|
Ethical Hacker Community Forums
|
|
December 01, 2008, 04:11:46 PM
|
|
169
|
Ethical Hacking Discussions and Related Certifications / Other / Encryption and regulations
|
on: May 02, 2008, 01:41:16 PM
|
|
Years ago when I implemented a laptop encryption solution for my former employer, we had received a list of countries into which the import/export of encrypted data was permissible, and vice versa.
I'm now in a situation where I need to find that list, but through my painstaking consultation with the great oracle of Google, I'm having no luck. All that I seem to be able to find in my searches are stories about people trying to sneak into or out of the US with kiddie-toucher pics. That's not exactly what I'm looking for, obviously, and is leaving a rather nasty taste in my mouth, as well as increasing my disdain for humanity.
It is my understanding that as long as travel isn't to one of the recognized states that sponsor terrorism, that everything is ok. Understandably, I'm feeling the need to verify this before I find out the hard way (or worse, my CEO gets stopped at an airport).
Does anyone know where I might be able to find this information?
Thanks in advance.
|
|
|
|
|
173
|
Ethical Hacking Discussions and Related Certifications / Other / TEMPEST Revisited
|
on: April 30, 2008, 09:09:38 AM
|
New stuff in the news related to Chris' article from last year. NSA has recently de-classified a paper from 1972 that decribes the first account of TEMPEST, and the skeptism that accompanied it. It was 1943, and an engineer with Bell Telephone was working on one of the U.S. government's most sensitive and important pieces of wartime machinery, a Bell Telephone model 131-B2. It was a top secret encrypted teletype terminal used by the Army and Navy to transmit wartime communications that could defy German and Japanese cryptanalysis.
Then he noticed something odd.
Far across the lab, a freestanding oscilloscope had developed a habit of spiking every time the teletype encrypted a letter. Upon closer inspection, the spikes could actually be translated into the plain message the machine was processing. Though he likely didn't know it at the time, the engineer had just discovered that all information processing machines send their secrets into the electromagnetic ether.
Call it a TEMPEST in a teletype.
Bell Telephone faced a dilemma. They had sold the equipment to the military with the assurance that it was secure, but it wasn't. The only thing they could do was to tell the [U.S. Army] Signal Corps about it, which they did. There they met the charter members of a club of skeptics who could not believe that these tiny pips could really be exploited under practical field conditions. They are alleged to have said something like: "Don't you realize there's a war on? We can't bring our cryptographic operations to a screeching halt based on a dubious and esoteric laboratory phenomenon. If this is really dangerous, prove it."
So the Bell engineers were place in a building on Varick Street in New York. Across the street and 80 feet away was Signal Corps Varick Street cryptocenter. The engineers recorded signals for about an hour. Three or four hours later, they produced about 75% of the plain text that was being processed--a fast performance, by the way, that has been rarely equaled.
Click here for the full Wired article and a link to the original NSA document.
|
|
|
|
|
175
|
Ethical Hacking Discussions and Related Certifications / Forensics / "New" tool
|
on: April 29, 2008, 03:04:10 PM
|
Microsoft has built a USB thumb drive for the police that scans computer hard drives.
The Computer Online Forensic Evidence Extractor can be used in police raids to map hard drives and decrypt passwords without shutting the computer down and losing evidence.
The device was shown off at a three-day security conference for 350 law enforcement officials in Redmond, Washington.
"These are things in which we invest substantial resources, but not from the perspective of making money," Microsoft general counsel Brad Smith told the Seattle Times. "We're doing this to help ensure that the internet stays safe."
The thumb drive has 150 commands and can log hard drive activity, check on surfing history and decrypt some passwords.
Microsoft has distributed the device for free since last year, and claims that it is in use by over 2,000 officers in 15 countries.
However, Smith acknowledged that there is a financial upside for Microsoft in giving away the device, since it makes money selling ancillary software and services.
Microsoft has been holding law enforcement meetings since 2006 in an effort to educate police about cyber-crime.
Story
|
|
|
|
|
178
|
Resources / Tutorials / Re: hiding a programme__help
|
on: April 24, 2008, 08:24:18 AM
|
again... Google is your friend there is a substantial amount of information on this topic out there. Show that you actually did some research before posting.
|
|
|
|
|
180
|
Ethical Hacking Discussions and Related Certifications / Certification / Re: What will a CISSP do for me?
|
on: March 03, 2008, 01:16:29 PM
|
just study, knock it out, pay your 85 bucks a year, and then go research and learn the stuff the cert is supposed to represent :-) That's what I'm doing...kind of. Like Don said, this cert covers a LOT, so very few people will actually have hands on expertise with all of it...hence it being considered a "Management" cert. But just passing it has gotten me the opportunity to interview for positions that otherwise may not have given me a second glance(along with glowing references and a stellar resume  ). Living in the DC Metro area, there are a ridiculous number of security positions available, be they working directly for the government, or for a defense contractor, but very few will hire without you already having a clearance. Until the 85-70 came along at any rate. Now, having one of the required certs is a great way to get your foot in the door. The bootcamp I attended also got me some fantastic contacts who have helped me to learn more along the way, as well as putting me in touch with their management for possible future employment. It's a nice club to be in, for sure.
|
|
|
|
|
Loading...
|