Slashdot Mirror


Cracking the GPS Galileo Satellite

Glyn writes "Newswise is reporting the the encryption in the Galileo GPS signal has been broken. The pseudo random number generator used to obscure the information stored in the Galileo GPS signal has been broken. From the article: 'Members of Cornell's Global Positioning System (GPS) Laboratory have cracked the so-called pseudo random number (PRN) codes of Europe's first global navigation satellite, despite efforts to keep the codes secret. That means free access for consumers who use navigation devices -- including handheld receivers and systems installed in vehicles -- that need PRNs to listen to satellites.'"

364 comments

  1. Anyone knows.. by Guillersk · · Score: 1

    If is possible to chenge the key used to avoid this?

    1. Re:Anyone knows.. by Electrode · · Score: 1

      Considering the early stage of the system's deployment, probably.

    2. Re:Anyone knows.. by dmrobbin · · Score: 1

      they aren't encrypting anything here's how it works http://electronics.howstuffworks.com/gps1.htm

  2. Galileo != GPS by matt4077 · · Score: 3, Informative

    Galileo is the European System, GPS is the American. "GPS" is kind of generic, so I guess it's going to be the name for the whole category, but I'd be nice if we could use something different to distingish between "some" GPS and the "American" GPS.

    1. Re:Galileo != GPS by Anonymous Coward · · Score: 5, Informative

      > I'd be nice if we could use something different to distingish between "some" GPS and the "American" GPS.

      There is: the "American GPS" is named NAVSTAR according to this site

    2. Re:Galileo != GPS by Tugrik · · Score: 4, Informative

      If you want to get technical, the "American" system is called NAVSTAR GPS, which stands for NAVigation Signal Timing And Ranging Global Positioning System.

    3. Re:Galileo != GPS by l3v1 · · Score: 0, Flamebait

      GPS is the American

      American thinking. GPS is a name, a definition, etc. It has nothing to do with geography, states or companies. Whether the U.S. has a GPS or the E.U. has a GPS is irrelevant. Still different to distingish between "some" GPS you can do that distinction easily, since the european one has the name Galileo associated to it. Only americans can think nobody else can make a GPS so they don't even bother to give theirs a name. It's like you called american cars just "cars".

      --
      I am putting myself to the fullest possible use, which is all I can think that any conscious entity can ever hope to do.
    4. Re:Galileo != GPS by l3v1 · · Score: 1

      Ok, it has a name "NAVSTAR", so there you go.

      --
      I am putting myself to the fullest possible use, which is all I can think that any conscious entity can ever hope to do.
    5. Re:Galileo != GPS by GreyPoopon · · Score: 1
      Only americans can think nobody else can make a GPS so they don't even bother to give theirs a name.
      I really hope you didn't intend this as an insult to Americans. As stated elsewhere, the American GPS is named NAVSTAR. Almost nobody uses the full name because for years and years the NAVSTAR GPS was the only one in existence. It isn't arrogance on the part of Americans as your statement seems imply; it's simply because for a long time the shorter term GPS was not ambiguous.
      --

      GreyPoopon
      --
      Why is it I can write insightful comments but can't come up with a clever signature?

    6. Re:Galileo != GPS by Anonymous Coward · · Score: 0

      GPS could have been called by any number of similarly "generic" names. Just because us Europeans build an SNS (satellite navigation system) doesn't mean that "GPS" is no longer associated with the "Navstar global positioning system". People don't mean Glonass when they say "GPS", and they don't mean the Galileo global navigation satellite system either. There might be an effect like the verbification of Google, but GPS is not just a generic category. GPS usually means one specific implementation of a SBPS (satellite based positioning service).

    7. Re:Galileo != GPS by Anonymous Coward · · Score: 0

      It's like you called american cars just "cars".

      ...and like you called American Football just "Football" and call English Football "Soccer".

    8. Re:Galileo != GPS by Anonymous Coward · · Score: 0

      Actually, the Russian variant has been operational too. However, it currently isn't very usefull, although there are plans to bring it back on track.

    9. Re:Galileo != GPS by Professor_UNIX · · Score: 5, Funny
      I'd be nice if we could use something different to distingish between "some" GPS and the "American" GPS.
      To paraphrase Michael Bolton, "Why doesn't he change his name, he's the one that sucks!"
    10. Re:Galileo != GPS by Anonymous Coward · · Score: 0

      What are you talking about? GPS is the "Galileo Positioning System". You americans will have to find another label for your system.

    11. Re:Galileo != GPS by HuguesT · · Score: 2, Informative

      Actually NAVSTAR is not the only one available. The Russians also have a satellite navigation system called GLONASS. GLONASS is purely military, AFAIK, but has been in operation since the 80s.

    12. Re:Galileo != GPS by Anonymous Coward · · Score: 0
      There is: the "American GPS" is named NAVSTAR according to this site.
      Actually the official name is NAVSTAR GPS. Not just NAVSTAR.
    13. Re:Galileo != GPS by DrSkwid · · Score: 1

      Soccer is a contraction of Association Football, as opposed to Rugby Football. (soccer & rugger)

      Use of the term "soccer" (as opposed to competing terms "socca" & "socker") dates from around 1890. The Princeton rules of American Football were formulated in 1867, the same year the American Football was patented.

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    14. Re:Galileo != GPS by modecx · · Score: 1

      I'd be nice if we could use something different to distingish between "some" GPS and the "American" GPS.

      Besides, it would be a bitch to change all of the stationaty.

      --
      Constitutional rights may be respected, repealed, or modified; but they must never be ignored.
    15. Re:Galileo != GPS by afidel · · Score: 1

      You can get usefull information out of the GLONASS system without an encryption key, just like you can use the P-code for refinement without having a key. For the most accurate positioning possible you use the C/A code in differential mode with 2 or more antennas then get atmospheric shift information by calculating signal drift on the P-code and the GLONASS signals. This allows mm precision for a fixed position over a period of time. You could probably obtain similar results using only the C/A code but it would take somewhere around an order of magnitude more time.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    16. Re:Galileo != GPS by hughk · · Score: 1

      A loong time ago (early nineties) a bit of Alcatel was producing a GPS navigation system for civilian aircraft that was switchable between GLONASS and NAVSTAR. In those days there was a lot of uncertainty both about selective availability as well as public access being disabled at short notice.

      --
      See my journal, I write things there
    17. Re:Galileo != GPS by PhxBlue · · Score: 1

      Actually, no it isn't. I work on the base that controls the GPS satellites, and they dropped "NAVSTAR" from their name a few years ago.

      --
      !#@%*)anks for hanging up the phone, dear.
    18. Re:Galileo != GPS by BlueWire · · Score: 1

      Your base may have dropped "NAVSTAR" but it still appears to be part of the overall program name- at least as seen here.

      --
      Yes, but whats that got to do with the price of tea in D'ni?
    19. Re:Galileo != GPS by PhxBlue · · Score: 1

      Yes, I told them the name dropped out of GPS a few years back, and they still haven't updated their Web page. You'll notice, however, that the word "Navstar" is nowhere in the GPS fact sheet.

      --
      !#@%*)anks for hanging up the phone, dear.
  3. meh by Anonymous Coward · · Score: 0, Funny

    Street signs or maps work for me!

    1. Re:meh by Anonymous Coward · · Score: 1, Funny
      Street signs or maps work for me!


      Never been to Cincinnati then have you?
    2. Re:meh by frostilicus2 · · Score: 1

      You must be in the 1% of slashdotters who actually leave their parent's basement.

      --
      Nothing sucks like a Vax, nothing blows like a PowerMac G4
    3. Re:meh by sseaman · · Score: 0
      Their encryption scheme is even more complex. Hundreds of acoustic patterns are variably and arbitrarily mapped onto a small set of visual patterns, which are then combined using complex rules to represent geographical locations.

      And if your visual system goes down, forget about it.

    4. Re:meh by jridley · · Score: 1

      I need nothing since the only place that matters is wherever I am.

  4. Encryption by Anonymous Coward · · Score: 4, Informative

    AFAIK the PRNs are not really encryption keys. They're merely a technical detail that can be kept secret. GPS and Galileo are spread spectrum applications and the PRNs define the way the signal is spread. If you don't know the spreading function, you can't tell the (unencrypted) signal from the noise. It's really security by obscurity.

    1. Re:Encryption by Nutria · · Score: 1
      If you don't know the spreading function, you can't tell the (unencrypted) signal from the noise. It's really security by obscurity.

      Apparently not obscure enough...

      --
      "I don't know, therefore Aliens" Wafflebox1
    2. Re:Encryption by m874t232 · · Score: 1

      Spread spectrum using pseudo-random sequences is an encryption method, and an effective one, if the pesudo-random number generator is well chosen.

      Whether it was intended to be used as such as part of Galileo is another question.

    3. Re:Encryption by Anonymous Coward · · Score: 0

      The spread spectrum code can be used for encryption, but the main need
      in a satellite navigation system is that it have a long enough
      period that a receiver can determine distance to the satellite based on
      the phase of the received satellite signal and the current time.

      If you send a pseudo-random bitstream from a satellite that repeats
      after an hour, you can be an hour away (lightspeed) and know exactly
      how far from the satellite you are. You know what the satellite is
      transmitting at any given time, you know what you are receiving at
      a given time, you can calculate the distance from the signal delay you
      see.

    4. Re:Encryption by timeOday · · Score: 1
      AFAIK the PRNs are not really encryption keys. They're merely a technical detail that can be kept secret.
      What is a PRNG if not a hash function? You hash each number in the sequence to get the next number. Since you don't want just anybody who knows the hash algorithm to be able to predict your sequence, you generate a longer than necessary number and only reveal part of it, keeping some of the bits secret. If Galileo was cracked, somebody must have figured out the secret bits as well as the function.

      Is that security by obscurity? Only in the same way that a password is security by obscurity. Anybody can type in the password... if they know it!

    5. Re:Encryption by Detritus · · Score: 1

      High-security spread-spectrum systems do use cryptographically secure spreading codes. Unlike the spreading codes used in less secure systems, they don't repeat and you need an accurate time reference to synchronize the PN code generator in the receiver with the PN code generator in the transmitter.

      --
      Mea navis aericumbens anguillis abundat
    6. Re:Encryption by WindBourne · · Score: 1
      AFAIK the PRNs are not really encryption keys.

      You must be wrong. It says so in the paper.

      --
      I prefer the "u" in honour as it seems to be missing these days.
    7. Re:Encryption by Anonymous Coward · · Score: 0

      The paper doesn't even mention encryption. And nowhere does it say that I am wrong either. That would have been spooky.

    8. Re:Encryption by FireFury03 · · Score: 4, Informative

      It's really security by obscurity.

      It's not really intended to be security anyway - everyone knows the normal NAVSTAR, WAAS and EGNOS PRNs (you have to in order to use the services) - the PRNs are used to differentiate between individual satellites, which all transmit on the same frequencies. I guess they just decided not to publish the Galileo PRNs until they'd got further into the project.

    9. Re:Encryption by cptgrudge · · Score: 3, Funny

      The paper is wrong. It says so on Slashdot.

      --
      Qualitas edurus commercium, nullus penitus net rimor, nullus deus beneficium
    10. Re:Encryption by Anonymous Coward · · Score: 0
    11. Re:Encryption by turbidostato · · Score: 1

      "spread spectrum [...] It's really security by obscurity."

      No, it isn't.

      A "security by obscurity" device is one that you can't tell how is it built and still use it as a "security device".

      For instance "rot 13" is a "security by obscurity" device. Once you tell a cypher is made out "rotting13" a clear token, you are gone.

      On the other hand, "Caesar's cypher" is not a "security by obscurity" device. Caesar's cypher, you know, is the general procedure which rot 13 is an special case. You can tell "this is cyphered using Caesar's algorithym", and the secret message is still safe (of course, Caesar's cypher is a very, very "bland" one, but the principle applies).

      More on the same: Enigma coding is not a "security by obscurity" device; the allies could put their hands in one of such devices, know everything about how they worked and still the secret messages would still be "secret". Trully enough, once you know how enigma works *and* the specific "key" applied to one messege, you are done, but having the key secret is part of the algorithm, not the implementation.

      Exactly in the same way, you can have the exact algorithm, implementation methodology, and even the device itself in your hands, and still spread spectrum is safe*1, unless you know the specific pseudo-alleatory chain used, and the current position within the pseudo-alleatory output chain.

      Of course, either for the Caesar's algorythm, enigma or spread spectrum, one thing is "safe" and a very different one is "safe enough", just the same a 16 bit assymetrical encryption is computationally "safe" (it costs less to cypher than to brute-force decypher, and knowing the used algorithm doesn't decypher the message all by itself) but not "safe enough" for current standards (because the "breaking" costs are well within the abilities of the potential breaker).

    12. Re:Encryption by Anonymous Coward · · Score: 0

      It came out wrong. What I meant is that the PRN, as used in the transmission of the Galileo L1-F signal, is not an effective encryption key and not designed to be one either. It is not meant to remain secret. If I know it and you don't, you can't immediately read the signal, but that is merely an inconvenience, because the satellite and the public documentation (sans the PRN) give you all the information you need to find the PRN. You do not have to brute force the "key", not even parts of it. The inconvenience of having to extract the PRN is the obscurity and the resulting "security" is really minimal.

      An analogy: Suppose I send you an encrypted message with a cleartext header which explains that I used a caesar cypher with an offset that is calculated as the sum of the ASCII codes of all cyphertext characters, modulo 42. Then the offset is not really an encryption key. The only thing that keeps you from reading the message is the peculiar encoding, IOW obscurity. You don't need anything that cannot be gleaned from the transmission itself. There is some security, for example against automated keyword sniffing, but it is really minimal.

      IMHO nobody wanted to take the risk of accidentally giving too much information, so they refused to give out anything that wasn't in the official documentation. Since the final codes aren't used by GIOVE-A, the codes were "to be added when determined".

    13. Re:Encryption by Anonymous Coward · · Score: 0

      It's really security by obscurity.

      When will people realise this? ALL forms of encryption provide security by obscurity.

      There are some really strong PRNG's out there, some with maximal lengths which are far greater than any storage array you can buy and which take a VERY long time to repeat even if you are not recording the output. PRNG's are the basis of stream ciphers.

      People apply the bad meaning of "security by obscurity" against highly secure mechanisms which can have the literal meaning of "security by obscurity" applied. This is bad because it makes the strong system sound weak, when really it is the person loosely using the term who has a weak understanding of the issues.

      Encryption is based on security by obscurity.

    14. Re:Encryption by Anonymous Coward · · Score: 0

      There is a difference: Security by obscurity refers to making (part of) the algorithm a secret or even just complicated, timing sensitive, etc, instead of keeping just a parameter secret.

      Yes, stream cyphers are essentially parameterized PRNGs, but in this case there isn't a pseudo-random number GENERATOR, just a PRN, and not a very long one. It repeats every 8ms. And it is further constrained by the application. It really is not a key.

    15. Re:Encryption by Anonymous Coward · · Score: 0

      What is a PRNG if not a hash function? You hash each number in the sequence to get the next number. Since you don't want just anybody who knows the hash algorithm to be able to predict your sequence, you generate a longer than necessary number and only reveal part of it, keeping some of the bits secret.

      That is really interesting (PRNG=Hash function). I've been interested and been building LFSR PRNG's in hardware since before I ever read about them (early 90's), yet never really thought of PRNG's as hash functions.

      If Galileo was cracked, somebody must have figured out the secret bits as well as the function.
      Is that security by obscurity? Only in the same way that a password is security by obscurity. Anybody can type in the password... if they know it!


      I don't believe it! Someone at Slashdot who thinks for themselves!

    16. Re:Encryption by afidel · · Score: 1

      Actually AFAIK the plan was to keep the PRN's covered by licensing deals that would require a fee per device so that the participating nations could make back part (or all) of their investment in the system from private enterprises.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    17. Re:Encryption by arminw · · Score: 1

      ....Encryption is based on security by obscurity......

      It seems that there is confusion by you and others between the difference of encryption and DRM. The purpose of encryption is for a outsiders not to be able to understand the messages between those who are "authorized". In DRM the goal is to allow the recipient of the message to understand the message, but not be able to pass that message or its key on to others. This latter thing can never be prevented by any sort of technology. No technology can ever keep someone from divulging a message they were SUPPOSED to be able to understand. This satellite scheme is only another DRM like scheme.

      --
      All theory is gray
    18. Re:Encryption by Anonymous Coward · · Score: 0

      ....Encryption is based on security by obscurity......

      It seems that there is confusion by you and others between the difference of encryption and DRM.


      No confusion here. I was not even thinking about DRM when I wrote that.

      The obscurity in crypto which makes it hard to crack, is found in the obscurity of the passwords, which in turn typically makes the obscurity of the internal state of a very strong maximal-length pseudo random number generator (like arc4 with workaround) very difficult to find where the ciphertext marries against the extremely large pseudo random number field.

      That is obscurity on an impressive scale. Like any decent crypto. Your password could be long and random, which in turn prevents a dictionary guess at where in the super large noise field you need to start looking. The password is an obscurity and the noise and location is an obscurity. The answers are in there, but hidden. If the crypto scheme is good, PRNG is both high quality and maximal-length, then obscure no longer seems so bad.

      The obscurity in One Time Pad encryption is the pad itself.

      One of the meanings of obscure is: not discovered or known about.

  5. and North Korean rocket scientists appreciate that by BadassJesus · · Score: 0, Troll

    Galileo's sub-meter resolution is now available? I think that North Korean rocket scienties are having a party today.

  6. Offtopic but.... by rolfwind · · Score: 4, Insightful
    Afraid that cracking the code might have been copyright infringement, Psiaki's group consulted with Cornell's university counsel. "We were told that cracking the encryption of creative content, like music or a movie, is illegal, but the encryption used by a navigation signal is fair game," said Psiaki.


    Sigh, how did READING the bits on your own CDs/DVDs ever become illegal? Freedom of speech implies a freedom to read what you want. (Yes, I understand the DMCA, but I'm still in shock - I always considered laws making it illegal to read "signals", etcetera "not intended for you" very British but very unAmerican. And I say British because I'm getting those quotes from British laws circa WW2 and probably before.)

    Props to Cornell.
    1. Re:Offtopic but.... by Anonymous Coward · · Score: 0

      Its NOT ILLEGAL to OWN a radio scanner BUT it IS ILLEGAL to USE it for LISTENING to UNLICENSED bands in the UK.

    2. Re:Offtopic but.... by jacksonj04 · · Score: 1

      It's not the reading signals bit that's the illegal one. It's knowingly intercepting signals that you know aren't intended for you. Alternatively, accidentally intercepting signals and then telling somebody else.

      --
      How many people can read hex if only you and dead people can read hex?
    3. Re:Offtopic but.... by E++99 · · Score: 1
      Freedom of speech implies a freedom to read what you want.
      Nice Orwellian logic. Ok, as a free American, protected by the 1st Amendment, I have the right to read your last bank statement. Hand it over, or I'll sue you for violating my civil rights. The next step would be, "Freedom of speech requires you to confess your crimes to us. I'm sorry, you cannot invoke the 5th amendment, as the 1st amendment takes precedence."
    4. Re:Offtopic but.... by Anonymous Coward · · Score: 0

      Indoors we use our indoors voice.

    5. Re:Offtopic but.... by Zemran · · Score: 1

      very British but very unAmerican.

      Strange that it is America that is forcing Britain to accept these laws ... In legal terms Britain always had the concept of State Secrets just the same as the US but it is the US that has re-introduced the era of the guilds, trade secrets like that went out in the middle ages in Britain.

      --
      I love stacking my barbecues in the shed at the end of summer - you can't beat a bit of grill on grill action.
    6. Re:Offtopic but.... by xyvimur · · Score: 1

      Thanks to US great politicians, their poor understanding of the IT world, and great lobbying of groups of interest.
      There is a really good article about DMCA in the current release of IEEE Spectrum, pointing out all the bad things that it introduced (no hardware DVD copiers, no digital VCRs capable of skipping ads, etc.)

    7. Re:Offtopic but.... by Shads · · Score: 0

      Life is a circle, the pointer just got back to "stupid". Had a good run between though.

      --
      Shadus
    8. Re:Offtopic but.... by KDR_11k · · Score: 1

      What, bands need a license now to be allowed to perform on the radio? Is that the IFPI's new tactic to prevent independent groups from becoming popular?

      --
      Justice is the sheep getting arrested while an impartial judge declares the vote void.
    9. Re:Offtopic but.... by Anonymous Coward · · Score: 0

      Sigh, how did READING the bits on your own CDs/DVDs ever become illegal? Freedom of speech implies a freedom to read what you want. (Yes, I understand the DMCA, but I'm still in shock - I always considered laws making it illegal to read "signals", etcetera "not intended for you" very British but very unAmerican. And I say British because I'm getting those quotes from British laws circa WW2 and probably before.)

      So if I can break your wifi encryption, I should be allowed to? And how about your cell phone conversations?

      I think it's reasonable to say that there are some things that it should be illegal to listen to, even if they are traveling through the airwaves. I don't think DMCA is necessary to implement this, but whoop, there it is.

    10. Re:Offtopic but.... by Anonymous Coward · · Score: 0

      Sigh, how did READING the bits on your own CDs/DVDs ever become illegal?

      It isn't illegal. What are you babbling about? Reading & writing, or reading & decrypting might be illegal in your country, but reading has never been.

      Unless you're talking about psycho Muslim countries where they ban music altogether, but they ban all forms of music (live, CD, radio, etc).

    11. Re:Offtopic but.... by dr.badass · · Score: 1

      Sigh, how did READING the bits on your own CDs/DVDs ever become illegal? Freedom of speech implies a freedom to read what you want.

      Reading the bits is not illegal. Cracking the encryption without a license is. You can read an encrypted bitstream all day if that's what you want.

      --
      Don't become a regular here -- you will become retarded.
    12. Re:Offtopic but.... by RalphTheWonderLlama · · Score: 1

      ahh, but sometimes you have to use their own special player

      --
      simple, fast homepage with your links: http://www.ngumbi.com/
    13. Re:Offtopic but.... by AnyoneEB · · Score: 1

      Uh, yes. If it is traveling through the airwaves and you can read it without physically trespassing on my (or anyone else's, for that matter) land, then go ahead, read it. It would be my fault for not using strong enough encryption (or a wired connection) if you get something I wanted to be secret.

      --
      Centralization breaks the internet.
    14. Re:Offtopic but.... by rolfwind · · Score: 1
      Nice Orwellian logic. Ok, as a free American, protected by the 1st Amendment, I have the right to read your last bank statement. Hand it over, or I'll sue you for violating my civil rights. The next step would be, "Freedom of speech requires you to confess your crimes to us. I'm sorry, you cannot invoke the 5th amendment, as the 1st amendment takes precedence."


      ???

      It's legal for me to read you bank statement. If I find it on the street or if I find it in a public place or if you hand it to me. If I break into your house to get it, I'm guilty of breaking and entering, not of reading your bank statement.

      If reading material can become illegalized, guess how the government can censor ideas. And the last argument is just plain stupid.
    15. Re:Offtopic but.... by rolfwind · · Score: 1
      It isn't illegal. What are you babbling about? Reading & writing, or reading & decrypting


      Reading is decryption. Just because you are fluent in the alphabet doesn't mean you brain doesn't do any work decrypt this message letter by letter still, it's just less hard now you are out of grade school. You can't seperate reading and decryption on a fundamental letter.

      Being allowed to read individual bits but not allowed to obtain comprehension (cracking) of them on your own (of a DVD you own) is ridiculous.
    16. Re:Offtopic but.... by iminplaya · · Score: 1

      Oh, come on! Freedom of speech went out with knickers and plaid.

      --
      What?
  7. Re:and North Korean rocket scientists appreciate t by Anonymous Coward · · Score: 3, Insightful

    Why? So they know where exactly their rocket was when it failed? Don't you think that positioning a nuclear bomb with sub meter precision is a little too control-freakish?

  8. much ado about nothing by tonigonenstein · · Score: 5, Informative

    The article is inacurate and makes a big deal about nothing (BTW did you notice it was written by a guy from Cornell ?) First, Galileo is not ready yet. The article claim they plan to charge for the keys. This is plain wrong, the base precision signal (which is the one we are talking about) will be available free of charge. The system is simply in testing phase right now and they don't want anyone playing with it, that's all. Second, this PRN sequence is not supposed to be difficult to crack at all, since it will actually be made public in time. This is in no way an achievement. It is was the high precision signal, this would be another matter.

    --
    The sooner you fall behind, the more time you have to catch up.
    1. Re:much ado about nothing by dubl-u · · Score: 1

      The system is simply in testing phase right now and they don't want anyone playing with it, that's all.

      That's ridiculous. They put a satellite up in orbit to broadcast this information to the whole globe. What do they have to lose by letting people use it? It's not like somebody could break their service just by listening to it.

    2. Re:much ado about nothing by Barnoid · · Score: 2, Insightful

      That's ridiculous. They put a satellite up in orbit to broadcast this information to the whole globe. What do they have to lose by letting people use it? It's not like somebody could break their service just by listening to it.

      You're right, it can't be broken. Maybe they don't want to get sued during the test phase by some guy who drove his car in a trench because he was feeding his navigator with the Galileo signal.

    3. Re:much ado about nothing by Breakfast+Pants · · Score: 1

      "What do they have to lose by letting people use it?" Flexibility? Let's say someone starts making a device based on the preliminary format. Then the makers of the format discover a flaw and take a long time reengineering the system; in the mean time, everyone starts making devices based on the preliminary format because it is taking so long. Now the developers hands are tied and they have to decide between fixing the problems and alienating thousands of users, or just leaving them in place.

      --

      --

      WHO ATE MY BREAKFAST PANTS?
  9. uncrackable encryption by Nikademus · · Score: 2, Insightful

    PRN is not really encryption.

    But anyway, there is no such thing as an encryption scheme that cannot be cracked. It is just a matter on how much time it will take to crack it.
    Encryption will always be crackable, we are just playing with the fact it would take 512 or so years to crack a particular scheme with the actual technology.

    --
    I gave up with the idea of an useful sig...
    1. Re:uncrackable encryption by Groo+Wanderer · · Score: 5, Insightful

      "But anyway, there is no such thing as an encryption scheme that cannot be cracked. It is just a matter on how much time it will take to crack it.
      Encryption will always be crackable, we are just playing with the fact it would take 512 or so years to crack a particular scheme with the actual technology."

      Actually, there is almost no encryption scheme that can stand up for a weekend to the 'suitcase full of cash' cracking methodology.

                      -Charlie

    2. Re:uncrackable encryption by Gorath99 · · Score: 4, Interesting

      I fact, that is pretty much the only attack that will work against a correct implementation of OTP, an encryption scheme that actually is unbreakable (though rather unpractical for most applications).

    3. Re:uncrackable encryption by Nutria · · Score: 4, Funny
      I fact, that is pretty much the only attack that will work against a correct implementation of OTP

      Rubber-hose decryption works well, too.

      --
      "I don't know, therefore Aliens" Wafflebox1
    4. Re:uncrackable encryption by msormune · · Score: 1

      Actually, there is no way to proof there is an encryption scheme that cannot be cracked.

    5. Re:uncrackable encryption by kestasjk · · Score: 1

      One time pads have been proven to be unbreakable, but implementing it securely (ie moving the one time pad to the other person securely) is the hard part.

      --
      // MD_Update(&m,buf,j);
    6. Re:uncrackable encryption by Zeinfeld · · Score: 0
      Encryption will always be crackable, we are just playing with the fact it would take 512 or so years to crack a particular scheme with the actual technology.

      The point of encryption is that as the cryptographer I can choose to make the problem as hard for the attacker as I want to. The cost of performing the encryption is roughly proportional to the square of the number of bits. The cost of breaking the encryption increases as 2 to the power of the number of bits.

      2^128 is a very big number. If the entire planet was turned into a vast computer with circuits an atom across it would take longer than the life of the universe to break an AES key by brute force.

      I blogged earlier on the cluelessness of the Gallileo business model. Charging for something someone else is giving away is so 1990s. It only makes sense if there is something going on here we have not been told about. A requirement for europeans to pay to use Gallileo for example.

      --
      Looking for an Information Security student project suggestion?
      Try http://dotcrimeManifesto.com/
    7. Re:uncrackable encryption by Anonymous Coward · · Score: 1, Informative

      Nobody is giving sub-meter precision away. The US GPS only provides that kind of precision to its military users. Sub- meter precision with the civilian GPS codes requires differential GPS, which needs fixed receivers and transmitters in relatively close proximity, so it can never cover the whole world.

    8. Re:uncrackable encryption by Goaway · · Score: 1

      And congratulations, you are wrong on both counts.

      A PRNG is most definitely a viable cryptosystem, if it is strong enough. That's pretty much what a stream cipher is. And 256-bit symmetric crypto is most definitely uncrackable by brute force, by any sane definition of "uncrackable" - there are not enough atoms in the universe to perform enough calculations within the lifetime of the universe to try all keys. That's signigicantly different from your "512 or so years".

      Please learn something about the subject before posting nonsense to Slashdot.

    9. Re:uncrackable encryption by arivanov · · Score: 4, Funny

      So does Sodium Pentothal though sometimes there are decryption errors. If there is more time there is a guaranteed decryption scheme known as "heroin once a day for a week, followed no more heroin until you tell the key".

      --
      Baker's Law: Misery no longer loves company. Nowadays it insists on it
      http://www.sigsegv.cx/
    10. Re:uncrackable encryption by SillyNickName4me · · Score: 4, Insightful

      2^128 is a very big number. If the entire planet was turned into a vast computer with circuits an atom across it would take longer than the life of the universe to break an AES key by brute force.

      First of all, yes, 2^128 is a very big number indeed. The rest of your statement however makes absolutely no sense whatsoever.

      The size of a computer and the circuits within have little to do with how capable that computer is of performign the specific operations for breaking AES efficiently. Neither does your statement take into account the potential of weaknesses in the algorithm that might eliminate part of the keyspace. Do I have proof of such weaknesses? Nope, but the question is if I need that, the large majority of algorithms turns out to have such flaws. so unless you have mathematical proof that they do not exist in this case, the assumption that they exist is a safe one.

      I vaguely remember people arguing that breaking DES was not feasable only some 25 years ago, and at the time they were probably somewhat right. Yet, nowadays it is breakable in hours by the kind of technology that private civilians can afford.

      So all in all, it is safe to assume that AES is safe for the moment, but there is no telling what future technology will do. The likelyhood however is that both a breach of AES will be found, and hardware will be made that makes the AES problem relatively simple to solve.

    11. Re:uncrackable encryption by dnoyeb · · Score: 3, Interesting

      Beautiful. I have tried to explain for a time that this is not just the measure of encryption but the measure of security itself.

      Security is the difference in access-pain for those with permisison vs. those without. Putting something where nobody can get to it is not ultimate security, thats no security at all.

      As for the satellite, I presume the European one is offering more accuracy and that it can't be shut off by the US Government. Well not because they unilaterally decide to.

      Also I'm surprised if anyone in US would be able to use this cracked satellite data in the US due to DMCA. But everyone else in the world can, lol.

    12. Re:uncrackable encryption by WindBourne · · Score: 1
      with the actual technology.

      That would be better rewritten as current technology and know-how. Obviously tech improves for instance, back in the 90's, nearly all attempts at cracking where based on a serial approach. Now, they are based on a distributed approach. In addition, the general algorythms that we know and use in the general public are almost certainly different than what other very targeted groups know and use.

      --
      I prefer the "u" in honour as it seems to be missing these days.
    13. Re:uncrackable encryption by tacocat · · Score: 2, Interesting

      Hate to make a plug for myself but I came up with a one time pad authentication method for logging into websites. It's as secure as can be socially accepted. Key words there.

      http://www.tacocat.net/

      The idea is to get your password sent to you by some method and upon successful authentication, the password is reset and retransmitted. The socially accepted part is sending the password to you in such a way that you'll actually be able to use it. The most common form of sending new passwords today is via email. I'll pass on any discussion about how secure this is, it's too common to ignore. But the better alternative is via SMS to your phone.

      • Just about everyone has a phone.
      • Just about everyone with a phone also has SMS support.
      • Those who don't can still use email.
      Even if someone has access to your SMS messages (good luck) they still don't know your username. That's only paired when you sign up and when you authenticate. Forget your username and well.... you are pretty screwed. Forget your password and you can have a new one sent to your phone.

      Almost as good as biometric authentication but you can run it on websites. No need for HTTPS authentication schemes since the password expires immediately. No need for each website to come up with their own password authentication modules (PAM) -- It's just a proxy pass to a central server (me) to authenticate.

      I ginned up something as a proof of concept out there and it works well enough.

      And before you go running off to make a patent, white papers exist on the internet dating back to 1990 on using One Time Pads for internet/computer authentication mechanisms. And the fact that I wrote all this up here also serves as prior art.

    14. Re:uncrackable encryption by YGingras · · Score: 2, Informative
      But anyway, there is no such thing as an encryption scheme that cannot be cracked. It is just a matter on how much time it will take to crack it.
      Encryption will always be crackable, we are just playing with the fact it would take 512 or so years to crack a particular scheme with the actual technology.

      Are you really that clueless? I would not take 512 years to bruteforce a 320 bit key, it would take simply longer than the current age of the universe. Assuming of course that you are required to put a single computer per square centimeter of our planet surface (including oceans) and that you can't use more than one planet. The math is simple: the surface is about 5.1e18 cm^3 and there is about 4.0065e38 keys to try before you get your answer.

      With limits on the speed of light you can only do so many operations per second but lets assume all your boxen are 100GHz custom built and that they can try a key per cycle. You'd need about 1.069d11 years to crack the key. Now do your homework and check how old the universe is.

      Here is how I computed it:
      (let ((keys (* 1.1774 (sqrt (expt 2d0 320))))
                  (boxen (* 510065600.0 (expt 1000 2) (expt 100 2)))
                  (cycles (* 100 1d9)))
          (/ keys boxen cycles 3600 24 365))

      Play with the params and see how excesivly secure a 512 bit key would be.
    15. Re:uncrackable encryption by Dion · · Score: 1

      It might not be such a stupid idea.

      No *user* of the system could ever be expected to pay for access, but you could easily demand a small fee for all receivers.

      If Gallileo is designed so receivers are simpler and cheaper than navstar then the total price for a receiver might end up being cheaper.

      --
      -- To dream a dream is grand, but to live it is divine. -- Leto ][
    16. Re:uncrackable encryption by Gorath99 · · Score: 4, Informative

      Actually, there is no way to proof there is an encryption scheme that cannot be cracked.

      There isn't? Proof it! ;-)

      Seriously, there are ways. The reason most encryption schemes can at least be brute forced is that for any given ciphertext, there are very few possble sensible (non-garbage) plaintexts. So, if you try all possible keys and look at all the resulting plaintexts, the one that is sensible will almost certainly be the original plaintext.

      With OTP this won't work as there is a simple proof that for any given ciphertext, every single message of the same lenght is a possible plaintext. So if you have a ciphertext of 1k characters and you try every possible key, you'll end up with every possible text of 1k characters. This includes bits of Shakespeare, Britney Spears porn, texts describing who killed JFK (at least one of which will be amazingly be true :-) ), quotes from the Bible, excerpts from the linux code and much, much more. There's no way of knowing what was the original message.

      Oh, and since you'll end up with 256^1000 messages of 1k length, you'll need a bigger harddisk ;-)

    17. Re:uncrackable encryption by nojayuk · · Score: 4, Insightful

      "...the cluelessness of the Gallileo business model. Charging for something someone else is giving away is so 1990s. It only makes sense if there is something going on here we have not been told about."

      Galileo makes high-precision access available to paying customers, the US NAVSTAR reserves that level of accuracy only for US and allied military systems. Some of the Galileo cluster will orbit at higher inclinations than the existing NAVSTAR cluster, making GPS more usable in the far North and far South (although I understand some planned future NAVSTAR satellite deployments will fill in the gaps here too). Galileo can't be switched off or degraded on a whim by a single government unlike the NAVSTAR system, allowing it to be trusted to control civilian aircraft in crowded skies.

      The users of GPS will end up with multi-function receivers that can work interoperably with NAVSTAR and Galileo since it would be pointless commercially to do otherwise. Unless NAVSTAR goes commercial or the DoD stops degrading the signal the high-precision customers like airlines and such will use Galileo and pay for the convenience and predictability.

    18. Re:uncrackable encryption by ajs318 · · Score: 1

      Yeah, but "ATTACK THE FORT AT SUNSET", "DEFEND THE BRIDGE AT NOON" and "MY DAUGHTER HAS THE PILES" are all equally plausible plaintexts for the same given ciphertext .....

      --
      Je fume. Tu fumes. Nous fûmes!
    19. Re:uncrackable encryption by andymadigan · · Score: 1

      They were probably using a one-time pad. Even [byte of data] XOR [byte of random] is usually pretty good. But the strength comes down to the PRNG, I wonder which they were using... ISAAC is supposed to be good. Of course, they might have been able to break the code by knowing the ciphertext and just waiting until whatever PRNG they were using repeated.

      --
      The right to protest the State is more sacred than the State.
    20. Re:uncrackable encryption by Anonymous Coward · · Score: 0

      And this was precisely the thinking that led to the deployment of the system that is now cracked. In theory, you are correct. But in practice, it's not so easy to ensure the security of the OTP data.

      OTP may work just fine for cloak-and-dagger spies and the intelligence agencies who hire them, but I'm not so sure about scalability of OTP in modern electronic devices.

    21. Re:uncrackable encryption by DrSkwid · · Score: 1

      pfft, your previous victims were weak

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    22. Re:uncrackable encryption by DrSkwid · · Score: 1

      DEFEND THE BRIDGE AT NOON
      defend the bridge at four
      abandon the bridge at two

      etc.etc.

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    23. Re:uncrackable encryption by Bob+Cat+-+NYMPHS · · Score: 1

      Even if someone has access to your SMS messages (good luck) they still don't know your username.

      Not even the NSA could figure out how to crack this scheme!

    24. Re:uncrackable encryption by NormalVisual · · Score: 4, Insightful

      Unless NAVSTAR goes commercial or the DoD stops degrading the signal the high-precision customers like airlines and such will use Galileo and pay for the convenience and predictability.

      Selective availability (intentional degradation) was turned off on the Navstar system back in 2000, although there's nothing that says it won't get turned back on again sometime in the futures. In addition, differential GPS transmitters cover a large portion of the U.S., and DGPS is quite a bit more accurate than the data you get directly from the satellites, and works even when selective availability is active.

      --
      Please stand clear of the doors, por favor mantenganse alejado de las puertas
    25. Re:uncrackable encryption by Anonymous Coward · · Score: 5, Insightful

      And before you go running off to make a patent, white papers exist on the internet dating back to 1990 on using One Time Pads for internet/computer authentication mechanisms. And the fact that I wrote all this up here also serves as prior art.

      This is laughable. You are trying to use the only perfectly secure encryption scheme, while breaking the rules which allow it to be the only perfectly secure encryption scheme.

      So your mechanism is only as secure as the weakest parts, which in this case is plain text email or maybe SSL encrypted email, in which case, just use SSL and have the user provide their own strong password. You are getting NO GAIN for something which is MORE of a PAIN.

      BTW, specifically in regards to GSM mobile phones (I don't know about others), GSM phone crypto uses a small Linear Feedback Shift Register configuration (40bit equivalent) for Pseudo Random Number Generation. To make matters worse, it is seeded (partially or fully?) with the IMEI number of that phone. IMEI numbers can be broken down a great deal if you know the make of the phone and then more if you know the model. The bit depth of IMEI suddenly drops. In 1999 GSM could be cracked in less than a second on a basic home PC. In addition to that, I personally know of a GSM eavesdropping/recording device being used outside of government/law-enforcement and I also know of someone who makes a similar device which is separate from the other I have mentioned. GSM at least, can hardly be considered to be providing strong comms. GSM crypto only "protects" the wireless link between the mobile phone and base station, NOT the wired link between cells or landlines, etc, so you trust your Telco? BTW, do you trust the French? This is their crypto scheme (A5) and they intentionally made it weak. Germany, try as they might, being so close the then Soviet Union, wanted it to be strong. The fact is, most governments don't want their people having strong crypto and you are essentially providing nothing.

      Why bother? You are taking the strengths of OTP, weakening them to something ranging from plain text to strengths we already have (SSL) and yet you are keeping the impracticalities of OTP. I have to wait to have my password broadcast to the World before I can log in? What exactly are you providing again?

      Really, why bother?

      Hate to make a plug for myself but I came up with a one time pad authentication method for logging into websites. It's as secure as can be socially accepted. Key words there.

      Every single time, in the past 11 years or so that I've been into crypto and crypto forums, that I heard someone say something like, "I think I have a good scheme", it has turned out to be a complete joke. I now get a chuckle whenever I read something like that, before I go on and read the "good scheme". So thank you for the chuckle. By the way, you can't have prior art when someone before you has it. It's not yours, it's thiers. Even if it does suck.

    26. Re:uncrackable encryption by Anonymous Coward · · Score: 0

      Rubber-hose decryption works well, too.

      Suitcase of money can only work if the agent is willing to trade.

      Rubber hose can only work if the agent has memorized what you need to know. He should have destroyed the OTP once he knew he was going to be caught or once he used the OTP. If he still has the OTP, you don't need the rubber hose.

    27. Re:uncrackable encryption by Shanep · · Score: 1

      A PRNG is most definitely a viable cryptosystem, if it is strong enough.

      PRNG's are not crypto. PRNG+password_as_seed+XOR on the other hand, can be. With the strength being limited to the PRNG and password.

      I'm sure you know this, I am just setting the story straight because people are bound to misinterpret what you said as literally meaning "Pseudo Random Number Generators *ARE* a crypto system".

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    28. Re:uncrackable encryption by Talchas · · Score: 1

      Someone else mentioned quantum encryption, and by all the laws of physics we know, it is unbreakable (but we are still discovering those laws so who knows how long it'll last). OTOH a unreused one-time pad is utterly unbreakable, if useless in this particular situation. Quantum crypto is just a way of creating and sharing a one-time pad key over an insecure (fiberoptic) connection, then using it to communicate.

      --
      As the Americans learned so painfully in Earth's final century,free flow of information is the only safeguard against...
    29. Re:uncrackable encryption by Wavicle · · Score: 1

      Your calculation assumes the most efficient attack is brute force - that the number of keys to check for a key of n bits is O(2^(n/2)).

      Are you sure there is no better way? Would the general number field sieve reduce the keyspace to search? Will a new sieve arise in the coming years that reduces the security of 320 bit keys?

      --
      Education is a better safeguard of liberty than a standing army.
      Edward Everett (1794 - 1865)
    30. Re:uncrackable encryption by YGingras · · Score: 1

      So far there are speedups that can be done and the attack is faster than a birthday attack. But the such attack still takes longer than what we have left of fuel in our Sun (~5Gy). There might be a faster method soon but I wanted to highlight to parent post that just because you can brute force doesn't mean that cracking is possible. A brute force that requires more energy than what a single main sequence star can provide is to all extent impossible.

    31. Re:uncrackable encryption by utlemming · · Score: 1

      Ah, I learned about social-engineering attacks in my security class....so this is what they were talking about....

      --
      The views expressed are mine own and do not express the views of my employer.
    32. Re:uncrackable encryption by Gorath99 · · Score: 1

      Yes, and hence you'll have no way of knowing which one is the original one. That's pretty much my point.

    33. Re:uncrackable encryption by MyNymWasTaken · · Score: 1

      One Time Pads do provide perfect encryption - if they are generated properly. There is one slight problem though - how do the communicating parties exchange the OTPs? The only 'secure' method is to do it in person.

      Another problem is the finite usability of an OTP. Once the OTP has been generated, it can only be used for an amount of data transfer equal to the size of the OTP before a new OTP needs to be exchanged.

    34. Re:uncrackable encryption by Anonymous Coward · · Score: 0

      Watch how carefully his daughter sits down?

    35. Re:uncrackable encryption by Zeinfeld · · Score: 1
      The size of a computer and the circuits within have little to do with how capable that computer is of performign the specific operations for breaking AES efficiently.

      On the contrary. Assuming that no technology is developed that uses an entirely different form of computation we can create a lower bound for the computation effort required.

      The clock size cannot be any faster than the Planc time. A circuit cannot possibly check more than one key per clock cycle. A circuit must have at least one atom. We have a finite supply of atoms (one planet) and a finite supply of time (age of the universe).

      The point is that when we chose to adopt 128 bit keys we did know pretty much what we are doing. There is no real probability that the state of the art in cryptography is going to advance from its current state (breaking 64 bit keys) to breaking 128 bit keys any time soon.

      The only reasons to use the 256 bit AES are if you are told to or you are nervous about the algorithm (the 256 bit version has more rounds).

      --
      Looking for an Information Security student project suggestion?
      Try http://dotcrimeManifesto.com/
    36. Re:uncrackable encryption by Anonymous Coward · · Score: 0

      "Can the owner charge me a licensing fee for looking at the light?"

      Nicely done! I don't have to pay for licensing on MP3s as long as it's transmitted over fiber optics at some point! Are they going to charge me for looking at light? :->

    37. Re:uncrackable encryption by Anonymous Coward · · Score: 0

      we can create a lower bound for the computation effort

      No, we can't, not in a meaningful way. The lower bound is the time it takes to run the message through the decryption algorithm with one key and to see if the result is cleartext. It is pretty unlikely that the first key is correct, but that is the only lower bound.

    38. Re:uncrackable encryption by Anonymous Coward · · Score: 0

      I'm doing some work for a client that uses just such a scheme. I log in to their website, and a short-lifetime key is sent in an SMS to me. I then use this to log in.

      Recently, however, they issued me a RSA Data security SecureID (tm) that displays a code that changes about every minute or so. Posession of the token allows my user id to log in.

      This is a pretty damn good scheme, though obviously susceptible to the stolen cell phone / rubber hose method.

    39. Re:uncrackable encryption by tacocat · · Score: 2, Interesting
      Really, why bother?

      I was hoping that the website would explain this. Did you RTFM? Assuming you did not. The advantage that still exists is that OTP, even over SMS is much harder to intercept than standing behind someone at an airport kioske or sniffing wireless networks... I didn't say it was 100% secure, in fact I think I even make mention that it is still not perfect. But it's a hell of a lot better than common practice today.

      I would think it would be preferred if someone would be willing to move towards a better solution than waiting for the perfect solution and damning all others.

      The key problems that are addressed are:

      • periodically changing passwords. Changed every time.
      • making passwords reasonably complex. Pseudo-random beats birthdays and pets names.
      • simplifying username/password management.
      It's easy to put down an idea. So what do you have to offer the world that might actually be useful? The biggest problem to security isn't all this hype about encryption keys and SSL and crypto-this and crypto-that. It's getting people to use it in the first place. Social Engineering is the weakest part of security bar none. If you can get people to willingly improve their security position than you have a win. If you have to do it through draconian methods, you lose.

      As as far as my idea sucking. Fuck you. I don't see you coming up with anything but vinegar. You're not even trying.

    40. Re:uncrackable encryption by tacocat · · Score: 0

      Requires both phone and hose. With the phone you still need to know the user name...

    41. Re:uncrackable encryption by SillyNickName4me · · Score: 1

      On the contrary. Assuming that no technology is developed that uses an entirely different form of computation we can create a lower bound for the computation effort required.

      Your statement seems correct, but I think assuming that no such technology will be developed is wrong, esp. given that there is a real incentive to do so.

    42. Re:uncrackable encryption by Anonymous Coward · · Score: 1, Funny

      Galileo makes high-precision access available to paying customers..

      wtf?! I thought he died years ago!

    43. Re:uncrackable encryption by Wavicle · · Score: 1

      But the such attack still takes longer than what we have left of fuel in our Sun (~5Gy).

      Let's not be too hasty. A 320-bit key has about 97 decimal digits. This is less digits than the RSA-129 key that was broken in 1994 in 6-months by a grid of several thousand computers followed by a couple days of super computer time.

      A 512-bit key has about 154 decimal digits, which is less than the RSA 193 key that was cracked last November.

      See this for a fairly good reference. If you really need your data secured for the next 20 or so years, you had better be using a 1024-bit or better key.

      --
      Education is a better safeguard of liberty than a standing army.
      Edward Everett (1794 - 1865)
    44. Re:uncrackable encryption by YGingras · · Score: 2, Informative

      Asymmetric schemes like RSA are a lot easier to crack than 3DES and other symmetric. A solid scheme would use very large (~4096 bits) asymmetric to exchange a symmetric key. If that sounds like SSL, well now you know why.

    45. Re:uncrackable encryption by Anonymous Coward · · Score: 1, Insightful

      I was hoping that the website would explain this. Did you RTFM? Assuming you did not.

      Actually, I did. It is far from clear. Can you please explain how this is using the benefits of a One Time Pad? Especially given that a One Time Pad requires non-deterministically created random numbers and a secure transfer method to actually be used properly.

      It's easy to put down an idea. So what do you have to offer the world that might actually be useful?

      I don't need to when there are already decent systems in place. I certainly won't be choosing some scheme like this. I have to shift ultimate trust to you, your systems and your delivery methods. I am not going to just trust you, or your systems, especially considering your delivery methods. I'll take tokens, biometric and strong locally administered passwords, thanks.

      The biggest problem to security isn't all this hype about encryption keys and SSL and crypto-this and crypto-that. It's getting people to use it in the first place. Social Engineering is the weakest part of security bar none. If you can get people to willingly improve their security position than you have a win.

      So you're trying to fix human factors with a system which is more complicated and encourages the user to carry around a copy of their password in plaintext? Validating the actions of all those people who keep their password printed in the plain in their wallets?

      If you have to do it through draconian methods, you lose.

      Your method is draconian! So somebody witnesses the victims typed in username and then steals or clones his phone or sniffs the next usable password in transit. What then? You are actually advocating on your site that it is okay to send passwords through email, because it is often done for password resets by other sites? Just because some people do security poorly, does not mean you should be advocating a system that does it no more poorly. I would not be using the word draconian if I were you.

      All I see at your site is this claim, "One time authentication (ota) is a means of adopting the known practices of One Time Pad encryption into a tool suitable for everyday web site authentication which provides a very high level of security while maintaining ease of use", and then a whole lot of complaining about how hard it is for people to adhere to decent password usage and then a short description of decent password usage, then another claim, "One Time Authentication is based on the historical One Time Pad encryption that's been used for passing secret messages. The difference is that it is applied to authentication or login. Here's how", then a vague description:

      1. One username (That's one username to witness, to penetrate lots of sites).
      2.1. Passwords only used once, like OTP encryption (Except it's not One Time Pad Encryption, rather it is a One Time Password, a system which already exists).
      2.2. Passwords are pseudo random (exactly what OTP's are NOT supposed to use. If you are going to provide such a service, why not get some decent random numbers from a pretty cheap external device).
      2.3. Previous password no longer valid (yeah, you covered that in 2.1).
      2.4. Next passwords sent to you (where it will either travel and/or ultimately be stored in the plain under most cicumstances. Any crypto protections along the way will allow the system to only be as strong as those systems).
      3. Just have to remember one username (yes, yes, you've covered that. One leaked username for all systems, that's great).
      3.1 We're going to send you your next password in advance (so as to allow maximum chances that it will be read from you email, hard disk, a backup tape taken off-site, etc or maximize the risks if your phone is stolen, hacked, covertly "borrowed").
      3.2 We advocate mobile phone delivery, since it is an out-of-band communication (but ignore the glaringly obvious risks that mobile phones are really easy to steal, crack, clone, etc).
      3.3 Oh and we support the mos

    46. Re:uncrackable encryption by utlemming · · Score: 1

      Exactly.

      In information managmenet there is an idea called perfect secracy -- it means that something secrecy is so safe that only those who should have access do and those who shouldn't, don't.

      The problem is that the cost and expertise to create something perfectly secret is way too expensive as to make perfect secrecy impossiable.

      This lead to the idea of something being near perfectly secret, or the idea that if something is not securely secret, it can be like it if it protected in such a way that by time someone broke in, it wouldn't matter anyway. (i.e. you encrpyt a file with criminal evidence using a cypher, by the time the police crack it, the statute of limitations has passed; or business plans sent over the internet, by the time the competition cracks it, the plans are not relative)

      This is why governments and companies don't really care if it will take 512 years or 1 million years to break encryption. If under current technology and the foreseeable technology, it can't be feasably broken, then it is as-good-as perfectly secret. That is the idea behind encryption. Sure you can get close, but trying to achieve perfect secrecy is going to be hard. Right now under AES you get something like 2^120 operatations before you have the possiability of obtaining a collision against a 128 bit key. So sure, you can throw a couple thousand computers at something, but the chance of breaking it is slim. Just in trying to generate the same hash as a password used, you could potentially generate enough data that would be equivalent to 2.5 times all the information stored on the internet, or about 256 exabytes. But AES is a strong, and considered secure, algorythmn that has not had a break other than side channel attacks.

      Like the parent post stated, it would take a long time if using AES. And as far as us mortals are concerned, right now, anything encrypted with AES is perfectly secure.

      So look at there method on the Satelite, it was weak, and I would argue not really encryption at all, more like a protocol.

      --
      The views expressed are mine own and do not express the views of my employer.
    47. Re:uncrackable encryption by Wavicle · · Score: 1

      I'm not specifically familiar with encryption algorithms themselves, however I do know that the general number field sieve was designed to locate candidate prime factors of very large numbers. As long as your encryption algorithm depends on the difficulty of prime factorization of large numbers, GNFS should reduce the difficulty of finding your decryption key well below the age of the universe for keys 512bit and smaller keys.

      --
      Education is a better safeguard of liberty than a standing army.
      Edward Everett (1794 - 1865)
    48. Re:uncrackable encryption by arminw · · Score: 1

      ......Encryption will always be crackable,......

      This is not really any encryption scheme, but more like another hare brained DRM scheme. The receiver of the encrypted data at some point MUST be given the key, so the data is useful to the intended recipient. There is just NO way to keep the key secret from the person who is supped to have it in order to read the message. The goal of true encryption is to keep the key from a third party who is NOT supposed to know the content. That kind of encryption can be made near impossible to crack given a sufficient key-length. The intended recipient is the only one who has the key which will decrypt the message.

      In any DRM scheme as well as this satellite system the is no THIRD party from whom the information must be kept. By information theory it is impossible for any DRM NOT to be broken. The content providers know this and that is why their DRM schemes have to be propped up by the legal system with DMCA type laws.

      It can be made difficult for a recipient to access the key, but only ONE determined, technically competent person can produce the key or clear-text or both and that DRM is forever broken. That is why anyone who is determined to "pirate" for money will always be able to do so. Therefore, I believe these satellite or other DRM schemes have nothing to with copyright, but control. A customer having legally acquired the data ONCE and for all is not palatable to many data providers. The purveyors of all of these schemes want to be able to re-sell the same information, be it entertainment or GPS data, again and again to the same customers for use in different circumstances and purposes.

      --
      All theory is gray
    49. Re:uncrackable encryption by jeremyp · · Score: 1

      So all I need to do is look over your shoulder while you type your user name and then steal your cell phone.

      Good system.

      --
      All I want is a secure system where it's easy to do anything I want. Is that too much to ask ~~ Randall Munroe
    50. Re:uncrackable encryption by Zeinfeld · · Score: 1
      Your statement seems correct, but I think assuming that no such technology will be developed is wrong, esp. given that there is a real incentive to do so.

      It is possible that someone will invent a working time machine, warp drive, transmat beam or other device that works on physical principles currently entirely unknown to us. And yes, quantum computing effects are undestood, they are not an issue for symmetric ciphers.

      It is not very likely that this will happen and if it did happen it is more than likely Gallileo becomes obsolete first.

      Cryptanalysis effort has pretty much developed at exactly the speed predicted. DES was broken several years AFTER the original design life had expired. Even today I would have no real concern using DES for a DRM scheme, the cost of breaking DES is much higher than most rewards.

      A much more likely event would be someone developing a better attack than brute force. This never happened for DES (except for the inversion effect which was always known), at least not in the sense that someone found an attack that was in total less effort than brute force (some people had attacks that they claimed were 2^50 or so but the amount of effort required per step was prohibitive.

      --
      Looking for an Information Security student project suggestion?
      Try http://dotcrimeManifesto.com/
    51. Re:uncrackable encryption by Fulcrum+of+Evil · · Score: 1

      According to trainspotting, 3 days is long enough to complete withdrawal, so you would need to stagger 1 week of Heroin with one of none on an ongoing basis.

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    52. Re:uncrackable encryption by Fulcrum+of+Evil · · Score: 1

      Actually, they can do SA on a region basis, so if they have enough GPSes in Iraq, they can turn it off there (and only there).

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    53. Re:uncrackable encryption by arminw · · Score: 0, Offtopic

      ..... requires differential GPS, which needs fixed receivers and transmitters in relatively close proximity, so it can never cover the whole world.....

      So only the small number of applications, such as the military, that need such precision somewhere out in the middle of nowhere will buy the Euro GPS keys. The rest will use fixed stations as needed for precision greater than the free US system provides. Besides this is really just another DRM system to prevent the intended recipient from finding the key. It looks like someone already has found it. Fortunately, the data these satellites send is not copyrighted. Therefore the DMCA type DRM protection laws don't apply.

      --
      All theory is gray
    54. Re:uncrackable encryption by arminw · · Score: 1

      .....use this cracked satellite data in the US due to DMCA......

      Geophysical data cannot be copyrighted. Therefore copyright protection laws do no apply

      --
      All theory is gray
    55. Re:uncrackable encryption by Tweekster · · Score: 1

      I find the digit method to be much cheaper.

      "How many digits are you willing to have cut off before you give the codes up"

      --
      The phrase "more better" is acceptable English. suck it grammar Nazis
    56. Re:uncrackable encryption by SillyNickName4me · · Score: 1

      It is possible that someone will invent a working time machine, warp drive, transmat beam or other device that works on physical principles currently entirely unknown to us. And yes, quantum computing effects are undestood, they are not an issue for symmetric ciphers.

      Or something else we just haven't heard of yet.

      It is not very likely that this will happen and if it did happen it is more than likely Gallileo becomes obsolete first.

      Not being able to conceive the next revolutionary invention is of all time, but such inventions happen with quite some regularity. Better assume that it will happen, just not likely it happens soon.

      Cryptanalysis effort has pretty much developed at exactly the speed predicted. DES was broken several years AFTER the original design life had expired.

      Correction, a public efford to brute force DES succeeded several years after the original design life expired.

      What this showed was that relatively inexpensive hardware at a price available to any medium and larger company could break a DES key in hours, and also that a large distributed network of PCs around the world could do the same job.

      A 'full scale' Deep Crack would have costed less then $2m to build, and due to economics of scale, building more would just make them cheaper. This quite suggests that if a need existed, similar machines have been viable for quite some time before that.

      Even today I would have no real concern using DES for a DRM scheme, the cost of breaking DES is much higher than most rewards.

      The cost is 'owning' a large enough network of zombied PCs. There is virtually no real cost associated with that.

      A much more likely event would be someone developing a better attack than brute force. This never happened for DES (except for the inversion effect which was always known), at least not in the sense that someone found an attack that was in total less effort than brute force (some people had attacks that they claimed were 2^50 or so but the amount of effort required per step was prohibitive.

      We will see. I don't see AES being broken in the comming years, but I quite expect to see it happen during my life.

    57. Re:uncrackable encryption by YGingras · · Score: 1

      It is asymmetric public keys that you crack by factorization. More of less, the public key is a huge number and the private key is the factors. With a symmetric cipher you have nothing to factor, in fact, I don't think division even come into play for DES. IIRC you can implement it all with basic bit operations. To speedup cracking a symmetric cipher you can do cryptoanalysis but that requires known clear messages and the encrypted version, lots and lots of them. Yes you are right, RSA isn't safe and you require huge keys with asymmetric schemes. But don't assume that all ciphers are that weak just because of that.

    58. Re:uncrackable encryption by grnbrg · · Score: 1
      If there is more time there is a guaranteed decryption scheme known as "heroin once a day for a week, followed no more heroin until you tell the key".

      Hence the term "cracking" a code. -- grnbrg.

    59. Re:uncrackable encryption by Anonymous Coward · · Score: 0
      "...the cluelessness of the Gallileo business model. Charging for something someone else is giving away is so 1990s. It only makes sense if there is something going on here we have not been told about."


      Not so sure about that. It's basically what Microsoft has been doing for the last 15 years, and making lots and lots of money no less ...
    60. Re:uncrackable encryption by Nogami_Saeko · · Score: 1

      They could, but a whole lot of soldiers use consumer GPS units instead of the military units. Enable SA again and the troops wouldn't know which way to go...

      The military GPS units I've seen are a joke - sure they can probably stand-up to being run over by a tank, but for user interface and ease of use, they're pitiful.

      N.

      --
      "Nothing strengthens authority so much as silence." - Charles de Gaulle
    61. Re:uncrackable encryption by (Score.5,+Interestin · · Score: 1

      >The most common form of sending new passwords today is via email.
      >I'll pass on any discussion about how secure this is, it's too
      >common to ignore. But the better alternative is via SMS to your
      >phone.

      This has been independently reinvented a number of times by different people. After about the tenth time the banks finally caught on, and it's now fairly common in Europe and Australasia.

    62. Re:uncrackable encryption by ultranova · · Score: 1

      Almost as good as biometric authentication but you can run it on websites. No need for HTTPS authentication schemes since the password expires immediately.

      Hello, I'm the Man in the Middle. I've hijacked a router to divert traffick from you to the Secure Website to actually go to my proxy. When you send your username and password, I'll grab them and use them to log into the website and do nasty things in your name. At the same time I'll provide a fake website to you (filled with personal info taken from the website I logged into with your password), to make you think everything's fine.

      --

      Forget magic. Any technology distinguishable from divine power is insufficiently advanced.

    63. Re:uncrackable encryption by Shanep · · Score: 1

      I was hoping that the website would explain this. Did you RTFM? Assuming you did not. The advantage that still exists is that OTP, even over SMS is much harder to intercept than standing behind someone at an airport kioske or sniffing wireless networks...

      This is hilarious. My idea of TFM is this. Your system does not provide the advantage of the One Time Pad. Which of course is encryption and perfect encryption at that. The advantage you seem to be summing this up with, is that the passwords are used only once. So that is a One Time Password system and nothing like a One Time Pad.

      You could actually get the benefits of the One Time Pad to provide single use passwords, but not the way you want to do it. You could have a list of strong passwords on the target login server. You will need an OTP for each user on the server and you will also need to distribute the appropriate One Time Pads to each individual user. When a user wishes to log in, they enter their username and then a "challenge" is provided, which is really the password they have just been one-time allocated for that session, encrypted against that users next free One Time Pad block. The user decrypts the password from his One Time Pad and then logs in. At this point, that used One Time Pad block is erased from the users machine, the server and the one-time password is also erased.

      Obviously there are major impracticalities to this and thus the general use of One Time Pads.

      The first and worst, is that you need to generate non-algorithmically lots of decent One Time Pads on an on-going basis and then somehow distribute them to your users in a secure channel. If you had access to such a secure channel between you and your users at arbitrary times, you would not need the impractical One Time Pad.

      Second, your users need to somehow securely store thier current One Time Pad and it needs to be capable of being securely erased really fast. Is this going to be done with more practical algorithmic crypto? If so, the perfect strength of the One Time Pad may be gone.

      Third big problem is that you can't store password hashes on the server, instead of the passwords themselves, for the simple reason that sending a user a one-way hash of a password is not going to give them access.

      There are lots of one time password systems. Why we should choose your system and how does it provides the benefits of the One Time Pad?

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    64. Re:uncrackable encryption by Anonymous Coward · · Score: 0

      I find the digit method to be much cheaper.

      "How many digits are you willing to have cut off before you give the codes up"


      You can get greater effectiveness with this, if you divide each digit up.

      For example: Cut the tip off before the first joint of the first finger (through the bone). Then cut the rest of that portion off through the first joint. Etc, etc. Then the toes if need be. I imagine those large cable cutters or bolt cutters would do well for this.

      I have seen what looked like a hidden-camera video of a man having a portion of his finger cut off, because he was a member of the Japanese Mafia (Yakuza) who wanted to leave them or had to leave. It consisted of an apparently sharp and very Japanese (finely crafted) knife, held on bone with someone repeatedly smashing something heavy and hard onto the knife. I was surprised the bone held up for so long, but eventually, it came off.

      That wikipedia article is interesting and covers this ritual.

      Moral of story: don't mess with Yakuza.

    65. Re:uncrackable encryption by aaron.rowe · · Score: 1

      Ah, Digital Cracking.

      Slightly more effective than Patella Cracking but the end result is the same.

    66. Re:uncrackable encryption by vertinox · · Score: 1

      So does Sodium Pentothal though sometimes there are decryption errors. If there is more time there is a guaranteed decryption scheme known as "heroin once a day for a week, followed no more heroin until you tell the key".

      Bah. Too much like the CIA's lazy tactics. Personally, I like the KGB/Chinese method. A bit messy, but it works.

      You come and ask them to give you the encryption key or they get to choose a finger they want removed with a pair of plyers.

      Then repeat the process every hour.

      Usually... They'll give up after the first finger.

      --
      "I am the king of the Romans, and am superior to rules of grammar!"
      -Sigismund, Holy Roman Emperor (1368-1437)
    67. Re:uncrackable encryption by vertinox · · Score: 1

      Are you really that clueless? I would not take 512 years to bruteforce a 320 bit key, it would take simply longer than the current age of the universe. Assuming of course that you are required to put a single computer per square centimeter of our planet surface (including oceans) and that you can't use more than one planet.

      If you subscribe to the Technological Singularity idea, then who is to say by 2500 AD we won't have the technology to use the entire mass of Jupiter, Saturn, or Sun for mathematical computations.

      That or maybe we will have found out a way to use sub-atomic particles (quarks etc) to do calculations which will of course exponentially increase our computing power.

      A great deal can happen in 100 years... Much less 500.

      --
      "I am the king of the Romans, and am superior to rules of grammar!"
      -Sigismund, Holy Roman Emperor (1368-1437)
    68. Re:uncrackable encryption by lysergic.acid · · Score: 1

      The media greatly exagerates the physical addictiveness of heroin. Don't get me wrong, it's an incredibly psychologically/physically addictive drug, but it takes much longer than a week of continuous use to develop physical dependence. Other opiates such as hydrocodone (Vicodin, Norco, Lortab), oxycodone (Oxy-Contin, Percocet), codeine (Tylenol 3), etc. are equally addictive, but prescription drugs don't have the same stigma in our culture for some reason. In fact, oxycodone and hydrocodone are both stronger than heroin by mass. Hydrocodone has less potential for abuse because it's mostly available only in preparations containing very small amounts of hydrocodone and large amounts of APAP (tylenol), similarly with codeine.

      It'd take atleast 3 weeks to a month of continuous use to develop strong opioid withdrawal symptoms with an abrupt discontinuation of usage. Moreover, someone with a strong will would probably be able to hold out for the first 48-72 hours, afterwhich the withdrawal symptoms begin to subside. Not to say that it'd be easy, but many (ex)heroin addicts have done it and continue to do it. It's usually the psychological addiction which keeps them going back and causes relapses.

      A benzo or alcohol dependence on the other hand could potentially kill you by causing you to go into a seizure. Physical dependence to benzodiazepines (Xanax, Valium, Klonopin, Ativan, etc.) develops just as quickly as opiate dependence, and it's not something that you can just quit cold-turkey. Without the proper medical oversight, detoxing from benzos could easily be fatal to the victim. So if I were to use drug addiction as a tool of extracting information from someone, I'd probably go with a short-acting benzo like Xanax or Ativan rather than heroin, despite the hollywood cliche of heroin being the single most addictive drug in the world. Also, large doses of benzos causes anterograde amnesia, so you could extract the information without the user even remember giving it up to you. Being a hypnotic and anxiolytic also can't hurt.

      However, having been through opiate withdrawals, I would never subject another human being to that kind of torture.

    69. Re:uncrackable encryption by andrewman327 · · Score: 1

      You make a good point. The most effective form of hacking is often social engineering. In this case, however, I am glad the code was broken but I doubt suitcases of Euros would have done the trick

      --
      Information wants a fueled airplane waiting at the hangar and no one gets hurt.
    70. Re:uncrackable encryption by NumerusSpy · · Score: 0

      So just how long do you think it takes for some one to becoem addicted to heroin?

      --
      There they are a conga line of suck holes. On the conservative side of Australian politics. - Mark Latham
    71. Re:uncrackable encryption by Anonymous Coward · · Score: 0

      It sucks. You suck.

    72. Re:uncrackable encryption by tacocat · · Score: 1

      I guess the challenge then isn't cryptography because we can all figure out how it's supposed to be done.

      I was thinking more in terms of the most common mistake people make in terms of security on the internet is they either use one password everywhere, use simple passwords everywhere, use the same group of username/passwords everywhere... All of these resulting in a lower level of security than would be desired.

      Some of the basic recommendations of passwords is that they be complex (alpha and numeric with upper/lower case), change regularly (rotated), and varied between authentication points (sites/servers).

      It is well established that people don't like to do this because it resembles work and causes them to take on other bad practices, like keeping a paper list of all their usernames/passwords -- that probably aren't complex or rotated to begin with.

      Probably a key difference between the two of us is that I consider the ease-of-use by an uninterested user to be of primary importance. If it's hard to use, they won't be inclined to adopt it. Given that as the first condition there are a lot of things that you have to accept as flawed (from a crypto sense) in order to at least improve the status quo.

      I am not going to claim that this is a good idea to someone who has an interest in cryptography and is striving for 100% security in all aspects. I'm trying to identify as this being a good idea for someone at the other end of the spectrum.

      As far as my idea being any better than any other one time password solution. Fuck it. I don't care. This was more an exercise on making network server that turned into a cgi application than anything else. I just think it's a pretty good idea. Is it perfect? Probably not considering I have three people with rubber hoses standing over my shoulder, 2 vans with enough RF equipment on them to shut down half of Europe in the parking lot, and 17 greasy man-in-the-middle dorks sitting in the back corners of the lobby. But I probably won't log into anything here.

    73. Re:uncrackable encryption by Lucractius · · Score: 1

      i can... find phone owner... pump them for the login... or pulp them if you want ... either way you get the info fast.

      --
      XML - A clever joke would be here if /. didn't mangle tag brackets.
  10. Two Interesting Points by FrankDrebin · · Score: 4, Informative
    1. The Cornell team anaylzed signals from a demonstration satellite that by itself is not useful for navigation, and according to the documentation transmits the same power-envelope, but not the same PRN's, as the operational system.
    2. According to Cornell's lawyers, the DMCA was not a concern because navigation data is not, and cannot be, copyrighted.
    --
    Anybody want a peanut?
    1. Re:Two Interesting Points by acaspis · · Score: 1
      According to Cornell's lawyers, the DMCA was not a concern

      Are these the same lawyers who sued the Norvegian guy who published the DVD obfuscation data ? And who patent the DNA sequences of medicinal plants from abroad ?

      Forget about copyright - what about industrial trade secrets ? Would they mind if someone published details of the GPS military-grade signal ?

      AC

    2. Re:Two Interesting Points by NoSuchGuy · · Score: 1, Redundant
      2. According to Cornell's lawyers, the DMCA was not a concern because navigation data is not, and cannot be, copyrighted.

      There is no navigation data in the signal. Its a time signal/timestamp that gets transmitted.

      The "logic" of your navigation system is inside the "box" in your car/ship/.. The box calculates the position depending on the timesignal.
      If your system can't read the time signal you can not calculate your position.

      If the time signal is encrypted it may become a DMCA matter in US. Would be nice to follow: "US Army sued for USD 12 billion of DCMA violation ..."

      --
      Grundgesetz * 23. Mai 1949 - 30. November 2007 - http://www.vorratsdatenspeicherung.de/
    3. Re:Two Interesting Points by munehiro · · Score: 1

      According to Cornell's lawyers, the DMCA was not a concern because navigation data is not, and cannot be, copyrighted.

      yet...

      --
      -- "If A equals success, then the formula is A=X+Y+Z. X is work. Y is play. Z is keep your mouth shut." - Einstein
    4. Re:Two Interesting Points by Anonymous Coward · · Score: 0

      "According to Cornell's lawyers, the DMCA was not a concern because navigation data is not, and cannot be, copyrighted."

      That depends. In the UK, copyright has been claimed even on things as mundane as the set of numbers defining the periodic fluctuations of the tides (i.e. harmonic constants -- the UK Hydrographic Office claims these are copyrighted). And the UK Hydrographic Office has diligently bullied every free implementation of any tide prediction program that uses the numbers into either withdrawing the UK numbers or any predictions derived from them, or paying for a license.

      I think Cornell's lawyers are probably right, but I wouldn't be that confident.

    5. Re:Two Interesting Points by schon · · Score: 1

      Its a time signal/timestamp that gets transmitted [...] If the time signal is encrypted it may become a DMCA matter in US.

      Umm, so you're claiming that a timestamp can be copyrighted?

    6. Re:Two Interesting Points by Anonymous Coward · · Score: 0
      According to Cornell's lawyers, the DMCA was not a concern because navigation data is not, and cannot be, copyrighted.


      Time to install an edonkey node on one of those satellites.
    7. Re:Two Interesting Points by Alsee · · Score: 1

      By the way, I claim the copyright on his date of birth.

      I don't happen to know what it is at the moment, but I must be given the copyright on it anyway because as we all know Property Rights Must Be Protected.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    8. Re:Two Interesting Points by FireFury03 · · Score: 1

      navigation data is not, and cannot be, copyrighted.

      I think the cartographers would beg to differ on this count.

    9. Re:Two Interesting Points by Anonymous Coward · · Score: 1, Interesting

      Absolutely correct. As someone who worked at a business geographics company that provided data to Google, Yahoo, and in-car nav systems (including the first stock system in the Prius), I can say that the multi-million dollar data set we produced was most certainly copyrighted. They even went so far as to insert fake "ghost streets" to catch other companies copying their data. Single datasets that fit on a CD and covered a single county were worth over $50,000. (Oddly enough, they weren't locked down and often resided at personal workstations for weeks at a time)

      If you don't believe all that, just go to Google Maps and read the copyright in the corner. It will usually be either Nav-Tech or Geographic Data Technology (my former employer).

    10. Re:Two Interesting Points by Pofy · · Score: 1

      >I think the cartographers would beg to differ on this count.

      Not at all. It is not the geographically data itself that they get copyright on (or no one else could maka map of an area were you have copyright on your map). It is your expresion of that data into your specific map that you get copyright on. Anyone is free to make their own map (or whatever) based on the information on someone else map. They can't copy that specific map with its layouts and so on.

    11. Re:Two Interesting Points by FireFury03 · · Score: 1

      It is not the geographically data itself that they get copyright on (or no one else could maka map of an area were you have copyright on your map).

      Of course someone could make a map of the same area - they just have to collect their own data instead of ripping off someone else's data (or licence the existing data).

      Anyone is free to make their own map (or whatever) based on the information on someone else map.

      Certainly not the case here in the UK - if you want to use the Ordinance Survey's data then you have to pay them for it, you can't just rip it off and use it for your own maps. I'm surprised if this isn't the same in the US - someone has gone to a lot of effort to collect the data, why should you automatically get it for free?

    12. Re:Two Interesting Points by RalphTheWonderLlama · · Score: 1

      What? that's ridiculous. It occurred in nature, not in the UK Hydrographic Office. I think I'll apply for a patent on the Pythagorean Theorem and Newton's 2nd law, I don't think Pythagoras or Newton did.

      --
      simple, fast homepage with your links: http://www.ngumbi.com/
    13. Re:Two Interesting Points by Anonymous Coward · · Score: 0

      ^ typical useless slashbot squackbox

    14. Re:Two Interesting Points by zippthorne · · Score: 1

      That someone is the USGS and therefore is ostensibly already paid for. Of course, a lot of the USGS data IS available for free (but you're on your own to obtain a program to display the data.)

      --
      Can you be Even More Awesome?!
    15. Re:Two Interesting Points by SEE · · Score: 1

      Certainly not the case here in the UK - if you want to use the Ordinance Survey's data then you have to pay them for it, you can't just rip it off and use it for your own maps. I'm surprised if this isn't the same in the US - someone has gone to a lot of effort to collect the data, why should you automatically get it for free?

      In fact, a traditional feature of commerically-produced street maps in America is the addition of non-existent streets, so that copyright infingement can be proved when a ripoff inculdes the phony street.

      However, unlike Britain, the U.S. has nothing like Crown Copyright covering works produced by the state. Unlike Ordinance Service maps, United States Geological Survey maps (like other state-produced works) are automatically public domain.

    16. Re:Two Interesting Points by ars · · Score: 1

      "Of course someone could make a map of the same area - they just have to collect their own data instead of ripping off someone else's data (or licence the existing data)."

      That's not really true. You can not copyright a basic fact (where a road, landmass, etc. is). So yes, you can rip off the mapping data.

      However cartographers mess with them - they create fake roads and add them to the map - if you copy that you did violate the copyright, because that fake road is not a basic fact.

      --
      -Ariel
    17. Re:Two Interesting Points by StikyPad · · Score: 1

      I don't think time can be copyrighted.

      But just in case I'm wrong, I now declare copyright on the hours of 9AM to 5PM, and using those hours or communicating them in whole or in part, without express written permission from me, is strictly prohibited. All rights reserved.

      Please contact me for licensing information.

    18. Re:Two Interesting Points by cpt+kangarooski · · Score: 1

      Of course someone could make a map of the same area - they just have to collect their own data instead of ripping off someone else's data (or licence the existing data).

      That is incorrect, in the US. A fact is not copyrightable, and so it is perfectly lawful to collect facts from someone else's data just as much as it is to collect them from the underlying phenomena. When you have a collection of facts, the most you can possibly copyright is the creative selection of the facts, and their creative arrangement. But not all selections and arrangements are creative; a telephone white pages of all people living in a geographic area, arranged in last name, first name order, with names, addresses, and numbers, is utterly uncreative, and utterly unprotectable.

      someone has gone to a lot of effort to collect the data, why should you automatically get it for free?

      Because copyright does not and never has protected mere effort. It is meant to encourage creativity. There is no protection for someone who works very hard to compile hard to collect facts in an uncreative way. There is protection for someone who writes a simple poem with no real effort at all in just a few moments.

      For more on this, I suggest reading the Supreme Court's opinion in the Feist case.

      Also, n.b. that while some people said that false data inserted into the true data can result in protection, they are wrong. False facts and theories which are presented as actual facts are treated just like actual facts. You don't get to have your cake and eat it too. All that false facts are good for is showing that copying did take place. There's nothing special about them otherwise.

      --
      -- This and all my posts are in the public domain. I am a lawyer. I am not your lawyer, and this is not legal advice.
    19. Re:Two Interesting Points by cpt+kangarooski · · Score: 1

      Largely wrong. As a copyright lawyer, I can say that your data set was not probably not protected, or at least not that much. The raw data is uncopyrightable. What data your company chose to select and how it arranged it might have been copyrightable, but only if you were creative about it. Of course, selecting all of it is never creative, so all creative choices in selection will necessarily result in a rather limited map. Likewise, it's tricky to imagine an arrangement of the data that is machine readable being particularly creative.

      The map as presented might be copyrightable, subject to the same conditions, and perhaps also on its artistic merits (though unoriginal conventions such as blue for water would not be, obviously).

      What your company probably mostly relied upon were trade secrets and contracts. (And how they were handled indicates that you might have had a tricky time with a good trade secret case)

      --
      -- This and all my posts are in the public domain. I am a lawyer. I am not your lawyer, and this is not legal advice.
    20. Re:Two Interesting Points by Anonymous Coward · · Score: 0
      Of course someone could make a map of the same area - they just have to collect their own data instead of ripping off someone else's data (or licence the existing data).


      At GDT, we were able to copy data, by hand in an editor, if it appeared in multiple sources. We could not copy data that only appeared in one map. Digital cartography is hardly ever 100% accurate. It is not "facts" as some other posters have stated. You guess a lot, average the errors from multiple sources, and hope you're lucky enough to have satellite imagery for reference, or that the dataset you bought from the county/state government was well done, with field data collected by car with a GPS. If you don't know how an interchange is supposed to look, you just try to make it look pretty with the best educated guess you can. That is not "facts." It is most definitely copyrightable, especially when considered at the level of entire counties or states instead of individual streets or address ranges.
    21. Re:Two Interesting Points by Pofy · · Score: 1

      >Of course someone could make a map of the same area - they just have to collect
      >their own data instead of ripping off someone else's data (or licence the
      >existing data).

      There is no "someone else's data". Data is not owned. That data is about how the erath looks (if we discuss maps), they can't be "owned". You can get copyright on the way you present those data though, which is what you get on a map. If you make your own map (in a non infringing way), were you got the data for that from is irellevant, it can be from someone elses data.

      >Certainly not the case here in the UK - if you want to use the Ordinance
      >Survey's data then you have to pay them for it, you can't just rip it off and
      >use it for your own maps.

      Depends on how you "rip" it. Data in it self is not protected by, for example copyright. A map is. It is similar to the facts in a book not holding copyright, while the presentatio of them, as a book, has a copyright. There is further copyright issues for databases and their collection of data. Again, it is not the data itself that is protected, but the collection of them into a database that is. Depending on how you get the data, how much and how you use it, there can or can not be infringement. Simply taking the full data and using it and presenting it in the same form would most likely not work. That is not what I was saying though, I was talking about making your own map but doing so based on data found in another map. Quite different.

      >I'm surprised if this isn't the same in the US - someone has gone to a lot of
      >effort to collect the data, why should you automatically get it for free?

      Because you can't own data? See above about database protection though. Collections of data IS protected, the individual data is not though.

  11. Re:and North Korean rocket scientists appreciate t by MichaelSmith · · Score: 1
    I think that North Korean rocket scienties are having a party today.

    But they get the credit regardless of where their rockets land.

  12. Get your filthy American hands off our data! by Anonymous Coward · · Score: 5, Insightful

    If a European tried doing something like this with a US GPS satellite, they'd get arrested for being a terrorist long before they had chance to write a paper on it.

    1. Re:Get your filthy American hands off our data! by Anonymous Coward · · Score: 0

      Exactly what I was thinking about. Let's admit it, US people is ready to fight for their own freedom just as much as they're ready to deny anybody else's, if needed. Shame on your country, a day will come when all this sick laws will screw you up for real internationally.

    2. Re:Get your filthy American hands off our data! by Anonymous Coward · · Score: 0

      You are NO LONGER IN CONTROL of it once you BROADCAST it.

    3. Re:Get your filthy American hands off our data! by McSnarf · · Score: 1

      Errr. Wrong.

      They'd possibly get a medal in the east, loads of cash from certain people in the west.

    4. Re:Get your filthy American hands off our data! by Shads · · Score: 1

      > Exactly what I was thinking about. Let's admit it, US people is ready to fight
      > for their own freedom just as much as they're ready to deny anybody else's, if
      > needed. Shame on your country, a day will come when all this sick laws will
      > screw you up for real internationally.

      Don't confuse the "US People" with the "US Government". Less than half of the US voted becuase they're so disillusioned with all comers. Our sick laws screw us up at home everyday, why should we worry about it screwing us up internationally when we can't even get our shit right here?

      --
      Shadus
    5. Re:Get your filthy American hands off our data! by Greyfox · · Score: 1

      Being disillusioned with all comers is no excuse. If we all showed up and either voted either NOTA or against the incumbent in every single election, the system would actually start to change. I make it a point to show up and vote for independent parties at the local levels, against odious candidates and against incumbents (In that order) in Federal elections. Don't say your vote won't make a difference either -- I'm pretty sure we wouldn't be in Iraq right now if a few dozen grannies in Florida could have figured out how to work a butterfly ballot in 2000.

      --

      I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

    6. Re:Get your filthy American hands off our data! by deopmix · · Score: 1

      The majority of us americans didn't vote because we are to LAZY to get to the polling stations.

    7. Re:Get your filthy American hands off our data! by WuphonsReach · · Score: 1

      I'm pretty sure we wouldn't be in Iraq right now if a few dozen grannies in Florida could have figured out how to work a butterfly ballot in 2000.

      I dunno about that, but I agree with the rest of your sentiment.

      Voting against the incumbent, even if the incumbent still wins re-election sends a message that there are voters out there who think the incumbent is not doing a good job. Even the most jaded politicians pay attention to their vote counts.

      (I plan on a similar voting strategy in the fall. Either voting for Independent candidates or against the incumbents.)

      --
      Wolde you bothe eate your cake, and have your cake?
  13. Accuracy not critical with nukes on soft targets by Goonie · · Score: 2, Insightful
    You don't need sub-metre accuracy to be lethal with an ICBM tipped with a nuclear warhead. Land a rocket with a nuke within five miles of here, here, or here and you kill tens, probably hundreds of thousands of people.

    Or, alternatively, you could just about hit here with a trebuchet from North Korea, and there are 11 million people there.

    North Korean nuclear strategy is likely to revolve around killing lots of people, not taking out hardened military targets with precision weapons. For that, accuracy measured in miles will do just fine.

    --

    Any sufficiently advanced technology is indistinguishable from a rigged demo
    --Andy Finkel (J. Klass?)
  14. Re:and North Korean rocket scientists appreciate t by matt4077 · · Score: 1

    For a nuclear warhead, traditional GPS' 5m-accuracy should be quite sufficient. It's not like they'd be trying to avoid "collateral damage"

  15. What about firmware upgrade ? by i-neo · · Score: 5, Informative

    Cornell demonstration is pretty useless.

    First Galileo is only in testing phase, therefore nothing tells you the signal encryption they are using is the definitive one. I would rather think they are testing and they don't care if someone is getting it.

    Second have you ever heard of firmware upgrade ? I guess encryption will be updated when the satelites will be in production, and there will not be any problem since it is not being used in any device yet.

    Thank you Cornell people for this useless article. Another Cornell box ?

  16. Amateur Galileo receiver? by Goonie · · Score: 2, Interesting

    If I read this, and the GPS article in the Wikipedia, it would now be possible to build a Galileo system out of off-the-shelf parts and some moderately clever software. Is this the case, or is there something I'm missing?

    --

    Any sufficiently advanced technology is indistinguishable from a rigged demo
    --Andy Finkel (J. Klass?)
    1. Re:Amateur Galileo receiver? by The+Cornishman · · Score: 2, Funny

      > is there something I'm missing?
      Yep. There's only the one satellite, (a demo and a placeholder, a bit like Vista beta :) so a lot of the time it's not going to be above the horizon on your part of the rock. Yeah, a lot like Vista beta, come to think of it.

    2. Re:Amateur Galileo receiver? by HuguesT · · Score: 4, Informative

      Yes, you are missing the fact that there is only one Galileo satellite in orbit right now, and this one doesn't include all the technology that will make Galileo an interesting system, namely the high-precision onboard atomic clock. In all generality you need timings from at least 4 different satellites visible from everywhere to be able to locate a point in 3D. This means about 12 at a base minimum must be in orbit for the system to be useful. The final system will have 30.

      The current sole Galileo system in orbit is a test system. The final systems will be significantly different.

  17. Next up for a crackin' by Nichole_knc · · Score: 0, Flamebait

    Well now... Just when are the codes for the Windors voting machines going to be released??? How 'bout codes for dem Windors ATM machines too.... Fine world when MOST of our most important is guarded by a swiss cheese OS... Sorry for the offensive remark refering to "swiss cheese" NOT Windors. Secure MSOS... Yea, Right... In Redmond dreams......

    1. Re:Next up for a crackin' by Anonymous Coward · · Score: 0

      Are you mentally ill?

  18. bitter much? by Anonymous Coward · · Score: 0

    :-\

    yeeesh. what happened to cracking something for the sake of cracking something?

  19. Re:Accuracy not critical with nukes on soft target by Znork · · Score: 2, Interesting

    "North Korean nuclear strategy"

    Actually, like most such strategies, North Korean nuclear strategy is most likely to revolve around not having to actually fire such weapons; if you at any point need to actually launch, you've already lost, they can only be used to make the enemy and the rest of the world lose too.

    Taken to the natural conclusion, see the Dr Strangelove version of Doomsday Machine. No precision needed at all, and you dont even need a trebuchet.

  20. Re:and North Korean rocket scientists appreciate t by Anonymous Coward · · Score: 1, Interesting

    It's used for setting course early on. Most of the way, warheads are just coasting. So little direction and position errors early on are magnified at the other end. Still may be overkill, as you suggested, but maybe not for all we know.

  21. How about the US GPS encrypted channels? by KDN · · Score: 3, Insightful

    The US GPS system also has two encrypted channels, P1 and P2, which use undocumented PRN generators (or at least I've never found them). Has anyone ever cracked them? The CA signal is what the civilian systems use.

    1. Re:How about the US GPS encrypted channels? by steve_l · · Score: 3, Interesting

      I think the US encryption system changes on a regular (monthly?) basis; you need new keys in your receiver. So even if you manage to pick up an military GPS rx on ebay or somewhere else, you wont get the military fix.

      which is a pity -apparently it works better under tree cover than civilian GPS.

    2. Re:How about the US GPS encrypted channels? by kickdown · · Score: 1

      Sure. It's so easy to get military secrets. Just ask Slashdot. PRN(P1) = 437 PRN(P2) = 17 (Now this will forever be indexed in Google and morons all around the world will be excited when googling for this *evilgrin*)

      --
      Continuous positive slashdot karma since... uh, maybe next year.
    3. Re:How about the US GPS encrypted channels? by Jacco+de+Leeuw · · Score: 1

      Well, the Cornell lawyers say that it is "fair game" to crack the US GPS PRNG. (Although they probably forgot to mention that after you crack the PRNG, you will be fair game for the US military...)

      --
      -------
      Warning: Slashdot may contain traces of nuts.
    4. Re:How about the US GPS encrypted channels? by richie2000 · · Score: 1

      That was LAST week's PRN. Keep up, willya?

      --
      Money for nothing, pix for free
    5. Re:How about the US GPS encrypted channels? by Vreejack · · Score: 4, Insightful

      NAVSTAR encryption serves two purposes, reduction of precision for outsiders and anti-jamming. Bill Clinton removed the precision constraints, but the anti-spoofing/jamming codes are changed very often.

      Two caveats: the anti-jam/spoof feature can improve reception in areas of high interference caused by physical geometry (reflective surfaces, for example), and the US gov. can always cripple precision in local areas if it wishes (e.g., Baghdad).

      --
      "Will future ages believe that such stupid bigotry ever existed!" -- Ivanhoe
    6. Re:How about the US GPS encrypted channels? by TubeSteak · · Score: 1
      I think the US encryption system changes on a regular (monthly?) basis; you need new keys in your receiver. So even if you manage to pick up an military GPS rx on ebay or somewhere else, you wont get the military fix.
      I have a milspec handheld GPS unit (which you can plug into a computer).

      How is it supposed to get updated encryption keys?

      P.S. anyone know where I can get a new battery for it? The battery is an inch wide, 5 inches long & has (IIRC) two lithium cells in it.
      --
      [Fuck Beta]
      o0t!
    7. Re:How about the US GPS encrypted channels? by Anonymous Coward · · Score: 0
      P.S. anyone know where I can get a new battery for it? The battery is an inch wide, 5 inches long & has (IIRC) two lithium cells in it.
      Is this what you are looking for?
    8. Re:How about the US GPS encrypted channels? by TubeSteak · · Score: 1

      That looks about right
      you = hero

      Now to find somewhere to order lithium sulfide batteries.
      No offense, but 8 AA's don't begin to compare for power:weight.

      --
      [Fuck Beta]
      o0t!
  22. Isnt That Illegal? by omegashenron · · Score: 2, Insightful

    Given that these codes are in place to sell premium products to consumers and recoup the investment made with putting the satellites in orbit - how is this any different to breaking codes for satellite TV and/or DRM?

    I really hope the folks at Cornell start working on something that would have a legitimate use such as the ability to make a backup of a legally purchased HD-DVD movie... oh wait... that would be illegal :-(

    --
    Excuses Are Like Assholes - Everybody's Got One
    1. Re:Isnt That Illegal? by jacksonj04 · · Score: 1

      It's not the premium code - they simply found the code used for the test satellite's Open Service. Once the system is up and running, this key will be changed and given out to manufacturers anyway, it's not like it's going to be highly protected.

      The Commercial Service, Public Regulated Service and Safety of Life Service all use different (more secure) encryption means.

      --
      How many people can read hex if only you and dead people can read hex?
    2. Re:Isnt That Illegal? by danpat · · Score: 1

      "this key wil be changed and given out to manufacturers anyway, it's not like it's going to be highly protected."

      Makes you wonder why they bother in the first place. Sounds like a lot of effort, infrastructure and middlemen to construct something that's obviously going to be bypassed very shortly. Ah, the middle men, that's where it came from....

  23. Only two satelites by Anonymous Coward · · Score: 0

    As far as I'm aware there is only one.. at most two of the satellites up there, so your properly not going to get any advantage from adding them to your GPS system right now. At the end of the day its going to be more freely available than the US GPS system anyway, so for the average person, why bother with the cracked encryption?

    The EU has developed Galileo for the people and not for the military. It even has financial backing from states that are not part of the EU, including China! So if the US was planning to turn off GPS when the nukes started flying, they better have a plan B. :p

    1. Re:Only two satelites by Anonymous Coward · · Score: 0

      The EU has developed Galileo for the people and not for the military.

      ROTFL.

      The EU has developed Galileo for big commercial interests and also military purposes, and in order to be independendent from the US.

      Don't tell me you're so naive that you could really think the EU would invest billions of Euros "for the people". "The people" count for nothing in the EU.

  24. Encryption Doesn't Work by dushkin · · Score: 0

    There you have it, encryption doesn't work.

    --
    o hai
    1. Re:Encryption Doesn't Work by Linker3000 · · Score: 2, Funny

      Netcraft? That you?

      --
      AT&ROFLMAO
  25. Wrong again! by Anonymous Coward · · Score: 0

    It's perfectly legal to have and use a scanner/radar detector/whatever in the UK, even to listen to transmissions on the unlicenced band.
    However, it is against the law to act on such information you receive from those transmissions.

    1. Re:Wrong again! by Anonymous Coward · · Score: 0
      It's perfectly legal to have and use a scanner/radar detector/whatever in the UK, even to listen to transmissions on the unlicenced band. However, it is against the law to act on such information you receive from those transmissions.

      It's perfectly legal to act on such information. However, it's against the law to benefit from those actions.

    2. Re:Wrong again! by Anonymous Coward · · Score: 0
      It's perfectly legal to act on such information. However, it's against the law to benefit from those actions.

      It's perfectly legal to benefit from those actions. However, it's against the law to enjoy those benefits.

    3. Re:Wrong again! by Anonymous Coward · · Score: 0

      It's perfectly legal to benefit from those actions. However, it's against the law to enjoy those benefits.

      It's perfectly legal to enjoy those benefits... as long as you didn't inhale.

    4. Re:Wrong again! by Anonymous Coward · · Score: 0

      It's perfectly legal to inhale. However, it's against the law to act on that information.

  26. Re:and North Korean rocket scientists appreciate t by Zemran · · Score: 2, Funny

    They have to learn to make them fly before they worry about where they land...

    --
    I love stacking my barbecues in the shed at the end of summer - you can't beat a bit of grill on grill action.
  27. Well, don't forget the third "GPS" by Tavor · · Score: 5, Informative

    Not many people remember it, but there was a third competing system for Global Positioning.
    GLObal NAvigation Satellite System
    Started by the Soviets, cont. by the Russian Federation, and now with India on board,it is expected to be fully operational again in 2008. (Like all things expected to be complete in 1991, the money situation made them push it back further than Vista.)

    --
    Windows has detected an undetectable error.
    1. Re:Well, don't forget the third "GPS" by Zoxed · · Score: 1

      Did you read the Wikipedia article ? It *was* completed in 1993, but lack of maintenence caused problems and is expected to be re-operational by 2008/2010.

    2. Re:Well, don't forget the third "GPS" by Funakoshi · · Score: 1

      GLONASS (GLObal NAvigation Satellite System) is being used now in the Survey Industry with fairly good results. Many new survey grade (1cm accuracy) receivers are making use of the corrections and they seem to be helping out with the quality of data.

  28. Legal second opinion (from an engineer) by justthisdude · · Score: 4, Insightful
    I'm no big fan of copyright, but I think Cornell needs a better lawyer. Clearly, no one can copyright a location (although this would make for a great scene: "Where am I?" "I can't tell you; it's copyrighted." I bet Dick Cheney is already drooling, but I digress). What they are protecting is the output signal from their satellites' atomic clocks, and measurements of their exact orbits. A mobile device computes its own position by comparing path delays to themselves from many satellites' known locations. The timing signal and satellite ephemeris are creative content that can be protected just like a map or satellite picture can be copyrighted, while the location depicted isn't. TFA compares decoding the timing signal to looking at a lighthouse and deducing your own position, which is clearly free. That same arguement would support decoding satellite signals of CNN to deduce world events. World events are clearly free, but the video isn't.

    A stronger arguement can be made: since they have agreed to make the codes open source they have no right to enforce copyright. You just can't say they aren't creating anything.

    --
    "I love his boyish charm, but I hate his childishness" - Leela
    1. Re:Legal second opinion (from an engineer) by Anonymous Coward · · Score: 0

      Actually here in Canada it is possible that accessing these signals could fall under section 342 of the Canadian Criminal Code as unauthorized use of a computer. If someone could or would be charged here is another issue, one for lawyers. I'm not a lawyer, I only play as one in the bathtub :)

    2. Re:Legal second opinion (from an engineer) by MikeJ9919 · · Score: 1

      No offense, but I think engineers need to stop playing lawyers. As an engineer headed to law school in the fall, I'm smart enough to know how little I know at this point.

      With that said, the very first thing they teach you in law school is "it depends"...everything in the law is a balancing act, and is subject to human judgement. Sometimes it's a very lopsided balancing act, but there's almost always room for argument.

    3. Re:Legal second opinion (from an engineer) by Anonymous Coward · · Score: 0

      So let me get this straight: You're an ENGINEER that thinks he knows more about the law than a lawyer?!?!?

      The timing signal and satellite ephemeris are creative content

      No, they are lists of *facts*, not creative content.

      I guess that's what you get when you ask an engineer for a legal opinion.

    4. Re:Legal second opinion (from an engineer) by justthisdude · · Score: 1
      I'll stop playing lawyer when I get a cool tv show where sexy Engineers take time off each week from their complicated and occasionally wacky love-lives to solve flashy and technically challenging optimization problems. Oh, and I want that boffo CSI-effect where the camera magically focuses deeper and deeper into the body of the computer until it finds the inner file where the bug crawls across the damaged line of code.

      With that said, there IS always room for argument, but TFA's lighthouse analogy was based on a misunderstanding of the technical details of GPS, so it wouldn't stand up against competent cross-examination (he says, arching his brow and looking meaningfully at the sexy foreperson of the jury), they are not trying to "copyright basic data about the physical world" but a clock signal they produce and a measurement they make.

      --
      "I love his boyish charm, but I hate his childishness" - Leela
    5. Re:Legal second opinion (from an engineer) by Pofy · · Score: 1

      >The timing signal and satellite ephemeris are creative content that can be protected

      Yeah, don't you dare look at my watch with its creative time data 8no it doesn't follow the real time, it is a secret different time (sure happens to be 10 seconds later than normal but still).

      >just like a map or satellite picture can be copyrighted,

      Pictures and maps are specifically included in what copyright protects. Normal data including time is not included nad hence not covered by copyright. This is obvious by looking at the copyright law of about any country in the world.

    6. Re:Legal second opinion (from an engineer) by Anonymous Coward · · Score: 0

      everything in the law is a balancing act, and is subject to human judgement.

      This is what engineers don't like about law. Law should be more formalized, so that the outcome of judgements could be better predicted.
      Of course this means that law would have to be simplified a lot, to resolve all internal contradictions. General laws like "you shall not kill fellow humans" should not have exceptions like "unless you do not like their political ideas or the political system in the country they happen to live in".

    7. Re:Legal second opinion (from an engineer) by cpt+kangarooski · · Score: 1

      What they are protecting is the output signal from their satellites' atomic clocks, and measurements of their exact orbits.

      And those are facts, and so are uncopyrightable under US law. See 17 USC 102(b). They're not creative in any respect whatsoever.

      --
      -- This and all my posts are in the public domain. I am a lawyer. I am not your lawyer, and this is not legal advice.
    8. Re:Legal second opinion (from an engineer) by cpt+kangarooski · · Score: 1

      Why should it be formalized? We don't want a legal system that's highly simple and predictable so much as we want one that serves the interests of justice. Humans, their behavior and society, are pretty messy. Little surprise that our legal systems would tend to be as well.

      --
      -- This and all my posts are in the public domain. I am a lawyer. I am not your lawyer, and this is not legal advice.
    9. Re:Legal second opinion (from an engineer) by dvdeug · · Score: 1

      The timing signal and satellite ephemeris are creative content

      Really? What's creative "I am here..." and "the time is now..."?

    10. Re:Legal second opinion (from an engineer) by swiftstream · · Score: 1

      The issue is creative content. Copyright protects CNN broadcasts because creativity goes into making them. The same can't be said of GPS signals.

      --
      Be a PATRIOT--because the only thing we have to fear is the lack thereof.
    11. Re:Legal second opinion (from an engineer) by blueskies · · Score: 1

      Dude, computers are creative now, look at HAL.

  29. Openly available signals by pe1chl · · Score: 1, Redundant

    "Imagine someone builds a lighthouse," argued Psiaki. "And I've gone by and see how often the light flashes and measured where the coordinates are. Can the owner charge me a licensing fee for looking at the light? ... No. How is looking at the Galileo satellite any different?"

    You would expect it to work that way, but NO. Today, it really is possible to transmit information into publicly receivable media and still be able to prohibit the use of it and to do the research necessary to make the signal useful (in the above case: measure the coordinates).

    For example, when someone sends a TV signal from a satellite you can look at the signal but it would be illegal without the proper license to try to find out how the bits sent down can be reconstructed into a viewable TV picture.
    Sure this used to be legal, and that is what you would expect, but the big media companies have convinced the politicians to pass laws that prohibit this.

  30. Algorithm is being replaced by joshua42 · · Score: 4, Interesting

    Acoording to a friend working on the Galileo project they came up with a new encryption algorithm specification a week ago. Quite annoying with such changes this late in the project, they thought. I guess this news kind of explains it.

    --

    - El riesgo siempre vive - Private J. Vasquez
    1. Re:Algorithm is being replaced by Anonymous Coward · · Score: 0
      Acoording to a friend working on the Galileo project they came up with a new encryption algorithm specification a week ago. Quite annoying with such changes this late in the project, they thought.


      Well, then they're really going to be pissed then when the "new" one gets cracked in another six months. =)

  31. Re:Accuracy not critical with nukes on soft target by Richard_at_work · · Score: 1

    Soeul is already within artillery range of the North, they could jsut lob a nuclear tipped shell over and do the same damage.

  32. Re:and North Korean rocket scientists appreciate t by cswiger2005 · · Score: 1

    "So long as they go up, who cares where they go down."

                  -- Werner von Braun (paraphrased by Tom Lehrer)

    --
    "The human race's favorite method for being in control of the facts is to ignore them." -Celia Green
  33. Re:and North Korean rocket scientists appreciate t by Anonymous Coward · · Score: 2, Funny

    Re-read your statement, think about who you're talking about, then go look up the definition of irony.

    *grin*

  34. In practical terms by nurb432 · · Score: 1

    What does this mean to me? Can i reprogram my portable GPS to this new code? And what does it give me if i can? I already get free access to GPS now ( well i paid my purchase fee on the device ) and didnt the US government lift restrictions on accuracy recently ?

    No i couldnt get to TFA to read it.

    --
    ---- Booth was a patriot ----
  35. Imagine... by Cinquero · · Score: 1, Informative

    Imagine working for years and noone is paying you.

    So much about the lighthouse bullshit.

    Suckers.

    1. Re:Imagine... by Anonymous Coward · · Score: 0

      It's called "Cost of Living" when that happens, it's not really that difficult to imagine.

  36. Re:Accuracy not critical with nukes on soft target by MrShaggy · · Score: 1

    They could even get in with bio-weapons. Launch a cow that has mad-cow disease.

    Good to go!

    I think the idea came from a lot of editorials. There were 2 Canadians and an upset cow, in a sling getting ready to go over the border. The quotes were 'Canadians develop weapons of mass destruction, that can be launched within minutes.'

    --
    I have mod points and I am not afraid to use them.
  37. Could it possibly be that... by Anonymous Coward · · Score: 0

    ...you preening Euroweenies have been trying to crack American military GPS satellites for many years, but simply don't have the mad skillz that the Cornell boys do? Nah, much better to play the hypothetical victim, no?

    Ovchinnikov's Law: As an online discussion on Slashdot grows longer, the probability of alarmist leftist rants involving some mention of Bush, Cheney, Halliburton or Gitmo approaches one.

    1. Re:Could it possibly be that... by WilliamSChips · · Score: 1

      And the person who replies to such with rightist rants involving "You're just jealous" loses.

      --
      Please, for the good of Humanity, vote Obama.
    2. Re:Could it possibly be that... by Anonymous Coward · · Score: 0

      So you have nothing to say about the silly original post, and are left with a lame "you lose" and an accusation that the poster is "rightist." Following your logic, can I assume you think that Mike Godwin is a joooo-loving Zionist because he ridiculed those who use Nazi references as a debating tool? Get real. The statement "If a European tried doing something like this with a US GPS satellite, they'd get arrested for being a terrorist long before they had chance to write a paper on it" is tendentious at best and likely untrue as well.

      You have to admit, it's pretty fucking hilarious that the relatively ancient American GPS technology has held up to cryptographic attacks better than the brand-spanking-new Euro version. Although this could be the beginning of some GPS-cracking one-upsmanship and who knows, maybe folks will redouble their efforts to decode the Pentagon's high-accuracy signals. In fact, it could have happened already, but a state-sponsored effort would likely keep it quiet for strategic purposes, a la Bletchley Park.

  38. I don't understand by MrShaggy · · Score: 1, Interesting

    Why it was necessary to break up someone's business like this? Now instead of paying monthly for access, they are going to have to license the access right to the manufacturer. Space is expensive. So when satellites need repair or replacement, how is this going to happen ?? All you will see is either the company will figure out a way to update the codes all the time(Like sat. tv) or, a massive increase in the cost of GPS units, to cover the license cost. Now someone that has a small hobby like geocaching might not be able to afford it.

    What about the DMCA? How likely would this company try to sue the university, and the students, for breaking the code. I'm sure that they would go after the magazine as well. Why did they have to name the company? Why couldn't they just say they cracked a type of code this way? Did they even inform the company that the code was cracked in order to give them time to fix it? Just because you don't like the Pay-per-use model, doesn't mean that you have to use it.

    --
    I have mod points and I am not afraid to use them.
    1. Re:I don't understand by Anonymous Coward · · Score: 0

      You don't understand alot of this system do you? Have you actually read the article?

    2. Re:I don't understand by bloosheep · · Score: 1

      The DMCA is American law -- unless the European companies being "infringed upon" have American ties, then the DMCA shouldn't apply. If I'm also reading the article correctly, the Cornell researchers were doing this in part because the European satellite concerns didn't release PRN data as they had promised.

    3. Re:I don't understand by MrShaggy · · Score: 1

      But a promise dosen't mean a thing. If there was a 'contractual agreement' then sue them. Why is it up to these people to dispense justice??

      --
      I have mod points and I am not afraid to use them.
    4. Re:I don't understand by Anonymous Coward · · Score: 0

      Maybe not, but we have EUCD, much the same thing, but with even less provision of fair use!

      However, they only apply to created works. The signal from the satellites is basically just the time, plus corrections to the position of the satellite, and atmoshperic density.

      All of those are public knowledge, and have to be for the system to work. IANAL, but I don't think you could apply EUCD to that.

  39. Re:and North Korean rocket scientists appreciate t by Detritus · · Score: 1
    "I reach for the stars, but sometimes I hit London."

    -- Werner von Braun (modified by Mort Sahl)

    --
    Mea navis aericumbens anguillis abundat
  40. Re:Accuracy not critical with nukes on soft target by zulux · · Score: 1

    North Korean nuclear strategy is most likely to revolve around not having to actually fire such weapons

    The assumption is that the North Korean government is sane.

      I seriously doubt any government that systematically starves its own people to death over a few decades would have any trouble watching the same people die in a "glorious" fire.

    --

    Moneyed corporations, non-working 'poor' and criminal prisoners are turning productive citizens into tax-slaves.

  41. I realise that its dangerous replying to trolls, but everyone who really wants to has already cracked the US GPS high precision code. I don't know how much of a secreat that is, but I've been told by people who know that its been done. The government is aware, but I think they still retain the posibility of switching it if they need to and having all of the military GPS work without modification. No, the US doesn't like the Euro Gallileo, because as far as we know, they lack the ability to block, or change the signal. But, I haven't heard any complaints recently. I wonder if they've figured out a compramise.

    --
    Well.. maybe. Or Maybe not. But Definitely not sort of.
    1. Re:Nope by FireFury03 · · Score: 2, Interesting
      No, the US doesn't like the Euro Gallileo, because as far as we know, they lack the ability to block, or change the signal.

      This is not true (anymore). ISTR the sequence of events went something like:

      1. EU announced Gallileo
      2. US started complaining that they didn't see why the EU wanted to do this since there was an already perfectly good GPS system in operation.
      3. EU pointed out that NAVSTAR is under the control of the US millitary and they didn't trust the US not to turn it off or "adjust" it
      4. US said that this would never happen and the EU should just use GPS
      5. Some time later it was obvious the EU had ignored the US "recommendation" and continued working on Gallileo so the US then made a lot of fuss about how it would be bad because the US wouldn't have control of it and thus couldn't block it (strange - isn't that what they said they would never do?). Lots of words like "terrorism" were thrown around.
      6. EU caved and modified Gallileo so that the US (and anyone else for that matter) could easilly block it.


      Now personally, I think this is a very Bad Thing - if I'm using a global positioning system for safety critical purposes I want it to be as damned bulletproof as possible, I don't want it purposefully designed to be easilly jammable just to please a paranoid foreign government.
    2. Re:Nope by ScrewMaster · · Score: 1

      This is largely just posturing, on both sides. Positioning systems are too critical to industrial economies the world over (and the bigger the economy, the greater the dependence) for either side to ever completely shut them off. Sure, I suppose that if someone begins lobbing nuclear-tipped missiles around that might happen, at least partially. But because the capability to disable GPS exists, no power capable of delivering a warhead over thousands of miles would ever depend upon GPS for guidance.

      The problem for military thinkers is that GPS just makes location and navigation way too easy. Once it was made available for civilian use, everyone from oil tankers to FedEx to campers began using it, and are now dependent upon it. I would venture to say that disabling GPS, at this point, would cause more economic damage in the short term than a medium-sized war. Oh, I'm sure the capability exists to make GPS broadcasts only work for U.S. military navigation systems, should the need ever arise to disable civilian use, but they'd be fools to use it.

      Besides, you don't really "jam" global satellite transmissions. What you do is remotely disable or degrade them at the source, which is what all this is about: who has the authority and ability to do just that. The EU may have granted the United States the power to turn off Galileo, but I doubt it. When push comes to shove, if the U.S. tries to turn off Galileo I'll bet dollars to doughnuts that absolutely nothing happens. Why should it? It's not our system.

      The thing about GPS is that, like the Internet it is a remarkably egalitarian technology. It's a tool, a platform, that anyone can use, for purposes not even remotely envisioned by the original designers. Sure, that means terrorists can use a GPS receiver to their advantage, but then ... so can everyone else.

      --
      The higher the technology, the sharper that two-edged sword.
    3. Re:Nope by FireFury03 · · Score: 2, Insightful

      I would venture to say that disabling GPS, at this point, would cause more economic damage in the short term than a medium-sized war.

      I dare say that turning off or seriously degrading GPS would cause a few deaths too. That said, it wouldn't be the first stupid thing governments and millitaries have done. I would much prefer to get my positining data from a variety of sources, not just a single millitary system, that way no one organisation could decide to pull the plug. Also, ESA aren't millitary, so using Gallileo would make me feel much happier.

      you don't really "jam" global satellite transmissions.

      Yes, you do

      What you do is remotely disable or degrade them at the source, which is what all this is about: who has the authority and ability to do just that.

      Despite NAVSTAR's ability to do selective availability, this has been turned off since 2000 (although only a fool would trust it could never be turned back on). Selective availability affects the whole GPS system, not just a localised area so the millitaries now favour localised jamming. Besides, it had got to the point where selective availability is next to useless over a large chunk of the planet because anyone who cares has access to DGPS or SBAS data which easilly corrects the artificial errors.

      The EU may have granted the United States the power to turn off Galileo

      That's not what I said - I said the EU had given into US demands and modified the system so it is easilly jammable. As far as I know (I damned well hope!) the US doesn't have the ability to actually control the service itself, just interfere with it in a localised area.

    4. Re:Nope by Zelea · · Score: 1

      Is anyone else thinking this "crack" surfaced because Israel (a country which is not even part of Europe) was a partner in the Galileo project? It's a known fact they are in bed with the americans and since USA didn't like so much the Galileo project ...

    5. Re:Nope by ScrewMaster · · Score: 1

      Yes, you do

      No, you don't. That's just short-range, line-of-sight jamming. Military jamming of enemy signals (or in this case, friendly signals that we just don't want the enemy to use) is a legitimate tactic used by militaries the world over. And that's not a problem from the standpoint of global dependence upon GPS. What we were discussing was the ability to jam the entire system, which is a tad more difficult.

      That's not what I said - I said the EU had given into US demands and modified the system so it is easilly jammable.

      Okay. But when you get right down to it, that is actually a reasonable request. Still, if our intelligence services are worth anything anymore I'll be we can turn off Galileo if we want, if it's really that big a deal.

      --
      The higher the technology, the sharper that two-edged sword.
    6. Re:Nope by FireFury03 · · Score: 1

      Still, if our intelligence services are worth anything anymore I'll be we can turn off Galileo if we want, if it's really that big a deal.

      At the end of the day, you just have to destroy the sats (this applies to GPS too). However, if the US decided to shutdown a system like Gallileo by force I suspect it would be considered an act of war. I doubt the US really wants to get into a shooting match with europe, not least because it would almost certainly lose (the US has pissed off so many people recently, if it started a war with europe, people like China would probably join the fight).

    7. Re:Nope by Anonymous Coward · · Score: 0

      I doubt the US really wants to get into a shooting match with europe, not least because it would almost certainly lose

      Get real. The US can easily defeat the EU, while the EU has no hope whatsoever to counteract. It would only take a very limited strike, executed with cruise missiles, to cripple Europe's economy and force it to surrender.

      And no, China would not enter the fray on the behalf of Europeans. Wars are fought for real interests, not on the basis of who pissed off who.

    8. Re:Nope by 49152 · · Score: 1

      Get real?

      If you consider shooting down european sattelites and threatning to cripple european economy "real options" then your mad as a hatter.

    9. Re:Nope by Anonymous Coward · · Score: 0

      Not half as mad as someone suggesting the EU can get into a shooting match with the US and hope to survive 8 minutes.

    10. Re:Nope by G+Morgan · · Score: 1

      It's not as if Britain has got its own Cruise missles and that the same rules would apply to the US as well as Europe. No that would just make your argument kind of irrelevant. It's not even as if a World War like that makes all current technology irrelevant very quickly.

      I'm not saying that Europe would definately win a war with the USA though. It's a posibility if it was EU as an entity directly against the USA simply due to numbers but I imagine in such circumstances at least the UK would end up either on the side of the US or at the very least remaining neutral.

      So united EU against USA. Difficult to call.

      Likely reality of half of EU tenatively vs USA. No chance.

      The only hope of a united Europe would be the end of the CAP (which will not happen any time soon). It's far too divisive and badly hurts the European economy (and the world economy, its just plain bad quite frankly).

      I think its all a bit of a non starter though. Without getting into wars a simple trade embargo between the EU and the USA would be extremely costly for both sides. We buy more from the US than we sell back so in the end the cost would mostly be on your end though.

    11. Re:Nope by 49152 · · Score: 1

      If you find it in any way meaningful to grade madness of this scale against each other and defend one against the other, then I can only feel sorry for you and your poor grasp on reality.

      But I suppose your unable to understand the irony of the poster starting his post with the words "Get real" and then lapse into raving lunacy.

    12. Re:Nope by Grouchysmurf · · Score: 1

      guys, There's a lot of conspiracy mongering and mininformation being spread around about Galileo and the GPS systems and how they work. Here's three links that should help address this: Here's the link to NIST's time and freq. group. http://tf.nist.gov/timefreq/index.html Here's the link to the United States Naval Observatory site, which oversee's the GPS system (with airspace commant). http://www.usno.navy.mil/ And here's the link to the link farm of the ESA, or rather to the EU's overall scientific administrative body. http://www.edpsciences.org/index.cfm?niv1=useful_l inks For specific information about the Galileo project, search "ESA" "Galileo" and Technical specifications... I posted more specific links on the difference between the Galileo and US GPS systems elsewhere on slashdot, in particular regarding the encryption schemes and hard science related to each systems operations. Galileo relies on the L1 carrier freq. used by the US GPS system, but this carrier freq. is "public", and "degraded" by definition (the C/A, or Coarse Acquisiton, signal). This is NOT proprietary to the EU's Galileo system, and it's dishonest for the EU to sell it as such commercially. The dual and multi-channel navcom services that the EU claims it wants to commercially exploit are not designed independently of the L1 carrier signal that the US system offers to everyone (conditionally). Please, just check the sites above. Thanks, Grouchy

      --
      "Entia non sunt multiplicanda praeter necessitatum"
  42. SkyDigital by Bizzeh · · Score: 0, Redundant

    Sky have a method that CAN be broke, but, they thought of that. to watch encrypted content (stuff you need to pay for to watch), your sky box requires a phoneline, where sky send new encryption codes every 3 mins, which your box uses to decode the info being sent to it via the satalite.

    so, when you break the encryption, and flash a homebrew sky card with the codes, they expire after a few mins anyway, and you need to do this all over again.

    1. Re:SkyDigital by Cederic · · Score: 1


      That's odd. I haven't had my SkyDigital decoder hooked up to a phone line for about 14 months.

      Wonder how my Sky Sports, Sky Movies, Prem Plus and Film Four channels manage to keep working, give the encryption keys changed 14 months (minus 3 minutes) ago.

    2. Re:SkyDigital by Anonymous Coward · · Score: 0


      haha it never fails to amaze me the bullshit some people believe (unless you work for sky in which case keep trying the FUD it aint working)

      my parents have never (> 3+years) connected their sky box to the phoneline and they still get all the movies, sports etc

      not everyone wants their box ringing unknown numbers in the middle of the night to upload who knows what (userdata, tracking info)

  43. For the glorious leader! by patio11 · · Score: 1

    This time that happy-sappy capitalist running dog doplhin gets it with our new Precision Guided Silkworm Missile! Take that, Flipper! Bwahahaha! -- Hey, its not any LESS crazy than what passes for the real North Korean government.

  44. Quantum encryption by mu22le · · Score: 1

    You might not be aware of that, but quantum encryption cannot be broken (as far as we know). Plus there is experimental evidence (can't find the darn article) that you can establish a secure link between a low orbit satelite and a ground based receiver.

    1. Re:Quantum encryption by utlemming · · Score: 1

      Except for that pesky Eve, that likes to do man in the middle. If the system allows for someone to step into the middle, then it can be compromised.

      --
      The views expressed are mine own and do not express the views of my employer.
    2. Re:Quantum encryption by ATinyMouse · · Score: 2, Interesting

      If the GP is talking about the same article I read, I believe it was covered in Discover Magazine a couple years ago. According to the article, a man in the middle attack would be discovered due to the attacker having to rebroadcast the transmission and not knowing which way to spin the atoms. The two ends of the connection would then have an error correction rate that may exceed a certain threshold and know that something is up.

    3. Re:Quantum encryption by Copid · · Score: 1

      The point with quantum encryption is not that it's a magic algorithm that can't be broken, but rather that you can set up a channel that you can guarantee that Eve has not snagged any data from, giving the users the ability to use an OTP system without distributing the OTP beforehand. Alice sends an OTP to Bob one bit at a time. Using bizarro quantum magic that is outside the scope of a /. post, Bob and Alice can tell if Eve has seen each bit. If the bit has not been seen, the Bob XORs it with a bit of the data he wants to send and sends the result back to Alice. At this point, Eve has no way of decrypting that bit because she never saw the key bit. Continue until the entire message is sent. If Eve ever starts snagging key bits, Bob and Alice will know.

      Anyway, the whole point of the system is that it's resistent to the MTM attack by relying on observer effects.

      --
      An interesting anagram of "BANACH TARSKI" is "BANACH TARSKI BANACH TARSKI"
    4. Re:Quantum encryption by mu22le · · Score: 1

      I do not think the grandparent knows it (s/he sounds like a troll to me) but quantum encryption let you build a secure channel (no evasdropper) but is weak aginst man-in-the-middle attacks when Mallory has Alice believe he is Bob and Bob believe Mallory is Alice.
      This problem could be solved in the same way you do with the classical encryption: exchange a fingerprint in real life in andavance :)

    5. Re:Quantum encryption by Grouchysmurf · · Score: 1

      Here's a link to a blog entry related to this subject at Michael Nielsen's blog. http://www.qinfo.org/people/nielsen/blog/?p=172 In the comment section I provided links to some useful sources, including a now next to impossible to dig up paper out of EEEL on smoothing the metrics on Ion Traps. Enjoy

      --
      "Entia non sunt multiplicanda praeter necessitatum"
  45. "Illegal ?- Who Makes Law by cannuck · · Score: 0

    As usual - don't know whether to laugh or cry - when I read here and elsewhere - about how easy it is for the self appointed rich elite to get laws they want passed in order to socially engineer "us" - to control "us".

    Naturally these controls - called laws- stifle the social/cultural development of people around the world. Former "gun slinger" Tom Delay got caught with his pants down bribing law makers for the elite in the USA. I am sure the elite are busy finding their next "gun slinger" - to keep the self appointed elite richer and happier.

    Now if laws created for the elite were useful and protected the small guy/girl who brilliantly devised a unique "something" and stopped the elite from stealing the unique "something" - then that would be wonderful (dream on).

    We all know that the World Cup is on today - have the refs been bought by the elite (like in Italy a couple of weeks ago)? We know the elite love stealing other's ideas - Jobs stole the icon driven desk top GUI from Xerox - and so on.>

  46. NATTFA by jefu · · Score: 1

    (Not According To The FA)

    The article says that the Cornell GPS group tried to get the information but failed, as did several other groups - so :

    they don't care if someone is getting it.
    does not seem to apply. Furthermore, there are other parts of the article that hint that the signal encryption used is indeed the definitive one.

    Now, as to the satellite/receiver firmware being updated - that is certainly always a possibility and nothing in the article contraindicates that.

    1. Re:NATTFA by i-neo · · Score: 1

      I mean it is useless because:
      - How useful is it to hack a test system ?
      - How useful is it to hack data that will be publicly available when the system will be functional ? If this is the real secondary secured data stream, prove it and I will be interested.
      - How useful is it to hack data that don't have any meaning (according to the article) ? However since there are not enough satellites I doubt it could be useful...

      That is what I meant. Thanks to the authors. You have great skill to hack a test system, and learn nothing more from it but it's weak encryption (afaik it is not an encryption but a synchronized communication protocol...) that will even be published ;) The worst is that they will probably get funds to continue their work because of the fuzz around that. I am just disappointed to see such a bad research article been slashdotted.

      Good marketing.

  47. Re:and North Korean rocket scientists appreciate t by feyhunde · · Score: 2, Insightful
    For a nuclear warhead, traditional GPS' 5m-accuracy should be quite sufficient. It's not like they'd be trying to avoid "collateral damage"

    In wartime the US can, will and does turn off the GPS in the warzone. Galilieo isn't under the same controls, and for that reason is popular with some governments for their guided weapons programs. Further, the civilian GPS receivers still have certain height and velocity restrictions artificially put in by the US to prevent guided missile uses. Only recently was an agreement made that would allow the US and EU to block signals in warzones without disabling the opposing system.

    --
    I'd say more, but my guild is raiding.
  48. Deep pocket by Lead+Butthead · · Score: 1
    According to Cornell's lawyers, the DMCA was not a concern because navigation data is not, and cannot be, copyrighted.
    It's not important that a suit has merit, it's only important that the defendant runs out of money before the plantiff.
    --
    ELOI, ELOI, LAMA SABACHTHANI!?
  49. Never Understood the Logic of Galileo by Aaron+M.+Renn · · Score: 1, Insightful

    I must confess I've never seen the logic of the Galileo system. This is so clearly about nothing but Euro-prestige, and it makes you wonder if the Europeans understand fundamental economics. Everything Galileo will do is done by GPS (which, btw, is not a generic name, though I'm sure the Euros would love it to be to confuse the marketplace) or will be done when planned upgrades are in place. Bogeyman scenarios of the US cutting off GPS are ridiculous as I'm not aware that the US military has ever shut off access even in Iraq - and the US military would jam Galileo if they wanted to in any case.

    The Europeans could have had a free ride at the US taxpayers expense. Instead, they decide to spend billions to build a competitor system. So how to recoup that? It's obvious that the EU will force all mobile phones, cars, planes, etc. sold in Europe to use Galileo. The free market would never adopt a new alternative that is not technically or functionally superior, is going against an entrenched competitor with a huge install base, and costs money where the alternative is free. So you can bet it will be regulated into existence and the huge fees everyone is forced to pay for this (hidden inside the price you pay for these devices, of course, just like VAT) will be touted as how "successful" the system is - as if adding a multi-billion tax on your citizens while everyone else pays nothing is a benefit of the system. Look for rules requiring Galileo on any aircraft which uses EU airspace, necessitating costly refits to the worldwide fleet of planes that already have GPS installed and other costly items that will actually be an economic drag.

    GPS is like an open source project or classic economic "public good". Galileo is a like a gratuitous fork. It's also the attempt to turn a public good into a private one by the use of new technologies like encryption/DRM.

    Building Galileo also ignores the law of comparative advantage. Why not focus at where you have the greatest comparative advantage over other people instead of fighting to replicate everything everyone could ever do? No one questions that the Europeans have the technical expertise and financial resources to build this project. The question is whether Galileo is the best use of those resources. Better to put them towards something that would be game changing, not a "me too". Why not use that to figure out how to make hydrogen fuel cells really work? Or build a space probe to do something no one has every done before. There are a million potential projects that Europe could do that would benefit humanity and turn them into an unquestioned economic or scientific leaders in varios area. Unfortunately, the EU seems to consistently want to do these type of me-too project instead, whether that be Galileo, the A380 or A400M, Jacques Chirac's new French search engine, etc. The playbook seems to be cloning someone else's ideas, making them slightly bigger and better, then touting them as the best thing since sliced bread. All of these can be successful in a nominal sense, but I question whether they were the best economic use of the resources.

    Europe has vast treasures of intellectual talent, largely top notch infrastructure (London transport excepted, thank you), awesome culture, high productivity, a mostly-common currency and open borders, and a history of great economic success. I've got to believe the ingrediants are there for a great boom - particularly with the influx of new Eastern European members - if the EU governments would just put the right policies in place to make it happen.

    Meanwhile, the US economy has grown by 20% since 2003 - adding $2.2 trillion in GDP. In other words, we just added an entire China to our economy in the last three years while also adding millions of new jobs. Considering the doom and gloom generally reported in the media, that's something to think about.

    1. Re:Never Understood the Logic of Galileo by PenGun · · Score: 1, Insightful

      It's very simple. They not trust the US. That is why they built their own.

          PenGun
        Do What Now ??? ... Standards and Practices !

    2. Re:Never Understood the Logic of Galileo by Anonymous Coward · · Score: 5, Informative

      It's obvious that the EU will force all mobile phones, cars, planes, etc. sold in Europe to use Galileo. The free market would never adopt a new alternative that is not technically or functionally superior, is going against an entrenched competitor with a huge install base, and costs money where the alternative is free.

      You need to check your assumptions.

      The EU doesn't mandate GPS/Galileo in anything. The US does.

      Galileo is functionally superior. The free precision will be better than with just GPS.

      There is no installed base in high precision applications because there is no product on the market. Only the US military has global high precision positioning.

      Galileo's normal precision code will be free, just as the base level precision of GPS is free.

      Galileo's high precision code will be available commercially, whereas the GPS high precision codes are not available to non-military users.

      me-too project [...] A380

      The A380 is not a me-too project. Americans only even know that name because it is a real threat to Boeing, who chose not to build a plane of that capacity. It's not someone else's plane, only slightly bigger, either. It's the continuation of Airbus engineering, which is very different from Boeing's.

      In other words, we just added an entire China

      Unfortunately for you, that "China" you added belongs to foreign investors.

    3. Re:Never Understood the Logic of Galileo by Anonymous Coward · · Score: 1

      the US economy has grown by 20% since 2003 - adding $2.2 trillion in GDP. In other words, we just added an entire China to our economy in the last three years while also adding millions of new jobs.

      You have done so at great cost to the environment, and using oil from states you don't have a frienly relationship with. Doing so you have done great harm to the world stability, something you have deemed could only be compensated by fighting a war.

      This cannot go on forever. You should stop and think about it.

    4. Re:Never Understood the Logic of Galileo by Concerned+Onlooker · · Score: 2, Insightful
      The free market would never adopt a new alternative that is not technically or functionally superior...

      I suppose a free market wouldn't, but it's hard to say, given how we don't really have a working model of a free market to study. Except perhaps the truly lawless places on the planet.

      And that GDP growth you're talking about? It's gone mostly to the people who are already wealthy. To the average American that statistic is a lie.

      Regarding job creation:

      • Private-sector jobs created by defense spending, 2001-2006: 1.5 million (Bureau of Labor Statistics)
      • Private-sector jobs created by other government spending, 2001-2006: 1.3 million (Department of Defense)
      • Private-sector jobs lost, 2001-2006: 1 million (Economic Policy Institute)
      So you see, the jobs created are actually just government spending, not "free market" economics.
      --
      http://www.rootstrikers.org/
    5. Re:Never Understood the Logic of Galileo by Anonymous Coward · · Score: 0

      ...whereas the GPS high precision codes are not available to non-military users.

      That hasn't been true since the Clinton administration.

      me-too project [...] A380

      The A380 is not a me-too project. Americans only even know that name because it is a real threat to Boeing

      Guffaw. Maybe if one of them is hijacked by terrorists and crashed into the 787 assembly building...

    6. Re:Never Understood the Logic of Galileo by Anonymous Coward · · Score: 0
      Guffaw. Maybe if one of them is hijacked by terrorists and crashed into the 787 assembly building...

      Bravo, AC. That was simply brilliant.

    7. Re:Never Understood the Logic of Galileo by Anonymous Coward · · Score: 0

      That hasn't been true since the Clinton administration.

      You're thinking of selective availability, which was an intentional (and not very effective) artifical degradation of the civilian code. Selective availability has indeed been disabled, but that still leaves an average error of several meters. Sub-meter precision is not available to non-military users.

    8. Re:Never Understood the Logic of Galileo by Anonymous Coward · · Score: 0

      The Europeans could have had a free ride at the US taxpayers expense.

      If things were the other way around, would eg. the US military happily rely on a service outside of their control in their critical operations, just because it's free?

    9. Re:Never Understood the Logic of Galileo by DrPepper · · Score: 2, Insightful

      Your comments are pretty much just troll, fortunately you only make a few points really:

      1. Galileo is not just a copy of the GPS system. It has higher precision than GPS and so opens up new applications that simply aren't possible at the moment. It also works better in some countries where GPS simply doesn't work very well. In fact the two systems will coexist, and future receivers are likely to support both which will give even better accuracy.

      2. The A380 isn't just a "me-too" project - there isn't a similar competitor in the world. Even Boeing admit that it falls into a different market segment than anything they have. However Boeing don't think it is a segment worth going after and have decided to put their resources elsewhere.

      3. The US economy may have grown 20% (I've not verified this), but so have other economies. IIRC China is growing faster than either the USA or Europe at the moment.

    10. Re:Never Understood the Logic of Galileo by Servo · · Score: 1

      I'm no fan of government spending... but those stats could be taken either way. That still accounts for 1.8 million net-new private sector jobs. To the average American, having net new jobs is an important detail. They don't think about the fact that jobs through government spending is coming out of the rest of America's pocket.

      --
      A slip of the foot you may soon recover, but a slip of the tongue you may never get over. -Benjamin Franklin
    11. Re:Never Understood the Logic of Galileo by Aaron+M.+Renn · · Score: 1

      1. Any differences in functionality between GPS and Galileo are really a post-hoc project justification. Do you honestly believe that the rationale behind Galileo was to improve reception in certain countries and to improve accuracy? I strongly doubt it. The statements of the European politicians who launched the project would not indicate that. Of course they will tout the advantage of their system. It's almost the nature of a me-too product to claim at least some functional or technical superiority. But that's not why Europe is building it. At the end of the day, the US had one, so Europe wanted one too.

      2. I will grant that the A380 is a much larger plane. The parallel here is that the decision to build the plane appeared to be based, like Galileo, largely on matters of pride and prestige, not marketplace demand. While I think the plane ultimately will do better than the current problems and sales levels would indicate, I don't think at the end of the day this will prove to be an economically wise investment versus alternatives.

      3. It's easier to get a faster percentage growth on a smaller base.

    12. Re:Never Understood the Logic of Galileo by Aaron+M.+Renn · · Score: 1

      This is the old self-sufficiency argument. There's no economic reason for self-sufficiency. It has to be justified on the basis of some external factor like national security. In that respect, nations do typically like to be self-sufficient in military matters. This is far more important for the United States than Europe, given the size and scope of the US military and the fact that, rightly or wrongly, the US military is frequently used.

      The reverse argument does not apply in the case of Galileo since that system is not for military use.

      I'm pleased to see, however, that the US military is starting to open up its procurement in non-strategic areas. For example, the US Army just signed a huge deal with Eurocopter and the new Marine One (the President's helicopter) will be Italian. The Eurocopter design is clearly the best on the market and I'm glad we're buying it. Similarly, I'm glad to see the Air Force refueling tanker bid being opened to Airbus. Given the disputes over subsidies on the commerical side, and the treatment of Pratt & Whitney during the A400M tender, I don't see Congress really allowing Airbus to win. That's a shame, but at least competition will keep the taxpayer's cost lower, and it is worth it to Airbus too to invest in the bid just to dry up some profits for Boeing. I sure hope that the US opens its defense market more and more to global bidders.

    13. Re:Never Understood the Logic of Galileo by DrPepper · · Score: 1

      1. The original idea for Galileo was to develop a system that wasn't controlled by one nation (the USA) and was commercially based. Remember Galileo started before the USA decided to drop SA, and even so SA could always come back. Of course there is some national pride at developing such a system - what community couldn't have pride in such a project?

      2. Airbus and Boeing worked together on the pre-A380 studies. Only Airbus decided to continue with the project though. Boeing have now decided to develop their own competitor aircraft - a case of American "me-too" perhaps? Airbus is already booked with orders for the A380 into the future, so the customers are definately there - despite recent project problems. And Boeing must be seeing demand from their customers too for that segment.

      3. I won't pretend to be an economist, so I won't comment on this - I don't think it's really relavent anyway.

    14. Re:Never Understood the Logic of Galileo by Oldav · · Score: 0

      Yep, the whole lot is in govenment deficit spending,to pay for illegal wars large scale kidnapping non citizens from other countries. All this fake growth will be paid for one day soon.

    15. Re:Never Understood the Logic of Galileo by malsdavis · · Score: 1

      Please, go visit a US Marine Corps Recuitment Center if you want to express your patriotism, it's a much better place than slashdot.

      If European nations wish to build spend a few bucks on a GPS satellite network than that's up to them really besides it'll cost them nothing compared to some of the mega bucks NASA has blown on many occasions.

      Anyway, competition is nearly always helpful for any industry!

    16. Re:Never Understood the Logic of Galileo by dfenstrate · · Score: 0, Offtopic
      The A380 is not a me-too project. Americans only even know that name because it is a real threat to Boeing, who chose not to build a plane of that capacity. It's not someone else's plane, only slightly bigger, either. It's the continuation of Airbus engineering, which is very different from Boeing's.


      If the A380 was a real threat to boeing, they'd be makin a similar sized aircraft too.
      From what I've read though, Boeing is doing just fine, especially since they have a better history of delivering.

      Some fun stuff about the A380!
      Airbus has asked the British government for a subsidy of almost $700 million to make the A350 wings in Wales, and it wanted an answer by the Paris Show, according to The Sunday Times of London. Airbus was threatening to make the wings elsewhere if it didn't get the money.


      Gee, I'm sure Boeing has had some tax breaks, but that's a pretty audacious demand, huh? $700 million dollars in direct subsidies?

      Airbus is in trouble, big trouble

      The much vaunted A380 is being plagued by engineering problems, is 5 to 10 tons over promised delivery weight, the break even point is now well over 250 units and may well reach 300.


      That was over a year ago, but that's pretty bad.

      Airbus' parent company lost more than a quarter of its market value as investors reacted swiftly and harshly to the news that the European jetmaker will pare back the delivery schedule for the superjumbo jet A-380.


      and

      There are signs of extreme discontent among the major customers for the A 380. Emirates of Dubai, which has by far the largest order, 45, has announced it will seek unspecified discussions with Airbus. If Emirates demands late-delivery penalties, these could run to hundreds of millions of dollars, as it cannot fly routes anticipated, or has to line up alternative capacity at higher costs. Such late delivery penalties are commonplace in contracts for new model airliners.


      That was three weeks ago

      Now, there have been a few snags with the production set up for the Boeing 787 dreamliner, but they could just be normal teething problems for a new product. They don't have the weight of the 380's problems... hehe 5-10 ton weight.

      But your pride in the A380.... could be misplaced.
      --
      Alcohol, Tobacco and Firearms should be the name of a store, not a government agency.
    17. Re:Never Understood the Logic of Galileo by Anonymous Coward · · Score: 0

      If the A380 was a real threat to boeing, they'd be makin a similar sized aircraft too.

      Planes like the A380 aren't things that the chief engineer cranks out in a week of overtime when management decides that they need one of those. Boeing and Airbus had and have differing expectations about future demand. Neither company has the resources to just do everything and throw away what doesn't sell, so the A380 is a real threat: If the expectations of Airbus are correct, then Boing has no plane to satisfy the demand. This has very little to do with engineering problems or delivery schedule deviations. Even if the 787 hits the market without a snag, it may simply not be the plane that customers want to buy. That's how the A380 is a threat to Boeing and that's also why the A380 is not a me-too project. Besides, we wouldn't hear quite as much trash-talking about the A380 from across the Atlantic if it weren't a significant development in airtravel.

      As far as pride in a plane is concerned: Regardless of any economic hiccups, if you have seen an A380 land or in overflight, it's hard not to appreciate what the engineers have done. Am I proud of the business side and the linkage between Airbus and politics? Not so much, but on the other hand I don't think Boeing is any better.

    18. Re:Never Understood the Logic of Galileo by Viol8 · · Score: 1

      "Guffaw. Maybe if one of them is hijacked by terrorists and crashed into the 787 assembly building..."

      Thats probably what Douglas thought when Boeing built the first 747. Funny how the DC10 had to be
      rushed out to compete.

    19. Re:Never Understood the Logic of Galileo by Arimus · · Score: 1

      On pont 1, actually coverage of some of the areas of the globe near the poles with Navstar (US GPS) is not briliant due to the orbit paths of the constellation. Galileo will offer a different orbital profile and so potentially (I don't know what the proposed orbits will be) will offer better capabilities in higher latitudes.

      --
      --- Users are like bacteria -> Each one causing a thousand tiny crises until the host finally gives up and dies.
  50. Re:Accuracy not critical with nukes on soft target by Jah-Wren+Ryel · · Score: 3, Insightful

    The assumption is that the North Korean government is sane.

    Lol! I was just going to post a joke about how we are suppossed to believe the standard demonization that our enemy is a "madman."

    I seriously doubt any government that systematically starves its own people to death over a few decades would have any trouble watching the same people die in a "glorious" fire.

    You should doubt it.

    Only in movies do insane people end up runnning countries. Letting the population starve is not a symptom of insanity - it is a symptom of a ruling class lacking accountability to the citizens.

    The North Koreans are not insane, they just have a different perspective than the one our news media feeds us. Were Bush and Rumsfeld insane because they ignored counsel from the pentagon about how securing Iraq would require 2x-3x more troops than they wanted to allocate? No, they just saw the facts differently - incorrect they were, but not insane.

    Same thing goes for North Korea's government. For example - they still consider themselves to be at war, no truce was ever signed - only an armistice which is just a little bit stronger than a "cease fire." To an American, 10,000 miles away, it sure seems like the korean war is over - but anyone who gets near the DMZ and sees the patrols on both sides (or has even just seen the movie Joint Security Area), it isn't so clear any more. North Korea has always felt like it needs to be prepared for an attack at any time and has thus kept its military at a full state of rediness.

    North Korea has made a lot of dumb decisions, but that doesn't mean they are insane any more than Bush's (mis)handling of the war in Iraq means he is insane.

    --
    When information is power, privacy is freedom.
  51. Re:Digital road tolling by cowboy76Spain · · Score: 1

    Sorry?

    We already have tolls in some highways. If the highway from city A to city B is 100 kms long, we do not need a satellite to tell us that a car that went from A to B has run from 100 kms... maybe in USA it is different, but here in Europe that ride would be always of 100kms.

    And as for a toll "for each kilometer a vehicle runs, in any road", we have taxes on gas for serve to mean a cost per kilometer/type of vehicle.

    --
    Why can't /. have a rich-text editor? Editing your own HTML is so XXth century.
  52. Re:Accuracy not critical with nukes on soft target by zulux · · Score: 1

    . Letting the population starve is not a symptom of insanity

    I guess you have a different definintion of sanity than I do.

    I understand your point - that the two Kim's of NK are really more ruthless than anything - but their actions lead one to not trust in them when it comes to sensabilities that you and I have.

    NK, IMHO will lob a nuke much more readilly than say china - even though China has killed millions more humans in the last 50 years. Russa as well - Stalin's purges killed 30 million or so, but there was a method to his madness that Kim lacks.

    --

    Moneyed corporations, non-working 'poor' and criminal prisoners are turning productive citizens into tax-slaves.

  53. Re:Accuracy not critical with nukes on soft target by Anonymous Coward · · Score: 0

    The North Koreans are not insane, they just have a different perspective than the one our news media feeds us.

    I don't know what you mean about "a different perspective than the one our news media feeds us." As just one example of this "different perspective," the people of North Korea are taught that pictures of traffic jams in South Korea are propaganda, and that there really aren't so many cars there. This is not a question our news media, it is a matter of easily verifiable reality.

  54. Re:Digital road tolling by b0s0z0ku · · Score: 1
    We already have tolls in some highways. If the highway from city A to city B is 100 kms long, we do not need a satellite to tell us that a car that went from A to B has run from 100 kms... maybe in USA it is different, but here in Europe that ride would be always of 100kms.

    And as for a toll "for each kilometer a vehicle runs, in any road", we have taxes on gas for serve to mean a cost per kilometer/type of vehicle.

    I'm aware of those objections to digital road tolling, and I agree with them. It doesn't mean that the government won't try to implement electronic tolling - government is always looking for new ways to take money from the people! Also, being able to track movements of cars (and, thus, people) is a nice side benefit.

    http://www.mapflow.com/press23-dto_armas.htm

    -b.

  55. Re:Accuracy not critical with nukes on soft target by DrSkwid · · Score: 1

    Us Brits, while we were the richest nation on earth, let 8 million of our citizens in Ireland starve to death over six years while exporting food from Ireland to mainland Britain and not that long ago (1845-1851)

    --
    There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
  56. Re:and North Korean rocket scientists appreciate t by meeotch · · Score: 1

    Even easier than that - all they need is to be able to predict where they are when they *stop* flying.

    Now if only there were some sort of System that could tell them the Position of those rockets, Globally.

    mitch

  57. As long as it can be remapped... by bigtrike · · Score: 1

    If the developers were smart, they would have developed a method to remap the coordinates in times of need, such as when a missile launch is detected. Using that, they could most likely divert any missiles which attempt to use global positioning technology for guidance.

    Sub-meter accuracy for a nuclear missile is quite pointless. Usually they are detonated far above the ground. Anything within a couple kilometers will have more or less the same effect. And since they are a deterrant, you don't even need that.

    In order for them to be effective, you only need your enemies to think that your missiles could be accurate to within a couple kilometers if they do something to provoke a launch.

    1. Re:As long as it can be remapped... by Akash · · Score: 0

      do you know how many ships and aircraft will divert off course if someone decides to change the gps mapping..
      thats not a viable option

    2. Re:As long as it can be remapped... by VENONA · · Score: 1

      "do you know how many ships and aircraft will divert off course"

      No, and neither do you. Nor is anyone likely to have better than a rough estimate of two far more important numbers: passengers in the air, and the percentage whose lives would actually be threatened by a short duration (boost phase only) remapping.

      "thats not a viable option"

      That would depend upon the number of launches, their intended targets, the ability of traffic control systems to intervene (get on the radio to pilots, essentially), the ability of pilots to sense (visually, or prove via other nav aids) that a sudden skew in GPS nav data might be something to ignore, and probably lots of other variables.

      Even one or two launches against large populations might easily make it worthwhile to remap, if the capability exists.

      --
      What you do with a computer does not constitute the whole of computing.
    3. Re:As long as it can be remapped... by Anonymous Coward · · Score: 0

      Planes and ships have people onboard tasked with navigation, and GPS is not allowed to be the sole source. Nobody should land a Cessna on an ice cream parlor just because the GPS says it is the runway location.

  58. shells and suitcases are very hard by r00t · · Score: 1

    Within a certain size range, making a uranium-powered nuke is quite easy.

    Artillery shells are not in that size range. It's damn difficult to get
    one to work. More likely, you'll just make one building mildly radioactive.

  59. You don't need 4. You just need time. by r00t · · Score: 1

    The satellite moves, as does the Earth. This gets you multiple positions, plus you get the Doppler effect.

    Get an atomic clock, sit still, and you'll have your position.

  60. Re:Digital road tolling by pe1chl · · Score: 1

    The answer is: when you go from city A to B via express highway there will be a different tariff than when going via secondary road, even though the endpoints of the route may be the same.
    To avoid having to have tollpoints or other forms of detection at every intersection (which was the original implementation idea) it is now considered to track the vehicle movement and base the toll on that.

    Of course it had privacy problems, in the past. That is why global terrorism is so convenient: it comes in to help as an excuse to track everyone's movement anyway, and some people even believe that this is a good idea. So it removes the privacy problem.

  61. some very illogical assumptions there! by r00t · · Score: 1
    "The EU doesn't mandate GPS/Galileo in anything. The US does."



    Duh. Galileo isn't built yet, and they wouldn't mandate a foreign GPS system. Soon enough, Galileo will be mandated. You'll see.


    "Galileo is functionally superior. The free precision will be better than with just GPS."


    Nope. It will be the same, because the free GPS signal will be upgraded in response. Don't imagine for a moment that the US will sit by while people become dependent on a system that is in foreign control. We will do whatever is required to ensure that you don't beat us, even if that means opening up the highest precision.


    I'm completely serious. The newer satellites have the ability to transmit some extra signals for this purpose, so that we can transmit the highest precision without risking the anti-jamming feature of having an encrypted signal.

    1. Re:some very illogical assumptions there! by Anonymous Coward · · Score: 0

      the free GPS signal will be upgraded in response

      Good. If it takes a competing system to make you upgrade GPS and provide high precision commercial service, then that's still a benefit of Galileo. Perhaps businesses will recognize that the US kept them on a short leash.

    2. Re:some very illogical assumptions there! by Trillian_1138 · · Score: 1
      Nope. It [US GPS] will be the same [precision as Galileo], because the free GPS signal will be upgraded in response. Don't imagine for a moment that the US will sit by while people become dependent on a system that is in foreign control. We will do whatever is required to ensure that you don't beat us, even if that means opening up the highest precision.
      Then doesn't that mean the EU system will have accomplished something? During a discussion a while ago about Google's "less-than-successfull" ventures (for some value of "success") someone noted that even if Yahoo and Hotmail still have more users than Google, Google's large inbox caused other free email providers to raise the size of their inbox. My mom uses Hotmail, but it's pretty clear that her inbox is 250MB (or whatever it is) rather than a measly 10 or 25 or whatever it used to be in a direct response to Google. Likewise, even if the US still uses the US GPS system, if that system is improved in response to Galileo's precision, how is that not a win for everyone?

      It also seems unfair for you to say "Galileo isn't built yet, and they wouldn't mandate a foreign GPS system. Soon enough, Galileo will be mandated. You'll see" but then say (in response to claims that Galileo will be functionally superior) "Nope. It will be the same, because the free GPS signal will be upgraded in response." So let me get this straight - we should judge Galileo to be inferior because it's not released yet but it might become mandated, but we shouldn't judge US GPS to be inferior because it "will be" improved to meet Galileo's (proposed) precision when Galileo is released. So in both cases, you're making a judgement based on something which hasn't happened yet...it seems like you've already made up you're mind that "If it's good enough for the US it should be good enough for the rest of the world."

      -Trillian
    3. Re:some very illogical assumptions there! by r00t · · Score: 1

      The EU system will have accomplished something: North Korea can aim better, even switching to cruise missles. Thanks guys. I know you're not in the neighborhood, so you'll never experience this benefit yourselves. How generous of you.

      I take Europe at it's word that Galileo will be exactly as good as claimed. I don't believe that it won't be mandated though.

      Since the US is already upgrading satellites (as the old ones fail) to allow enabling military-like accuracy for civilians, I'll not doubt that either. I suppose we won't enable the extra accuracy until Galileo is a real threat.

    4. Re:some very illogical assumptions there! by Trillian_1138 · · Score: 1
      The EU system will have accomplished something: North Korea can aim better, even switching to cruise missles.
      ....and terrorists can use email to communicate, child molesters can use public roads to pick up children for rape, and...um.....oh, right! communists can use public libraries to research different forms of government. (Phew - was almost afraid I'd run out of buzzword-fears).

      Forgive me for being a little over-the-top, I just don't like "someone could use this for EVIL so *no one* should use it" as an argument. As a side note, didn't we recently see how well N. Korea's long-rage weapons work?

      Look, there may be valid reasons to oppose the Galileo system, I just don't think I've heard any yet from this thread.

      -Trillian
    5. Re:some very illogical assumptions there! by Anonymous Coward · · Score: 0

      I'm not sure if you noticed this, but our countries have been the permanent hypothetical battleground of the cold war. You really don't need to tell us how it feels to be at the whim of two leaders with nuclear weapons.

      Unlike us, you can avert the threat, because you can turn your own GPS and our Galileo system off selectively. Thank you for not returning that favor. I hope you sleep well while your military makes some new "friends" all over the world.

    6. Re:some very illogical assumptions there! by topham · · Score: 1


      Considering the first cruise missiles did not use GPS for navigation it's an amusing argument anyway.

      Applying currently level of technology to the method used for navigation and targeting in World War II and I would bet you could readily get within a city block with a missile; without using GPS.
      North Korea could easily do such a thing if there were so inclined; besides, North Korea wants something slightly more sophisticated than terrorists do, but it isn't like a country like North Korea actually thinks they could take over the United States, or Japan, etc. They just need a saber to rattle that's load enough to be heard.

    7. Re:some very illogical assumptions there! by Anonymous Coward · · Score: 0

      It doesn't mean anything if you "open up the highest precision". Just because you have the capability to mess with the system is enough to make people shun away from GPS. You lost, sorry.

    8. Re:some very illogical assumptions there! by r00t · · Score: 1

      For owners of other systems, sure.

      Otherwise, pick your poison: Europe, Russia, USA

      The owner can always mess with things. Europe can certainly do that.

  62. Re:and North Korean rocket scientists appreciate t by wiredlogic · · Score: 1

    I think that North Korean rocket scienties are having a party today.

    At least the ones that didn't get executed.

    --
    I am becoming gerund, destroyer of verbs.
  63. Re:Digital road tolling by alphakappa · · Score: 2, Insightful

    The Euro-peons are thinking about using the Galileo system as part of an electronic road tolling scheme... So, bearing in mind the surveillance potential of such a scheme, I'd think the best way to "crack" one of the Galileo satellites would be an ASAT missile...

    Ohh, those silly Europeans... that kind of thing would never happen in the US!

    --
    "When the only tool you own is a hammer, every problem begins to resemble a nail." - Abraham Maslow (1908-1970)
  64. Interesting legal interpretation by CXI · · Score: 1

    This is really interesting. Will Cornell come and defend me in court if I get caught with a radar detector in a state where it's legal to own them but illegal to use them? After all, it's just telling me my position and speed relative to a police car!

    1. Re:Interesting legal interpretation by Anonymous Coward · · Score: 0

      what state is that? I was pretty sure they are legal everywhere except in Virginia and D.C. and in commercial trucks over 10000 pounds.

    2. Re:Interesting legal interpretation by YrWrstNtmr · · Score: 1

      Virginia. You can own, but not use.

  65. Their GPS World article is already on eDonkey P2P by Anonymous Coward · · Score: 0

    Here's the link:

    ed2k://|file|PSIAKI%2C_Mark_And_Al._-_Searching_fo r_Galileo_-_Reception_And_Analysis_Of_Signals_From _GIOVE-A_-_GPS_World_Jun_2006.cbz|2798050|3133A37D 5949B7A938083DBADFB7B684|/

    Cheers,

  66. Re:Digital road tolling by b0s0z0ku · · Score: 1
    Ohh, those silly Europeans... that kind of thing would never happen in the US!

    Except that the Europeans are already doing it on a mass scale, albeit with different technology (number plate recognition cameras). See: the London congestion charge. We may be 'testing' this system, and it's unlikely to fly now, since the gas tax provides an equally-good solution while encouraging the purchase of more efficient vehicles (there's a big outcry about Middle Eastern oil use and/or global warming on now). If gas tax revenues are lost, they can always the raise the gas tax over a period of years to "keep up with inflation."

    -b.

  67. Re:Accuracy not critical with nukes on soft target by Anonymous Coward · · Score: 0

    No, Kim Jong-Il likes the South Korean actresses too much. Also there's the matter of fallout.

  68. Minor correction by FhnuZoag · · Score: 1

    Correction - OTPs are unbreakable if the pads used are cryptographically random - i.e. there's no obvious structure in the original pad. If OTPs are generated naively, using, say, a standard computer Linear Congruential Generator, then they aren't very secure at all. (For Linear Generators, you can look at serial correlations that are violated, and hence figure out what changes have been applied to the pad.)

  69. Re:Accuracy not critical with nukes on soft target by Anonymous Coward · · Score: 0

    "Us Brits, while we were the richest nation on earth, let 8 million of our citizens in Ireland starve to death..."

    Why are people let onto the Web with only one brain cell? 8m was more than the total population of Ireland at that date. Check the Wiki and you will find that the most accepted figures for deaths are 700,000 to 800,000.

    You will also find that there was not much the authorities at the time could do, and what little there was, they did. Famines of this type were quite normal at the time. The Irish later expanded this episode into a legend to attack the English with, though they ignored a similar famine they had in 1740-41.

    http://en.wikipedia.org/wiki/Irish_Potato_Famine

  70. Great, this will work for the next... week? by Mr.+Freeman · · Score: 1

    Seriously, this is great work. But it's not like they can't just go and change the codes.

    --
    -1 disagree is not a modifier for a reason. -1 troll, flaimbait, redundant, overrated are NOT acceptable substitutes.
  71. Galileo doesn't... by Anonymous Coward · · Score: 0
    It has higher precision than GPS and so opens up new applications that simply aren't possible at the moment. It also works better in some countries where GPS simply doesn't work very well.

    I would like to point out that Galileo doesn't exist yet in a production system. It's just a test satellite. So it currently doesn't have higher accuracy and doesn't work better than GPS.

    And you can get centimeter accuracy with GPS as it is right now using DGPS and some very nifty tricks like using the clock of the military channels and correlating it with the normal channel to determine effects of the ionosphere.

    1. Re:Galileo doesn't... by DrPepper · · Score: 1

      Yes, Galileo is still in development. However there is no doubt that Galileo will have better accuracy than GPS - nobody in Europe, the US or anywhere else disputes that.

      DGPS requires additional stationary receivers in order to improve accuracy. It could be useful around airports and so on, but it's not practical to put them in everywhere across a continent.

    2. Re:Galileo doesn't... by Anonymous Coward · · Score: 0
      Yes, Galileo is still in development. However there is no doubt that Galileo will have better accuracy than GPS - nobody in Europe, the US or anywhere else disputes that.

      I'm sorry but that's an unsupportable statement. I seriously doubt that everyone has just thrown up their hands and admitted that the Galileo system is the best. To be sure, the planned accuracy of Galileo is certainly better than what is currently available from GPS. However, since the Galileo announcement, the US government has started replacing the old GPS satellites with newer versions that will add three new signals for enhanced accuracy. Replacement of GPS satellites is expected to be completed by 2012. The current estimate for completion of Galileo is 2010, which means that 2012 is a more realistic date, given the history of these types of European partnerships. The expected advantage with regards to accuracy that Galileo may have had over GPS is likely to be gone once the system is operational.

      DGPS requires additional stationary receivers in order to improve accuracy. It could be useful around airports and so on, but it's not practical to put them in everywhere across a continent.

      Not true. The WAAS system in the United States uses just 25 base stations and two additional satellites to cover the whole country as well as parts of Canada. That is not impractical at all for an accuracy of less than 3m.

  72. Re:and North Korean rocket scientists appreciate t by Marcos+Eliziario · · Score: 2, Insightful

    Basically, a dictatorship doesn't care too much about sub-meter precision for their bombs. If the miss a target and destroy a child hospital instead of a command center, they have no media to complain about it and make them risk loosing an election (which, by definition, are also non-existent or fake in a dictatorship) And for atom bombs, well.... Do you think it really makes a difference it you miss the target even for 1 or two kilometers. Of course we are not talking about the kind of atom bombs designed to blast underground bunkers, but also, in that case, the north-korean death doctors still have a lot of more pressing developments to acchieve before they have to care about sub-meter precision.

    --
    Your ad could be here!
  73. wouldn't this violate the DMCA? by Anonymous Coward · · Score: 0

    ummmm...isn't this as illegal as cracking DVD encryption? do they have good lawyers?

  74. Re:and North Korean rocket scientists appreciate t by Anonymous Coward · · Score: 0
    They have to learn to make them fly before they worry about where they land...

    Well, you keep laughing while they keep working on it.

  75. GALILEO is not GPS by EmbeddedJanitor · · Score: 1

    any more than a Ford is a Mercedes. Galileo is the name of the EU system. GPS is the name of the USA system. Both are examples of GNSS (Global Navigation Satellite Systems).

    --
    Engineering is the art of compromise.
  76. Re:Cracking Zonk by Anonymous Coward · · Score: 0

    Why the fuck did they encrypt a system that was entirely paid-for by European tax-payers? Fucking assholes.

  77. In Capitalist America... by woolio · · Score: 1

    Freedom of speech implies a freedom to read what you want.

    I would like to believe you, but I'm not sure about your statement. (IANAL)

    Also, the terms of the DMCA seem to suggest that even **talking** or **publishing** ways to read encrypted signals (for purposes of breaking copyprotection) is illegal (The importation of such technology is forbidden).

    Now if the owners of the european satellites can claim that the contents of their signals are protected by copyright, (and they seem to be charging a fee for some types of access), then I can see a good case for them using the US DMCA against the researchers.

    Although academic cryptology research is permitted under the DMCA, but I'm not sure if open publishing/disclosure of discovered methods to break it are permitted).

  78. Really?!?!?! by woolio · · Score: 1

    According to Cornell's lawyers, the DMCA was not a concern because navigation data is not, and cannot be, copyrighted.

    Whoa!

    Does this mean that the data files to Microsoft Streets and Trips can be published freely?

    Does this mean that online maps can be used without any type of license/permission from the "owner"?

    Yes, I understand I cannot copyright my mailing address. But what about a collection of addresses? What about a collection of addresses, and roads? what about a collection of addresses, roads, and landmarks? What about any of these collections displayed in graphical form?

    Look at the companise that exist solely by selling atlases. Their works aren't copyrighted? Whoohooo!

    1. Re:Really?!?!?! by afidel · · Score: 1

      In the US at least the dataset cannot be copyrighted because there is no artistic expression, it falls under the same general catagory as phone books. The maps themselves can be copyrighted if there is a degree of artistic expression, but for the majority of maps today that is not the case. Maps and datasets are usually covered by trade secret and licensing agreements. The SLA has some information available here.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
  79. what non-military use? by r00t · · Score: 2, Interesting

    I'm not seeing to many peaceful uses that aren't already covered by one of:

    a. standard GPS
    b. standard GPS plus a differential signal (good for airport approaches)
    c. carrier-phase (sub-centimeter but slow, for surveying)

    I'll grant that differential signals can make airports easy targets. :-)

    For what are you needing the combination of precision, accuracy, fast measurements, and a location that hasn't been set up with a differential transmitter?

    1. Re:what non-military use? by Trillian_1138 · · Score: 1
      For what are you needing the combination of precision, accuracy, fast measurements, and a location that hasn't been set up with a differential transmitter?

      For whatever the hell I want. Backpacking, driving, geocaching, exploring my neighborhood, seeing where I am with pin-point accuracy, fucking around with a Galileo receiver, whatever the hell I wan. See, you're asking the wrong question. The question is always "why shouldn't I be able to do X," not "why should we allow you to do X." I'll ask it again, why shouldn't people have access to that combination of features? Likewise, who are you to tell the EU not to launch satellites?

      I really don't buy "But North Korea might use the system for EEEEEEEEVIL!!!" There are lots of technologies that people could use for nefarious purposes, and if N.K. gets the tech to hit the US (or wherever) with missiles, the lack or use of pin-point positioning is only gonna mean they can hit the general area of LA or specifically hit the 'Hollywood' sign. Either way, LA is toast, and I'm still not convinced by your arguments against the necessity of Galileo. We've seen the US's willingness to shut off GPS to "the enemy." But what if 'the enemy' becomes members of the EU? Japan? US citizens?

      -Trillian
    2. Re:what non-military use? by r00t · · Score: 1
      "what if 'the enemy' becomes members of the EU?"


      Well, there is the incentive to not become an enemy. If regime change is required, there are two ways things could go:


      • We shut off public GPS. France surrenders. We turn public GPS back on.
      • We destroy Galileo. France surrenders. You need to buy GPS equipment.


      Which is cheaper for you?

    3. Re:what non-military use? by Jesus_666 · · Score: 1

      Probably the latter one, because we get a spiffy new GPS sattelite network. Teke a look at what would probably happen:

      Scenario 1 (no Galileo): You shut off NAVSTAR. Economies everywhere bomb as all businesses reliant on NAVSTAR take huge losses. As a result the rest of the world will demand NAVSTAR to be put under UN control. You lose lots of money and NAVSTAR.
      Scenario 2 (Galileo in place): You shut off NAVSTAR and attempt to jam Galileo. Europe overrides your Galileo access. Businesses reliant on NAVSTAR bomb, ones reliant on Galileo take minor hits. You lose a lot of goodwill and money. Scenario 3 (Galileo in place): You destroy Galileo. Europe shuts down trade with the USA and demands compensation (probably including parts of NAVSTAR). Countries like Russia and China probably support Europe, being affected as well. Since most of the world is against you they can just put trade sanctions on you until you're broke and have to take whichever demands they make. You lose a lot of money, any kind of goodwill left and possibly NAVSTAR.

      Twenty years ago the USA were in a position where they could get away with most everything. Nowadays, as Europe and China are approaching superpowerdom, they aren't. Posing with nukes doesn't exactly work when the potential opponents are numerous (Russia, Korea, India, UK, France, Germany thinking about getting nukes...) and regular warfare is slow enough that the economic backlash would hit before the war can take off.
      The USA can enter a pissing contest with the EU, but they wouldn't win. A military approach could yield world war sized trouble (and probably mass demonstrations of people demanding that the current administration resigns) and economical warfare is difficult when your opponent has the bigger economy.



      BTW, scenario 4: The USA shoot down Galileo. France gets pissed and nukes Washington, DC. "It's Christmas at Ground Zero" record sales skyrocket all over the world.

      --
      USE HOT GRITS WITH STATUE OF NATALIE PORTMAN (NAKED AND PETRIFIED)
    4. Re:what non-military use? by r00t · · Score: 1

      NAVSTAR can be shut down and/or distorted regionally now. So we could make locations in Europe appear to wobble a few hundred meters away from reality while leaving the rest of the world unaffected.

    5. Re:what non-military use? by Jesus_666 · · Score: 1

      That would still cost you the friends you have left in Europe (maybe even the sycophants in London). I once again point out that pissing off an important market that's bigger than you is unwise.

      --
      USE HOT GRITS WITH STATUE OF NATALIE PORTMAN (NAKED AND PETRIFIED)
  80. Re:uncrackable encryption:This is laughable by WhatDoIKnow · · Score: 1

    C'mon, tell us how you REALLY feel! :wq

  81. Just Three sats needed ... by everphilski · · Score: 1

    Three satellites form a plane. Your location will be one solution to the problem, the second solution will be a point mirrored across the plane formed by the three satellites. You can throw the ridiculous solution out.

    1. Re:Just Three sats needed ... by HuguesT · · Score: 1

      Given that you want a full 3D solution, there may not be a ridiculus solution. GPS doesn't assume you are on the surface of the Earth.

  82. Re:Cracking Zonk by dafing · · Score: 1

    Agreed! Couldnt the "hackers" have spent time doing something worthwhile?

    --
    --- ...or a new slashdot signature. Dear aunt, let's set so double the killer delete select all
  83. batteries look great, where do I get the rest? by freaker_TuC · · Score: 1

    Those batteries look great, where do I get the rest ? ;)

    --
    --- I am known for the ones who want to find me on the net. Is that a privacy risk or a privilege? One might wonder..
  84. Agreed... by Goonie · · Score: 1

    North Korea is trying to deter others from attacking it. To deter that, it wants a credible threat that unnacceptable destruction will result from such an attack. Killing a few hundred thousand Koreans, Japanese, or Americans counts as unacceptable destruction. Hence, no attack will occur, and the missiles stay in their storage facilities.

    --

    Any sufficiently advanced technology is indistinguishable from a rigged demo
    --Andy Finkel (J. Klass?)
  85. Why is this ok? by bgog · · Score: 1

    Why is this ok? Is Cornell in the pirate game now. Will they hit the pesky DirectTV encryption next and provide us all with free tv? I'm not usually one to call foul but did it ever occur to them that the people who spent many many many millions of dollars to put the damn sats up there have the right to encrypt the signal? Doesn't Cornell have something more useful to do? Like say invent something?

  86. Hmm. DirecTV by sjf · · Score: 1

    "Imagine someone builds a lighthouse," argued Psiaki. "And I've gone by and see how often the light flashes and measured where the coordinates are. Can the owner charge me a licensing fee for looking at the light? ... No. How is looking at the Galileo satellite any different?"

    If DirecTV have the gall to flood my rooftop with radio waves, how can it be illegal for me to decrypt them ?

  87. how many Satellite navigation systems are needed? by BlueWire · · Score: 1

    Over on wikipedia's Satellite navigation system page I find it amusing that in addition to the current world super powers - France is working on their own global navigation system. Only it appears to work in reverse (terrestrial emitters and space based receivers) - interpret this how you will.

    --
    Yes, but whats that got to do with the price of tea in D'ni?
  88. Solution....A Soundtrack... by Dareth · · Score: 1

    They just need to include a sound track of Top 10 hits on the UK Pop Charts in the signal...

    Then you can't hack the signal because it has copyright info!

    Genius. Just like the laws that ban bayonets and underbarrel cleaing rods on semi-auto guns.

    --

    I only look human.
    My mother is a halfling and my dad is an ogre, so that makes me an Ogreling
  89. Justification for hacking any encrypted signal by JustNiz · · Score: 1

    from TFA : "Imagine someone builds a lighthouse," argued Psiaki. "And I've gone by and see how often the light flashes and measured where the coordinates are. Can the owner charge me a licensing fee for looking at the light? ... No. How is looking at the Galileo satellite any different?"

    So .. this is also justification also for decoding any signal in the eloctromagnetic spectrum, such as pay-per-view etc.

  90. Re:Accuracy not critical with nukes on soft target by DrSkwid · · Score: 1

    damn, looking at my source again it is "a million", I read it as "8 million"

    > You will also find that there was not much the authorities at the time could do, and what little there was, they did.

    This, though, is not true according to historian Simon Schama. The richesr nation on earth could easily have stepped in but decided the free market should solve issue.

    --
    There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
  91. Maybe Other Uses Now? by LifesABeach · · Score: 1

    Maybe other uses could be GPS enabled cars, and cargo trucks? The usefulness of the GPS enabled auto could be used to reduce the traffic, and the cost of shipping.

    And yaaaa, this could be used unwisely to, but so can a rubber band.

  92. As opposed to the psycho US country by themusicgod1 · · Score: 2, Insightful

    Where they just ban rave music, send swat teams to raves, try to ban all forms of live electronic music(including rock and roll) in florida, assault marching bands, consider heavy metal (along with most punk and industrial music) as 'satan worshiping' music fit for blacklisting, keep european musicians from being able to enter the country, and choosing the wrong media to listen to music through as a music fan can get you sued into the gutter. You are left with music in america, it's true, and you can say 'well, those kinds of music are illegal there for a purpose' to any of the above, I suppose, but that would be hypocritical.

    --
    GENERATION 26: The first time you see this, copy it into your sig on any forum and add 1 to the generation.
  93. Re:Accuracy not critical with nukes on soft target by Alsee · · Score: 1

    North Korea has made a lot of dumb decisions, but that doesn't mean they are insane any more than Bush's (mis)handling of the war in Iraq means he is insane.

    Oh god... arguing that Kim Jong-il is no more insane than Bush. I don't know whether to laugh or cry.

    -

    --
    - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  94. Re:Accuracy not critical with nukes on soft target by Jah-Wren+Ryel · · Score: 1

    Oh god... arguing that Kim Jong-il is no more insane than Bush. I don't know whether to laugh or cry.

    There are striking similarities. Both are the sons of privilege and former rulers of their respective countries. Both were massively irresponsible party animals in their youth. Both go to extremes to demonize the other to their citizens. Neither get as much respect as their fathers did when they had the same job. Both use highly inflated threats of attacks from outside to justify most of their policies. Both have been buddy-buddy with Pakistan in order to achieve their own objectives. But there are a few differences too. Only one has ever invaded even just one country. Only one pretends to represent the will of the common man. Only one of them takes personal direction from God.

    --
    When information is power, privacy is freedom.