full-disclosure - Clever crooks can foil wiretaps, security flaw in tap technology

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4ef5fec60511301048m11a15973v386c4ce266aee202@mail.gmail.com>
Date: Wed Nov 30 18:48:08 2005
From: coderman at gmail.com (coderman)
Subject: Clever crooks can foil wiretaps,
	security flaw in tap technology

heheheh

http://seattlepi.nwsource.com/national/250215_wiretap30.html

'The technology used for decades by law enforcement agents to wiretap
telephones has a security flaw that allows the person being wiretapped
to stop the recorder remotely, according to research by computer
security experts who studied the system. It is also possible to
falsify the numbers dialed, they said.

Someone who is being wiretapped can easily employ these "devastating
countermeasures" with off-the-shelf equipment, said the lead
researcher, Matt Blaze, an associate professor of computer and
information science at the University of Pennsylvania.

"This has implications not only for the accuracy of the intelligence
that can be obtained from these taps but also for the acceptability
and weight of legal evidence derived from it," Blaze and his
colleagues wrote in a paper that will be published today in Security &
Privacy, a journal of the Institute of Electrical and Electronics
Engineers.'

---

To defeat wiretapping systems, the target need only send the same
"idle signal" that the tapping equipment itself sends to the recorder
when the telephone is not in use. The target could continue to have a
conversation while sending the signal.

The tone, also known as a C-tone, sounds like a low buzzing and is
"slightly annoying," Blaze said, "but would not affect the voice
quality" of the call. "It turns the recorder right off," he said. (The
paper can be found at www.crypto.com/papers/wiretapping/.)

---

in band signalling++