Ilka Schröder, member of the European Parliament, sued "Unknown" against Echolon today (modnay 10:00 local time) at the federal high court, and locally in Traunstein and Berlin.
The suit is directed against "unknown suspects fom USA, UK and possibly the german federal government because of operation and/or operation of the espionage system ECHELON".
The lawsuit is based on reports by Duncan Campbell and reports in Telepolis [yabHuj: a german magazine, see e.g. http://www.heise.de/tp/de uts ch/special/ech/6998/1.html]. The juristic lever is the federal states attourney (Generalbundesanwalt) because he is responsible for pursuing certain cases of violations against patent and semiconductor laws [yabHuj: read: industry espionage]. Schröder suspects in her suit (of which Telepolis has a copy) that
vermutet in ihrer Strafanzeige, die Telepolis vorliegt, dass "these regulations are violated by the industry espionage described".
As Schröder said this morning, she wants to haul the discussion about Echelon onto a different political level. Since last week there are inquiries by a nonpermanent committee of the European Parliament which are "way too unfocussed". (Christiane Schulzki-Haddouti)
I guess his camera only supports storage PCMCIA media - I never heard of a camera having several network file system (CIFS=SMB/NFS) builtin. But a nice idea though.
I doubt a DigitalVideo camera will have sufficient resolution - another good idea for taking a massive number of pictures.
IBM has a harddisc in PCMCIA-3 format with 340MB memory - sufficient for at least 50 of your pictures. Maybe that might be an option for you? Advantage over an SCSI solution: the camera can be used in the very normal way without cabling.
If you opt for an SCSI solution, you might want to try the functionality (in a lab) on a simple single SCSI harddisc first. If you like the solution/handling, you might want to have a look at the IDE->SCSI RAID controllers for price/storage optimum.
I guess you should mount the SCSI stuff into a vibration-insulating case for use in a helicopter. Maybe you will be able to find some of the 19" cases sold in musicians' stores suitable for your cause.
A builtin power supply (UPS) is optional. And as you have to have a cable running to your camera, you might want to put additional batteries into the RAID case with the power supply chord running parallel to the SCSI cable to your camera.
Common problem (Re:Has anyone made 2.5 Install?)
on
OpenBSD 2.6 released
·
· Score: 1
If the older PC (like mine) has installed an Adaptec 1542 and a Soundcard (SB compat.) then the system will hang during probing as IO address 300 is default for both cards.
It might be a good idea to start with a completely "stripped" PC - only with video card and HD controller.
Logfiles - especially httpd or firewall logs - are extremely compressable - expect them to shrink with factor 20 or better.
We build weekly statistics from the (new) logs before we archive them on CD-Rs (2 CDs full of compressed logs per week, *sigh*). The weekly statistics are published on our intranet sever for reference.
The stats are built with analog and some highly optimized, specialized programs (dumb but fast: ~10MB thruput/second). I could publish them if you are interested.
...is not a problem if you can cope with thext/command line only interface. All you need is tar (GNU version), mkisofs, cdrecord, and 700 MB free hard disc space.
As I currently do not have access to my backup PC I only can give a rough outline of the two scripts that have to be made (here I assume you want to backup/home and have 700MB free on/tmp (and an empty/tmp/CD directory). You only call the CDBACKUP script.
While it is not as difficult to scan a computer ("tempest" style), it is not that difficult to shield a computer.
LCDs / laptop displays are a first step to reducing possibly compromising signals. LCDs work with a much lower signal level than CRTs (thus lower emissions) - but while they are harder to scan LCDs it still is possible.
The only way to prevent emissions is to shield the computer. L0pht had pictures of a do-it-yourself shielded computer about a year ago, but I was not able to find it again (shielded too well, eh?). While the CRT is the foremost target for shielding (because its emission levels are the highest), one has to shield all and everything.
Shielding with metal enclosure AND mu-metal (for magnetic shielding): CRT, CPU box, printer, modem.
Shielding with metal enclosure should be enough: keyboard + mouse - a trackball might be better because of heavy/stiff shielded cables, connecting cables (any - video, printer, serial, network).
A big no-no are radio keyboards or mice - or wireless LAN. The reason should be obvious.
Not that obvious are "leaks". Do not forget to cover floppy + CD-rom doors with a radiation lock (at least a proper door) - and build radiation locks / traps / grids for ventilation in- and outputs.
Practical side-effect of a highly shielded PC: it mutes (compromising) radiation as well as (ventilation/hard disc) noise. A good workstation is quiet - in both, EMF and noise emissions.
I'm more familiar with European trademark law than with the US - but I think the basics are similar.
Trademarks only protect the exact name/phrase as it was registered. Even small variations (see Wenger/Victorinox with their "original swiss army knife" vs. "genuine swiss army knife" are enough to distinguish. In German language: "Das Original" vs. "Das Echte" - I'd translate both to "original"...) .
Only if it becomes obvious that the new challenger only tries to jump on the successful one's bandwagon and starts plagiarizing the product of the other, then there is a slight chance of cancelling the newcomer's business.
And as qepasa.com and whatshappening.com have quite different sites (as well in look/feel as in contents) I do not see chances for WhatsHappening to win the cause.
There are converters between digital coax (S/PDIF) and optical digital (TOSlink). Ask you local music(ian) equipment store - not the HiFi shop, but the one where you can get e-guitars, synthesizers and professional recording.
The only one which comes to mind (caution: I have no personal experience with digital cabeling myself) is the "Midiman CO3" (http://www.midiman.com/new.htm) which converts all digital audio (AES/EBU, S/PDIF Coax and TOSlink - any sampling rate) to any output (~) incl. setting/deleting SCMS bits - maybe overkill for your application and with about $250 (US) not the cheapest, but to give you an impression of the "high end" solution.
Put a simple, cubic stand/drawer box into the corner as monitor stand and place a table in front of it (blocking access to the stand/drawer box) for your keyboard etc. Then you have plenty of space on your table, hidden all the cabling (behind the desk) and a good distance to your monitor.
There are commercial solutions as "corner desks". Maybe you might want to try one of these...
If you have too much money, you might want to have a look at this quite representative PC workstation(http://www.poetictech.com/)...
All use AAA alkaline cells (maybe accumulators?) - standard battery use is a Good Thing (tm). They are designed for easy use of plug-on modules (cell modem, GPS receiver, MP3 player, etc.)
The interesting questions are: will it be compatible to the 3Com - so the 3Com applications can run? Will there be support for programmers (like with the 3Com)? Support for Linux? As for the websites cited:
The trick with the Dodo was: it could not fly, and was (AFAIK) a lousy runner and even worse swimmer. There were no natural predators on that island, so the Dodo bird had no need to develop effective fugitive systems.
Prepare a linux box with drivers (or driver modules) for all your PC you need. Then dump the full HD image to a file (dd if=/dev/hda of=/tmp/hdimage.raw...) and burn that onto a CD.
Prepare a Linux bootdisk which can provide you with an ISO9660 (=CD) filesystem.
Boot the PC with the Linux bootdisk, mount the CD and copy the image file back to the harddisc.
That's all. (Disclaimer: copying the image from CD to harddisc will destroy all and any data that was on that PC)
If I remember correctly, the 470 is one of the very first SPARC servers? That might be a problem, don't know. It is not explicitly on the "compatible" list, you see? (sun4: 4/100, 4/200, and 4/300// sun4c: SS1, SS1+, IPC, SLC, SS2, IPX, and ELC// sun4m: at least the LC, LX, 4, 5, 10, 20, and 600MP)
Do firewalling - and deny every incoming packet which has no ACK bit set (i.e. "answer" packets). So noone can access your server/network. You may have to drill some holes in the high port range for FTP, though...
Log all failures - and you have all "sniffing" attempts logged. It is that simple...;-)
The main advantage of employees: they will still be there after the project went into productive status. And that's when the first serious problems pop up - usually after a few weeks.
We quite often had problems with projects by temporary contractors: the project finnished right on (or slightly over) time - somehow. Then the contractors went away - and administration had to cope with the problems.
So an employee approach adds security and reliability - for the employed (safe job) as for the employer (safe resources).
smkndrkn wrote: >ipmasqadm autofw -A -r tcp 6112 6112 -h 192.168.1.2 >ipmasqadm autofw -A -r udp 6112 6112 -h 192.168.1.2
I do not know the AUTOFW feature, so maybe the following part is obsolete: always remember that you do not only have to get out, the answer has to get back in, too.
If Battle.Net only uses UDP, chances are good, that the channel back is UDP port 6112, too. If TCP is used, chances are good, that TCP ports 1024-65535 are used.
I read from the article (e.g. the Postscript version of the original article on LANL), that this protocol can only be used to secure real time communications only.
The protocol cannot be used for email or file encryption. With this protocol one can only make sure, that the line you are currently using is secure.
As timing is a critical of the security mechanism, standard internet with nondeterministic transmission times does not qualify for this protocol.
Nonetheless an interesting article (and as "smooth" to read as any other scientific article).
#define rant_mode A classic case of hearsay (=RTFM failure) and media hype. #undef rant_mode
It's not just the sun that faded - nearly all links did that had to do with the solar eclipse went down starting this morning about 09:30 MESZ (=GMT/UTC+2h) - eclipse here around 12:40. Especially webcam sites were unreachable.
As I operate our gateway systems I was able to see (average) traffic requests jump to more than 180% of normal usage - driving our line deeply into saturation...
Interesting that THAT does not show up on other pages except on the "Acessoires" page. There you will be able to order the HDI-30 SCSI interface like on my old Powerbook 180. Cut-copy-paste leftover garbage from old powerbook pages or correct information?
Well, I'll stick with my old Powerbook for a while, I think. Good enough for typing texts anyway. For power work I have my tower...
SuSe's Linux always came with smooth, simple yet powerful installation routines - and good documentation (even back in 199(4?)).
The distributions I tried (well, some years ago) were well suited for beginners, but not for the more advanced user, with "hacker" documentation and optional modules missing there and where (or in... unusuable places) - ever configured sendmail.cf (nearly) from scratch (NO example file available)?
SuSe was the first distribution easily available on CD in Germany - and the first company offering professional support since Linux 0.99.x. See, my first linux CD was a SuSe with kernel 1.0.9
In case someone asks: now I use (and prefer) Debian, but I intend to try OpenBSD soon.
Slashdot Mirror
Echelon: sueing unknown
Ilka Schröder, member of the European Parliament, sued "Unknown" against Echolon today (modnay 10:00 local time) at the federal high court, and locally in Traunstein and Berlin.
The suit is directed against "unknown suspects fom USA, UK and possibly the german federal government because of operation and/or operation of the espionage system ECHELON".
The lawsuit is based on reports by Duncan Campbell and reports in Telepolis [yabHuj: a german magazine, see e.g. http://www.heise.de/tp/de uts ch/special/ech/6998/1.html]. The juristic lever is the federal states attourney (Generalbundesanwalt) because he is responsible for pursuing certain cases of violations against patent and semiconductor laws [yabHuj: read: industry espionage]. Schröder suspects in her suit (of which Telepolis has a copy) that
vermutet in ihrer Strafanzeige, die Telepolis vorliegt, dass "these regulations are violated by the industry espionage described".
As Schröder said this morning, she wants to haul the discussion about Echelon onto a different political level. Since last week there are inquiries by a nonpermanent committee of the European Parliament which are "way too unfocussed". (Christiane Schulzki-Haddouti)
I guess his camera only supports storage PCMCIA media - I never heard of a camera having several network file system (CIFS=SMB/NFS) builtin. But a nice idea though.
I doubt a DigitalVideo camera will have sufficient resolution - another good idea for taking a massive number of pictures.
IBM has a harddisc in PCMCIA-3 format with 340MB memory - sufficient for at least 50 of your pictures. Maybe that might be an option for you? Advantage over an SCSI solution: the camera can be used in the very normal way without cabling.
If you opt for an SCSI solution, you might want to try the functionality (in a lab) on a simple single SCSI harddisc first. If you like the solution/handling, you might want to have a look at the IDE->SCSI RAID controllers for price/storage optimum.
I guess you should mount the SCSI stuff into a vibration-insulating case for use in a helicopter. Maybe you will be able to find some of the 19" cases sold in musicians' stores suitable for your cause.
A builtin power supply (UPS) is optional. And as you have to have a cable running to your camera, you might want to put additional batteries into the RAID case with the power supply chord running parallel to the SCSI cable to your camera.
If the older PC (like mine) has installed an Adaptec 1542 and a Soundcard (SB compat.) then the system will hang during probing as IO address 300 is default for both cards.
It might be a good idea to start with a completely "stripped" PC - only with video card and HD controller.
Logfiles - especially httpd or firewall logs - are extremely compressable - expect them to shrink with factor 20 or better.
We build weekly statistics from the (new) logs before we archive them on CD-Rs (2 CDs full of compressed logs per week, *sigh*). The weekly statistics are published on our intranet sever for reference.
The stats are built with analog and some highly optimized, specialized programs (dumb but fast: ~10MB thruput/second). I could publish them if you are interested.
...is not a problem if you can cope with thext/command line only interface. All you need is tar (GNU version), mkisofs, cdrecord, and 700 MB free hard disc space.
/home and have 700MB free on /tmp (and an empty /tmp/CD directory). You only call the CDBACKUP script.
/tmp/CD/backup.tar \
/home
/tmp/CD
As I currently do not have access to my backup PC I only can give a rough outline of the two scripts that have to be made (here I assume you want to backup
#!/bin/sh
#-----------CDBACKUP------------------
tar cvf
--multi-volume \
--tape-size=610MB \
--new-volume-script=CDBACKUP.BURN \
CDBACKUP.BURN
#!/bin/sh
#------------CDBACKUP.BURN-------------
# ! please adapt properly to your setting !
cd
mkisofs | cdrecord dev=0,5,0 -
rm backup.tar
While it is not as difficult to scan a computer ("tempest" style), it is not that difficult to shield a computer.
LCDs / laptop displays are a first step to reducing possibly compromising signals. LCDs work with a much lower signal level than CRTs (thus lower emissions) - but while they are harder to scan LCDs it still is possible.
The only way to prevent emissions is to shield the computer. L0pht had pictures of a do-it-yourself shielded computer about a year ago, but I was not able to find it again (shielded too well, eh?). While the CRT is the foremost target for shielding (because its emission levels are the highest), one has to shield all and everything.
Shielding with metal enclosure AND mu-metal (for magnetic shielding): CRT, CPU box, printer, modem.
Shielding with metal enclosure should be enough: keyboard + mouse - a trackball might be better because of heavy/stiff shielded cables,
connecting cables (any - video, printer, serial, network).
A big no-no are radio keyboards or mice - or wireless LAN. The reason should be obvious.
Not that obvious are "leaks". Do not forget to cover floppy + CD-rom doors with a radiation lock (at least a proper door) - and build radiation locks / traps / grids for ventilation in- and outputs.
Practical side-effect of a highly shielded PC: it mutes (compromising) radiation as well as (ventilation/hard disc) noise. A good workstation is quiet - in both, EMF and noise emissions.
I'm more familiar with European trademark law than with the US - but I think the basics are similar.
Trademarks only protect the exact name/phrase as it was registered. Even small variations (see Wenger/Victorinox with their "original swiss army knife" vs. "genuine swiss army knife" are enough to distinguish. In German language: "Das Original" vs. "Das Echte" - I'd translate both to "original"...) .
Only if it becomes obvious that the new challenger only tries to jump on the successful one's bandwagon and starts plagiarizing the product of the other, then there is a slight chance of cancelling the newcomer's business.
And as qepasa.com and whatshappening.com have quite different sites (as well in look/feel as in contents) I do not see chances for WhatsHappening to win the cause.
There are converters between digital coax (S/PDIF) and optical digital (TOSlink). Ask you local music(ian) equipment store - not the HiFi shop, but the one where you can get e-guitars, synthesizers and professional recording.
The only one which comes to mind (caution: I have no personal experience with digital cabeling myself) is the "Midiman CO3" (http://www.midiman.com/new.htm) which converts all digital audio (AES/EBU, S/PDIF Coax and TOSlink - any sampling rate) to any output (~) incl. setting/deleting SCMS bits - maybe overkill for your application and with about $250 (US) not the cheapest, but to give you an impression of the "high end" solution.
I can recommend using a rooms corner.
Put a simple, cubic stand/drawer box into the corner as monitor stand and place a table in front of it (blocking access to the stand/drawer box) for your keyboard etc. Then you have plenty of space on your table, hidden all the cabling (behind the desk) and a good distance to your monitor.
There are commercial solutions as "corner desks". Maybe you might want to try one of these...
If you have too much money, you might want to have a look at this quite representative PC workstation(http://www.poetictech.com/)...
oops - it is http://www.handspring.com/
Visor Solo $149 - no craddle, no syncing
Visor $179 - 2MB, craddle, etc.
Visor Deluxe $249 - 8 MB, craddle, etc.
All use AAA alkaline cells (maybe accumulators?) - standard battery use is a Good Thing (tm). They are designed for easy use of plug-on modules (cell modem, GPS receiver, MP3 player, etc.)
The interesting questions are: will it be compatible to the 3Com - so the 3Com applications can run? Will there be support for programmers (like with the 3Com)? Support for Linux? As for the websites cited:
The trick with the Dodo was: it could not fly, and was (AFAIK) a lousy runner and even worse swimmer. There were no natural predators on that island, so the Dodo bird had no need to develop effective fugitive systems.
So hunting that bird was VERY easy.
Prepare a linux box with drivers (or driver modules) for all your PC you need. Then dump the full HD image to a file (dd if=/dev/hda of=/tmp/hdimage.raw ...) and burn that onto a CD.
Prepare a Linux bootdisk which can provide you with an ISO9660 (=CD) filesystem.
Boot the PC with the Linux bootdisk, mount the CD and copy the image file back to the harddisc.
That's all. (Disclaimer: copying the image from CD to harddisc will destroy all and any data that was on that PC)
If I remember correctly, the 470 is one of the very first SPARC servers? That might be a problem, don't know. It is not explicitly on the "compatible" list, you see? (sun4: 4/100, 4/200, and 4/300 // sun4c: SS1, SS1+, IPC, SLC, SS2, IPX, and ELC // sun4m: at least the LC, LX, 4, 5, 10, 20, and 600MP)
You can find hints for the installation of the Debian port of Linux for Sparc at:
http://www.debian.org/releases/s link/sparc/install
But you could try OpenBSD, too (http://www.openbsd.org/sparc.html) or NetBSD (http://www.netbsd.org/Ports/sparc/inde x.html) as operating system for your box.
Do firewalling - and deny every incoming packet which has no ACK bit set (i.e. "answer" packets).
;-)
So noone can access your server/network. You may have to drill some holes in the high port range for FTP, though...
Log all failures - and you have all "sniffing" attempts logged. It is that simple...
The main advantage of employees: they will still be there after the project went into productive status. And that's when the first serious problems pop up - usually after a few weeks.
We quite often had problems with projects by temporary contractors: the project finnished right on (or slightly over) time - somehow. Then the contractors went away - and administration had to cope with the problems.
So an employee approach adds security and reliability - for the employed (safe job) as for the employer (safe resources).
smkndrkn wrote:
>ipmasqadm autofw -A -r tcp 6112 6112 -h 192.168.1.2
>ipmasqadm autofw -A -r udp 6112 6112 -h 192.168.1.2
I do not know the AUTOFW feature, so maybe the following part is obsolete: always remember that you do not only have to get out, the answer has to get back in, too.
If Battle.Net only uses UDP, chances are good, that the channel back is UDP port 6112, too. If TCP is used, chances are good, that TCP ports 1024-65535 are used.
Qapla'!
I read from the article (e.g. the Postscript version of the original article on LANL), that this protocol can only be used to secure real time communications only.
The protocol cannot be used for email or file encryption. With this protocol one can only make sure, that the line you are currently using is secure.
As timing is a critical of the security mechanism, standard internet with nondeterministic transmission times does not qualify for this protocol.
Nonetheless an interesting article (and as "smooth" to read as any other scientific article).
#define rant_mode
A classic case of hearsay (=RTFM failure) and media hype.
#undef rant_mode
It's not just the sun that faded - nearly all links did that had to do with the solar eclipse went down starting this morning about 09:30 MESZ (=GMT/UTC+2h) - eclipse here around 12:40. Especially webcam sites were unreachable.
As I operate our gateway systems I was able to see (average) traffic requests jump to more than 180% of normal usage - driving our line deeply into saturation...
...plus the 3.2 GB IDE harddisc (which is not THAT much nowadays).
:-(
Only one USB port, no SCSI, no FireWire - a very "closed" design
Citing Apple's website:
http://www.apple.com/powerbook/features. html
"optional third-party FireWire CardBus card"
So there is no Apple interface card available?!
http://www.apple.com/powerbook/spe cifications.html
"Interfaces / Connectivity [...] SCSI port for connecting as many as seven external devices"
Interesting that THAT does not show up on other pages except on the "Acessoires" page. There you will be able to order the HDI-30 SCSI interface like on my old Powerbook 180. Cut-copy-paste leftover garbage from old powerbook pages or correct information?
Well, I'll stick with my old Powerbook for a while, I think. Good enough for typing texts anyway. For power work I have my tower...
The right transcription should look like
"Zoo-za" ("zoo" like the animal exhibition, "a" like in "bad", but short).
Greetings from Germany!
SuSe's Linux always came with smooth, simple yet powerful installation routines - and good documentation (even back in 199(4?)).
... unusuable places) - ever configured sendmail.cf (nearly) from scratch (NO example file available)?
The distributions I tried (well, some years ago) were well suited for beginners, but not for the more advanced user, with "hacker" documentation and optional modules missing there and where (or in
SuSe was the first distribution easily available on CD in Germany - and the first company offering professional support since Linux 0.99.x. See, my first linux CD was a SuSe with kernel 1.0.9
In case someone asks: now I use (and prefer) Debian, but I intend to try OpenBSD soon.
...at least in Germany - the fine is set to 500.000 DM = 255.000 Euro = about US $280.000
For juristic details see http://www.khemorex-klinzhai.de/werbun g.html (will be updated further in the next days).