Home page logo
/

pen-test logo Penetration Testing mailing list archives

Re: [PEN-TEST] Penetration Testing and Van Eck Scanning
From: David Alexander <dalexander () TRISKELE CO UK>
Date: Wed, 8 Nov 2000 15:59:11 -0000

I have never done it, but I have seen the results, it shows legible text.
Ross Anderson at Cambridge University has produced a set of word processing
software that can defeat V-E scanning using software only. What you see on
the screen is not what you see in the van - it's unintelligible. I don't
know how it works and I have no idea if anyone is picking up on it
commercially.

Regards

David Alexander
Project Manager & Information Security Consultant
Qualified BS7799 Lead Auditor
Triskele Ltd.

Office  01491 833280
Mobile 0780 308 3130


-----Original Message-----
From: Johann van Duyn [mailto:johann.vanduyn () APPLETON COM]
Sent: 08 November 2000 15:45
To: PEN-TEST () SECURITYFOCUS COM
Subject: [PEN-TEST] Penetration Testing and Van Eck Scanning


Just a thought I had while on a nicotine-and-caffeine break:

Has anyone ever done a bit of Van Eck (aka TEMPEST)
surveillance as part of
a penetration test, just to show people what can be seen from
a van in the
corporate parking lot when the security attendant is on his
lunch break?
That could provide a few hot debates in boardrooms,
especially if one were
to tune in to the Internet browsing habits of a few senior
directors...

Has anyone done it, or had/seen it done (esp. outside of a military
environment)? Are there any good references around re.
proposed civilian
standards for 'safety' from Van Eck scanning? And where would one look
around either for people who do that type of surveillance, or
the equipment
to do that with.

And, finally, if this is not the right forum for such
discussions, could
anyone in the know point me to such?

Very ta,

+----------------
| Johann van Duyn BA, MCSE, BCP-ISS
| Network Manager: The Appleton Group Ltd
| johann.vanduyn () appleton com
| tel. +27 21 7998026
| cel. +27 82 4588472
| fax. +27 21 7944677
+----------------

"Many that live deserve death. And some that die deserve
life. Can you give
it to them? Then do not be too eager to deal out judgement.
For even the
very wise cannot see all ends."
                -- Gandalf, in "Lord of the Rings" by JRR Tolkein


***The Appleton Group Ltd***

This message, including any attachments, is intended only for
the individual
or institution to which it is addressed and may contain
information that is
privileged, confidential or prohibited from disclosure or
unauthorized use.
If the recipient of this transmission is not the intended
recipient, you are
hereby notified that any use, reproduction dissemination, copying,
disclosure, modification, distribution and/or publication of
this email
message or any of its attachments other than by its intended
recipient is
strictly prohibited by the sender. If you have received this
message in
error, please notify The Appleton Group Ltd immediately at
postmaster () appleton com and destroy the message and all
copies thereof in
your possession.

****************************


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault