full-disclosure - Does the following...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <e92364c3040911173020faa0ff@mail.gmail.com>
From: jftucker at gmail.com (James Tucker)
Subject: Does the following...

> > 2) RF can be boosted (both ends effective) by adding GAIN to ONE END
> > ONLY. (Yes that means the coke can with a little wire out of one end
> > hanging out of the next door neighbors kids window is in fact a
> > wireless tapping antenna (joke, but this is not by any means
> > impossible))
> 
> 8-)
> 
> True, but I see little relevance to above anecdotes for as far as we
> can tell, the "victims" in both cases were ordinary folk using off-the-
> shelf equipment.  Of course, if the products being used had wide
> manufacturing tolerances, I guess there could be an issue???

I was aiming to merely remind people that when attacking RF the fact
that /your/ end has low gain makes no odds to the attacker in terms of
range (within reason obviously). furthermore, RF can achieve unusual
gain in unusual circumstances, and this too can lead to issues
wherever it is used.

As far as solving this persons problem is concerned (getting back to
the topic at hand). They would be experiencing wierdnesses elsewhere
in windows if any of these (RF) input systems ideas were at fault. If
the keyboard was under use / reciever was getting data from elsewhere
then pressing the windows key would hit the start menu and produce
strange results due to the typing occuring, as with file dialogs and
many other common components. This would not be a msword specific
problem (as described).

Native settings on the MS speech recognition system prevents it from
being active outside of office applications, do the other applications
exhibit the same behavior?

Has word opened up a corrupt temporary file/ file that has been found?

Are plain OLE plugins also effected? (try loading outlook and enabling
word as the default mail editor, see if mail compose comes up with
similiar text). If OLE is unaffected then it is likely a word
extension of some kind or something in normal.dot, like a macro, maybe
even just some text.

The description "typing itself" is a strange one, and the meaning of
which may be different to an end user as to us. If this means
literally it was as if the message was being typed, tell the user to
press ALT and see what happens. If the menus start moving around its a
text-input device problem (keyboard, not speech).  For speech, disable
alternate input devices in the Text Services and Input Languages
panel.

Put simply, more information is required.