and, if heeded, possibly bolster Mr. Assad’s standing.

“Regional nations can assist the Syrian people and government in the implementation of essential reforms and the resolution of their problems,” Mr. Ahmadinejad said in an interview in Tehran, according to his official Web site. Other press accounts of the interview with a Portuguese television station quoted him as also saying, “A military solution is never the right solution,” an ironic assessment from a man whose own questionable re-election in 2009 prompted huge street demonstrations that were put down with decisive force.

The collapse of the Assad government would be a strategic blow to Shiite-majority Iran, cutting off its most important bridge to the Arab world while empowering its main regional rivals, Saudi Arabia and its increasingly influential competitor, Turkey, both Sunni-majority nations. Iran would also lose its main arms pipeline to Hezbollah in Lebanon, further undermining its ambition to be the primary regional power from the Levant to Pakistan.

Not long ago, Iran and its Arab allies like Hezbollah’s leader, Hassan Nasrallah, were seen as folk heroes to many Arabs for their confrontational stance toward the United States and Israel.

But Iran has suddenly found itself on the wrong side of the barricades.

“Assad’s heroic image of resistance is being watered down,” said Vali Nasr, a professor at Tufts University and the author of “The Shia Revival: How Conflicts Within Islam Will Shape the Future.” “That’s the problem for Iran and for Hezbollah. They are trying to find out how to have their cake and eat it, too.”

Demonstrators clogging the streets from Tunisia to Egypt to Syria are demanding freedom and democracy, forcing Iran to openly struggle with the problem of how to endorse the revolutionary spirit while simultaneously buttressing its crucial strategic Arab ally.

“They don’t fit into the framework of toppling dictators and democracy and all that,” said Paul Salem, director of the Carnegie Middle East Center in Lebanon.

Yet many analysts say that the Iranians have tried to play both sides of the barricades, supporting their allies in Syria with all manner of aid while simultaneously voicing support for the revolutions elsewhere, initially calling them the offspring of their own 1979 revolution.

“It is mostly for the Arab gallery, rather than a tangible policy shift,” said Cengiz Candar, a prominent Turkish columnist. “In terms of the Syrian opposition, there is nobody Iran can stand on in case the regime is replaced.”

Iran has been helping Syria with everything from money to advice on controlling the Internet, analysts say, offering its expertise to help stave off the catastrophe that Mr. Assad’s collapse would be for Tehran’s regional ambitions. Aside from propping up Syria with billions of dollars, it has pressed others, including Iraq, to support Mr. Assad.

Syrian protesters take it as a matter of faith that security forces from both Iran and Hezbollah have been drawn into the fray, trading cellphone videos that are said to show Hezbollah fighters streaming across the border in black S.U.V.’s.

Given that the Assad government has had about 40 years to perfect the instruments of repression, most analysts believe that it does not really need men or much advice from the outside.

But in its ever more stringent sanctions against Syria, the European Union included the Quds force of Iran’s Revolutionary Guards, accusing it of providing “technical assistance, equipment and support to the Syrian security services to repress civilian protest movements.”

Analysts are convinced that behind the scenes the Iranians are pushing for a tough line, suggesting that their repression of the 2009 democracy protests in Iran is the model to follow.

“Iran calling for Syria to dialogue rather than use force against its population is akin to Silvio Berlusconi telling Charlie Sheen not to womanize,” said Karim Sadjadpour of the Carnegie Endowment for International Peace, who is a sharp critic of the Iranian leadership.

Analysts say the scale and the duration of the protests in Syria just became too great for the Iranians to ignore, and yet they still try.

“Muslim people in Egypt, Libya, Tunisia, Yemen and other countries are in need of this vigilance today,” the supreme leader, Ayatollah Ali Khamenei, said in a recent sermon marking the end of the holy month of Ramadan. “They must not let the enemies hijack the victories they have gained.”

Then he talked about the oppression of people in Bahrain — which is mainly Shiite — before moving on to the famine in Somalia.

On the other hand, the constant focus on the potential repercussions of the uprisings clearly shows that Iran’s leaders are worried. Not least among their worries is that the protests could set off renewed demonstrations at home, although aside from some environmental protests in the northwest, nothing significant has been reported.

There is also an increasingly vocal school of thought in Iran that says it has too much vested in the Assad government. Among other things, it has allowed regional competitors like Turkey, a largely Sunni country, to advance at the expense of Shiite Iran. The Iranians’ minority status across much of the Arab world can make their religious credentials suspect to the majority — who might accuse them of being a force for sectarianism.

“The reality of the matter is that our absolute support for Syria was a wrong policy,” Ahmad Avaei, a member of Parliament, told the Web site Khabar Online. “The people protesting against the government in that country are religious people, and the protest movement there is a grass-roots movement.”

At stake is Iran’s image in the wider region, and its ability to add teeth to its claim to be upholding Arab and Muslim interests in confronting Israel.

“Iran wants to be perceived as the voice of the downtrodden in the Middle East, the one country that speaks truth to power,” Mr. Sadjadpour said. “Their close rapport with the Assad regime undermines that image.”

 

Anne Barnard contributed reporting from Beirut, Lebanon; Heba Afify from Cairo; and Artin Afkhami from Boston.

Bullying Law Puts New Jersey Schools on Spot

By WINNIE HU - The New York Times - August 30, 2011

Under a new state law in New Jersey, lunch-line bullies in the East Hanover schools can be reported to the police by their classmates this fall through anonymous tips to the Crimestoppers hot line.

In Elizabeth, children, including kindergartners, will spend six class periods learning, among other things, the difference between telling and tattling.

And at North Hunterdon High School, students will be told that there is no such thing as an innocent bystander when it comes to bullying: if they see it, they have a responsibility to try to stop it.

But while many parents and educators welcome the efforts to curb bullying both on campus and online, some superintendents and school board members across New Jersey say the new law, which takes effect Sept. 1, reaches much too far, and complain that they have been given no additional resources to meet its mandates.

The law, known as the Anti-Bullying Bill of Rights, is considered the toughest legislation against bullying in the nation. Propelled by public outcry over the suicide of a Rutgers University freshman, Tyler Clementi, nearly a year ago, it demands that all public schools adopt comprehensive antibullying policies (there are 18 pages of “required components”), increase staff training and adhere to tight deadlines for reporting episodes.

Each school must designate an antibullying specialist to investigate complaints; each district must, in turn, have an antibullying coordinator; and the State Education Department will evaluate every effort, posting grades on its Web site. Superintendents said that educators who failed to comply could lose their licenses.

“I think this has gone well overboard,” Richard G. Bozza, executive director of the New Jersey Association of School Administrators, said. “Now we have to police the community 24 hours a day. Where are the people and the resources to do this?”

In most cases, schools are tapping guidance counselors and social workers as the new antibullying specialists, raising questions of whether they have the time or experience to look into every complaint of harassment or intimidation and write the detailed reports required. Some administrators are also worried that making schools legally responsible for bullying on a wider scale will lead to more complaints and open the door to lawsuits from students and parents dissatisfied with the outcome.

But supporters of the law say that schools need to do more as conflicts spread from cafeterias and corridors to social media sites, magnifying the effects and making them much harder to shut down. Mr. Clementi jumped off the George Washington Bridge after his college roommate secretly used a webcam to capture an intimate encounter between Mr. Clementi and another man and stream it over the Internet, according to the police.

“It’s not the traditional bullying: the big kid in the schoolyard saying, ‘You’re going to do what I say,’ ” Richard Bergacs, an assistant principal at North Hunterdon High, said.

Dr. Bergacs, who investigates half a dozen complaints of bullying each month, said most involved both comments on the Internet and face-to-face confrontations on campus. “It’s gossip, innuendo, rumors — and people getting mad about it,” he said.

This summer, thousands of school employees attended training sessions on the new law; more than 200 districts have snapped up a $1,295 package put together by a consulting firm that includes a 100-page manual and a DVD.

At a three-hour workshop this month, Philip W. Nicastro, vice president of the firm, Strauss Esmay Associates, tried to reassure a group of newly named antibullying specialists and coordinators gathered in a darkened auditorium at Bridgewater-Raritan High School.

“I know many of you came in here saying, ‘Holy cow, I’m going to be dealing with 10 reports a day because everything is bullying,’ ” he told the audience, some of whom laughed nervously.

Afterward, Meg Duffy, a counselor at the Hillside Intermediate School in Bridgewater, acknowledged that the new law was “a little overwhelming.” She said cyberbullying increased at her school last year, with students texting or posting mean messages about classmates.

The law also requires districts to appoint a safety team at each school, made up of teachers, staff members and parents, to review complaints. It orders principals to begin an investigation within one school day of a bullying episode, and superintendents to provide reports to Trenton twice a year detailing all episodes. Statewide, there were 2,846 such reports in 2008-9, the most recent year for which a total was available.

In the East Hanover district, the new partnership with Crimestoppers, a program of the Morris County sheriff’s office, is intended to make reporting easier, but it also ups the ante by involving law enforcement rather than resolving issues in the principal’s office. Crimestoppers will accept anonymous text messages, calls or tips to its Web site, then forward the information to school and local police officials.

The district is also spending $3,000 to expand antibullying training to most of its staff, including substitute teachers, coaches, custodians and cafeteria aides. It is also planning its first Community Night of Respect for students and parents in October.

“We really want to be able to implement this new law and achieve results,” the district’s superintendent, Joseph L. Ricca, said, though he added that the law’s “sheer scope may prove to be a bit unwieldy and may require some practical refinement.”

In Elizabeth, antibullying efforts will start in the classroom, with a series of posters and programs, including role-playing exercises. In one lesson, students will study pictures of children’s faces and talk about the emotions expressed (annoyance, disappointment), while in another, they will practice saying phrases like “I am angry.”

“The whole push is to incorporate the antibullying process into the culture,” Lucila Hernandez, a school psychologist, said. “We’re empowering children to use the term ‘bullying’ and to speak up for themselves and for others.”

Even districts that have long made antibullying programs a priority are preparing to step up their efforts, in response to the greater reporting demands. “This gives a definite timeline,” the Westfield superintendent, Margaret Dolan, said, noting the new one-day requirement. “Before, our rule was you need to do it as quickly as possible.”

But Dr. Dolan cautioned that an unintended consequence of the new law could be that students, or their parents, will find it easier to label minor squabbles bullying than to find ways to work out their differences.

“Kids have to learn to deal with conflict,” she said. “What a shame if they don’t know how to effectively interact with their peers when they have a disagreement.”