Evesdropping On Keyboards Through Electric Emanations

CRT And LCD Monitor Evesdropping Through Electric Emanations

From December 2003:
"The civilian computer-security community became aware of the risk through the work of van Eck in 1985. Military “Tempest” shielding test standards remain secret and no civilian equivalents are available at present. The topic is still largely neglected in security textbooks due to a lack of published experimental data.

This report documents eavesdropping experiments on contemporary computer displays. It discusses the nature and properties of compromising emanations for both cathode-ray tube and liquid-crystal monitors. The detection equipment used matches the capabilities to be expected from well-funded professional eavesdroppers. All experiments were carried out in a normal unshielded office environment. They therefore focus on emanations from display refresh signals, where periodic averaging can be used to obtain reproducible results in spite of varying environmental noise."






They also experimented restoring a diffuse reflection from a white office wall.





http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-577.html
http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-577.pdf


From March 9th, 2006:
Victim Monitor:

"It belongs to a nearby Russian stand, is about 25 meters away from our antenna. Its PowerPoint presentation is clearly readable on our eavesdropping system, which managed to isolate this signal from the many hundred PCs located in the same room."

Evesdropping System:


http://www.lightbluetouchpaper.org/2006/03/09/video-eavesdropping-demo-at-cebit-2006/

The Warcart

"Warcarting: the hobo's approach to wireless communications interception."



"The Warcart is more than a WiFi sniffer. It is a complete wireless communications interceptor built on top of an abandoned shopping cart found in the streets. The above graphic shows the key features of the Warcart. Here is a listing of its capabilities:

1) WiFi Sniffing. With two high-gain WiFi antennas, the Warcart can pick up even the faintest of signals. Software (Kismet) running on one of the laptops records these signals to an external hard drive. [note that actual use of this feature is illegal]

2) Cordless Phone Recording. A powerful 900 MHz antenna and radio scanner can pick up cordless telephone conversations and record them to one of the laptop's hard drives. The obnoxious-mode switch can also switch the live conversation over the PA speaker, ensuring everyone in the community will hear the conversation. [note that actual use of this feature is illegal]

3) USB Flash Drive Dropper. It is old news, now, that a U3 flash drive can be used to take over someone's computer (http://wiki.hak5.org/wiki/USB_Switchblade). One hit of a button on the control panel and several such drives can be dropped. This is the perfect tool to use while taking the Warcart into the office around some cubicles. Someone finds a "lost" flash drive, and he cannot resist plugging it into his machine.

4) Police Communications Monitoring. With a device like the Warcart, it should be not surprising to have an encounter with the authorities. Indeed, it may be troubling if a device such as the Warcart were allowed in the streets without an officer questioning its safety and legality. With the onboard police scanner, however, one can be attune to any intervention before it happens. [note that actual use of this feature is illegal for such purposes]

5) Sentry-Gun-Style Smoke-Grenade Launcher. Courtesy of the kind folks at http://www.keepshooting.com/, the Warcart is equipped with a detachable launcher that emits smoke grenades. These canisters are harmless, but provide a thick smoke for hiding the Warcart's movement. The launcher is attached to a custom-built pan and title mechanism that is operated by a joystick. [note that actual use of this feature is only legal in emergency maritime operations]

6) General-coverage Radio Snooping. The Warcart is equipped with a standard radio scanner. This can pick up most security, emergency services, private operations (handheld walkie-talkies), etc.

7) Bright Lights. The Warcart features a 2-million candle-power spotlight, a halogen "intimidator light" that illuminates the shopping cart, and a neon lamp.

8) Loud PA Speaker. For playing live or recorded radio communications or music. A microphone allows the operator to make announcements. The system works quite well for stopping traffic and clearing pathways on busy sidewalks.

9) Extra Space. There is still enough room within the cart for groceries."


http://web.mit.edu/zacka/www/warcart.html

A Nedap ES3B voting machine hacked in 60 seconds

This how fast a LibertyVote machine could get the data replaced if left unattended.


Oh and by the way, ES3B's radio emanations can be monitored to find out how voters were casting their electronic ballots.

Bluetooth Headsets Easily Hacked

RFID Security

Hacking credit cards:



Hacking cars:



Hacking doors: