Subscribe to this blog in Radio:
Didn't find what you were looking for?
E-mail this blog's author, Bruce Umbaugh:  |
|
 |
Wednesday, November 30, 2005 |
Wes points at the paper blinked below and comments:
Micah Sherr, Eric Cronin, Sandy Clark and Matt Blaze: Signaling Vulnerabilities in Wiretapping Systems. "The vulnerabilities allow a party to a wiretapped call to disable content recording and call monitoring and to manipulate the logs of dialed digits and call activity. These countermeasures do not require cooperation with the called party, elaborate equipment, or special skill." Amazing. I thought phone phreaking had ended years ago, but it looks like the PSTN just can't shake that in-band signaling.
Also, btw:
Note: For those in the Philadelphia area, these results will be presented at the Penn Computer Science Research Seminar on Thursday, December 1st, at 3pm in the Levine Hall auditorium (on the Penn campus at 3330 Walnut Street).
10:44:47 PM 
|
|
Open-Source Intelligence.
How here's a good idea:
US intelligence chief John Negroponte announced Tuesday the creation of a new CIA-managed center to exploit publicly available information for intelligence purposes.
The so-called Open Source Center will gather and analyze information from a host of sources from the Internet and commercial databases to newspapers, radio, video, maps, publications and conference reports.
[Schneier on Security]
10:38:51 PM
|
|
Study reveals security holes for evading wiretaps.
In the NYT, John Markoff and John Schwartz report:
The technology used for decades by law enforcement agents to wiretap telephones has a security flaw that allows the person being wiretapped to stop the recorder remotely, according to research by computer security experts who studied the system. It is also possible to falsify the numbers dialed, they said.
Someone being wiretapped can easily employ these "devastating countermeasures" with off-the-shelf equipment, said the lead researcher, Matt Blaze, an associate professor of computer and information science at the University of Pennsylvania.
"This has implications not only for the accuracy of the intelligence that can be obtained from these taps, but also for the acceptability and weight of legal evidence derived from it," Mr. Blaze and his colleagues wrote in a paper that will be published today in Security & Privacy, a journal of the Institute of Electrical and Electronics Engineers. Link
[Boing Boing]
Matt's paper
6:34:32 PM
|
|
The Golden Rule Online Music Store.
via BoingBoing,
Jane Siberry has opened a digital music store offering non-DRMed mp3s and very interesting payment plans (from a review by EFF's Fred von Lohmann):
* free ("gift from Jane");
* a standard price (CAN$0.99);
* self-determined price - pay now; or
* self-determined price - pay later (to facilitate try-before-you-buy).
Siberry was quoted at a concert as saying, "I want to treat people the way I'd like to be treated. I don't like being treated like a child, so I won't be doing that to other people." [Smart Mobs]
6:34:31 PM
|
|
Idiot boxers. Determined to stamp out TV "indecency," Sen. Ted Stevens convened a whole roomful of poohbahs. The result: A bitter dispute over the Venus de Milo. [Salon salon]
6:59:51 AM
|
|
|
