Declassified Tempest Material Comes Online 127
D-Fly writes "John Young, who runs the Cryptome repository of cypherpunk documents, has obtained a small batch of declassified documents from the NSA on TEMPEST monitoring-getting computer data through electromagnetic emissions. Young got the stuff declassified through the Freedom of Information Act, and has appealed their denial of the rest of his request. A lot of what he has received so far is appendixes and tables of contents, and addresses testing equipment to prevent TEMPEST emissions. For a comprehensive archive of what is know about Tempest monitoring, check out a clearing house of information.. "
Multiple computers/moniters? (Score:1)
High priced LCD's (Score:1)
I wish I had a nickel for every time someone said "Information wants to be free".
Re:High priced LCD's (Score:1)
I wish I had a nickel for every time someone said "Information wants to be free".
Re:shield everything else... (Score:1)
I wish I had a nickel for every time someone said "Information wants to be free".
Intentional "typos" enable document tracking. (Score:1)
Some of it might get obliterated by later reformatting, but chances are at least one of the "tags" will survive. In a long document, it's unlikely that a random transcription error will occur twice in exactly the same place, so it's a pretty reliable method.
Another variation on this theme is filling out slightly different spellings of one's name on various forms, and then tracking the dissemination of your info through the junkmail you recieve.
Re:And we should be concerned because? (Score:1)
Anyway, I don't see the problem here.
Re:Made by humans (Score:1)
:)
--
depends on frequency and recognizable signals. (Score:1)
In addition, if they know what channel you're running your TV on, it's even easier to filter the TV signal out.
(Based on basic principles of EMF.)
simple.. (Score:1)
shield everything else... (Score:1)
What about the cable between your video card and monitor.
No computer is completely surrounded. There are big gaping holes--i.e. the floppy bays. If you wanted, you could completely surround it to.
Also, in a similar vein, people could shield their ethernet cables...
Re:Faraday cage (Score:1)
Re:Multiple computers/moniters? (Score:1)
To place an order, or to acquire information on our Remote PC monitoring software for authorized government agencies
I thought this was rather hypocritical after detailing how worrisome it is that anyone (including Big Brother) with a little knowledge of electronics, can monitor you non-invasively, and with impunity.
Re:Oh hogwash (Score:1)
Why don't you ask Vicky Weaver about it. Oh, you can't, she was killed by FBI sniper Len Horiuchi. She was holding her ten-month old baby, obviously a deadly threat to the federal agents.
Re:RF Cage (Score:1)
Re:Oh hogwash (Score:1)
[OFF] Is this a front account? (Score:1)
Do you use this
I only ask because of your
How to become a Federal Target (Score:1)
After hours of research with fellow Slashdotters who have been the target of "box builders", we can offer you the following points.
1. Get interrested in Tesla, Unified Field Theories, Einstein.. and most importantly High Energy Wave Physics.
2. Go to your local university library and sit by yourself. Read journals and old books about Gravity, Waves, and Grand Unified Field Theories. Don't EVERY check out anything. Don't get a library card. Go to a different university than you went to.
3. Repeat 2 alot. Don't talk about what you think about. You must be serious.
4. When things start getting weird, have confidence that they WON'T kill you. They just want to discourage you. They're very good at their job.
This message was financed and paid for by Current and Former Targets of the Federal Government. (CaFTotFG).
Re:Boxes For Sale? (Score:1)
Re:Microsoft Using Tempest to Check Serial Numbers (Score:1)
Now why does this NOT surprise me.
Re:Made by humans (Score:1)
Re:It's an evil plot. (Score:1)
As we all know, that's one of the signs of impending apocolypse.
AND funding a whole new virus attack (Score:1)
This is the final paragraph from the Scientific American article referenced above.
Seems like Microsoft's lack of care about their customers' security goes very deep. They're even funding novel ways for crackers to break into computers.
Re:Intentional "typos" enable document tracking. (Score:1)
Hmmmm.... (Score:1)
On the other hand, why should we care? I mean, how many people really would bother putting together tempest monitoring gear? It's pretty obvious what one needs to do to sheild vs. tempest monitoring - Faraday cage your computer workspace and filter any power/network/phone cables that enter the cage. The rest of the info is details that really are only needed WRT monitoring.
Am I misreading the issue? Is there something more on either side of this? I think much more interesting for a FOIA search is the CIA connection to drug smuggling (since the CIA IG told Congress that it _did_ in fact happen, I for one want to know just how involved the CIA was, for how long, and why....) But that's another topic...
itachi
Let 'em look by next year it wont do any good... (Score:1)
Re:I'm no expert, but... (Score:1)
Re:LCD (Score:1)
Unless of course the monitor doesn't run on electricity. Anyone got a water monitor?
Re:And we should be concerned because? (Score:1)
Re:Faraday Cage? (Score:1)
Re:LCD (Score:1)
Re:Its technically possible, but... (Score:1)
Go to this page, and look around. Specifically, this page:
http://www.cl.cam.ac.uk/~mgk25/ih98-tempest.pdf
has direct reference to the use of electronics to decode the signal created by the electron beam. The concept was first executed by wim Van Eck. The signal is so strong in fact, that images have been successfully recovered from over half a kilometer away, through concrete.
TEMPEST is ... (Score:1)
TEMPEST. TEMPEST is equivilant to "compromising
emminations". Ads that talk about TEMPEST Monitors
make no sence, other then maybe, Monitors that
emit alot of sh**. The same goes for "TEMPEST
Compliant". On the other hand "I built a TEMPEST
Free comm center", is a sentence that does make
sence.
Re:Faraday Cage? (Score:1)
shielded with both a ferric and non-ferrit cage.
(Ferrits should not be kept in cages). This is
to stop all EM propigation. Also you will need
power and phone line filtering, blacked out widows
(Ferrits like some light), and sound proofing.
There are several other things to concider, but I
can't get into that right now, because my sons
ferrit is tring to crawl up my pant leg!
Re:High priced LCD's (Score:1)
Tempest (Van Eck (sp?)) monitoring works via the reconstruction of signals emanated from a communications device (most commonly a computer). It does this by the fact that the monitor of a computer, as the electron gun scans the screen, the signals being sent to control the electron gun are also radiated into the atmosphere, like a small radio station. Most of the stuff is just voltage levels for brightess of the pixels and such, you may even get lucky and get some of the sync pulses. In reality, most of the syncing (horz and vert) is gone, so you have to supply that another way (usually via a linked set of frequency generators). You can pick up the signals emanated by most monitors with an antenna (a Yagi? I can't remember - my antenna knowledge sucks) "pointed" at the source, fed into an amplifier.
This signal is then overlaid with syncing frequencies (from the sig generators, or if the computer is set to 640 x 480 x 60hz, it might even be possible to use a VCR or something to supply the sync pulses - maybe another VGA card, perhaps a Tempest monitoring machine could be built with another PC?). The signal is then sent on to a normal monitor for display (this is a real basic setup - I am sure it is much more complicated and expensive in real equipment).
Generally, the output is real grainy, but legible - the fonts that were created to defeat Tempest were designed to utilise the artifacting inherent in such a signal rebuilding system to garble the output. Now, your statement:
Most of the output for Tempest monitoring does come from the monitor - but a lot also comes from the cable that hooks up to the monitor as well - even if it is shielded. Signals are also emanated by your VGA card, even the computer itself. It is possible to Tempest monitor all of this stuff (basically, all Tempest monitoring is the reconstruction of signals emanated by communications equipment - it is special in the regard that computers or other type equipment weren't designed as general purpose transmitting systems, and hence the signals are more difficult to reconstruct, but in the end, Tempest boils down to radio receiving - in theory, you could Tempest monitor your microwave).
So how do you protect yourself from Tempest monitoring? Good question. Because we haven't got any idea what "the other side" is capable of, we can only guess on what to do. Of pictures I have seen of real Tempest equipment, most were encased in a lot of steel, with steel braid encasing the cables entering/exiting the computer (making the removal of plugs/boards/etc a total nightmare). Unknown what was inside the machines, but I wouldn't put it past them to encase cards in special steel inner-casings. The room the computers are in might be encased in a faraday cage (or maybe the rebar of the concrete is formed for this). There may even be some ECM equipment on the offensive side as well, supplying bogus signals.
This is what I know of the stuff - I hope this helps.
Re:TEMPEST Shielding (Score:1)
DIA Information Technology Acquisition Support Center (ITASC) [dia.mil]
Fun stuff!
Re:Let 'em look by next year it wont do any good.. (Score:1)
Re:High priced LCD's (Score:1)
What I want to know.. (Score:1)
Re:This is not that big a deal (Score:1)
"Your Rights Online"
it just sounds like the title to some touchy-feely news segment that one would see on the local 10 o'clock news (right after the weather report, of course).
peep,
bobby
--
Tempest printer (Score:1)
Finally, I think around the seventh submission, one of the guys at the certification facility had some mercy. He only said one word, "sound".
Consider the difference between a "." and a "W". The printer better not hit the "." as hard as the "W" otherwise it'll just punch holes in the paper. So the printers were designed with multiple impact levels and used different ones for different letters.
They reprogrammed the printer to use the same intemediate impact level for all characters (never mind what that did to print quality) and sure enough the printer was Tempest certified.
We guessed that the differences in sound of the different impact levels were enough that some useful information could be extracted by listening to the printer print. So Tempest isn't just about electronic emissions, it also includes other emissions like sound.
if you have to worry about TEMPEST... (Score:1)
It's all well and good to be concerned about the Bad Guys getting your Sensitive Data, but let's be real: your kneecaps are a lot more vulnerable than your computer. Once everybody protects everything with solid have-something/know-something encryption, then maybe we worry about TEMPEST. Until then, encrypt, and keep a duffel bag ready to head for the border.
(Or ignore me; maybe I'm just one of those loonies who's been watching too many episodes of "The X Files.")
Privacy/Freedom implications (Score:1)
Think about it...
LCD (Score:1)
-Tim
Re:shield everything else... (Score:1)
Re:ooh ooh open EVERYTHING UP! NOT (Score:1)
nah (Score:1)
RF Cage (Score:1)
Re:Microsoft Using Tempest to Check Serial Numbers (Score:1)
Faraday Cage? (Score:1)
Is there something fundamentally different about TEMPEST-type emmissions? Or is there something fundamentally flawed with my notion of a Faraday cage? Or is this a perfectly valid solution, just that most people don't want to, or don't have access to a big metal cage in which to do their computing?
Re:Oh hogwash (Score:1)
-beme
Re:Tempest printer (Score:1)
if sound was really part of it, you'd have to equalize the amount of time the wheel spun for each character (otherwise the time between strikes would give you information about the characters used) and the strike area of each character (otherwise the sound level would give you information). hmm - now that i think about it, the timing attack would work for RF, too...
Boxes For Sale? (Score:1)
---
Re:Faraday cage (Score:1)
Consistancy is the refuge of small minds... (Score:1)
How to shield your emmisions with tin foil (Score:1)
Also note that a typical computer is almost completely surrounded by a conductor: the case. Of course, if you are like me, and you have a K7 and a TNT2 in your case, and you find you have to leave the cover off and have an external fan blowing on the damn thing to keep the heat down, then you have a problem. In my situation... well, I couldn't care less if the government looked at what I'm doing. I'm an open source programmer!
-------------
Tempest (Score:1)
Re:shield everything else... (Score:1)
Utter bullshit....hold up. (Score:1)
i figure their bills get paid by classified funding. isn't microsoft on trial right now (and trying to get out of it)?
Re:Made by humans (Score:1)
There's no intelligence to usurp, this is the govnerment of which you're speaking. "dara" represents a unit of "Slashdot Stupidity in the guise of humor" measure, which in this case scored 5 daras per teradips.
HAHAHAHAHAHAHAHAHA *cough* (Score:1)
Now here's a comment which really does deserve to be moderated up with "Funny." Can you just see this pencil neck AC with a "Mr. T" yellow mohawk and big plastic tortoise shell glasses?
"I pitty the fool" MY ASS!
Tempest is just a standard--NSA not spying on you (Score:1)
Contrary to popular belief, it it **NOT** a device to spy on you. I offer the following:
A) It is illegal for the US Intelligence community to spy on any US citizen or corporation unless authorized by the Attorney General (although I bet she's big on that, given her track record)
B) Do you think that the NSA really cares about your love letters to you five girlfriends around the world?
C) It takes a very concerted effort to get emission collectors close enough to a site to be effective. These collectors don't fit in a briefcase, they are just too complicated and have too many parts. Also, if you are going to keep up surveilance, you have to change out shifts and vehicles, and people have to eat. That kind of activity generates notice.
Where to purchase TEMPEST resistant cases (Score:2)
Re:Microsoft Using Tempest to Check Serial Numbers (Score:2)
--
TEMPEST Shielding (Score:2)
The PC was in a heavy duty metal case with no openings. Their was an RF filter (metal mesh) over the opening for the power supply fan. All of the cables were thick, high quality, shielded cables. The monitor was in a special shielded enclosure. The keyboard looked normal but it was noticably heavier than a normal keyboard.
All mechanical joints in the case had RF gasketing material where the parts fit together. Every part in the system or attached to the system had to be TEMPEST certified. You couldn't install a normal I/O board, cable or peripheral without voiding the certification.
I've forgotten the price but it was two or three times the price of a non-TEMPEST equivalent.
Hogwash^2 (Score:2)
Its technically possible, but... (Score:2)
Where as my described method is pretty much industry standard, and is much easier to reconstruct. I've seen it in action.
I'm no expert, but... (Score:2)
Oh hogwash (Score:2)
I know nothing I'll say will change your mind, but i'm going to say it anyways. While I can understand why people might be concerned about Echelon, TEMPEST is not in the same league. If the government wants to kill or spy on you, there isn't much you can do about it. There will always be other methods which you're simply not aware of. FOIA in case of TEMPEST is neither necessary, nor very beneficial (as a countermeasure against the gov't).
When you starting implying that "The Government" (Justice Dept.) knowing murdered innocent people, you blow a great deal credibility. Widespread conspiracies are myth.
Re:look elsewhere (Score:2)
Faraday Cage (Score:2)
(quick definition here [lynx.uio.no]
Nifty stuff here [davidson.edu] too.
Anything more, just use Google.
POpe
Re:And we should be concerned because? (Score:2)
I don't like the classification of TEMPEST data and specifications because it makes it difficult for ME to protect MY data. It's the same thing as crypto.
Re:Boxes For Sale? (Score:2)
Re:if you have to worry about TEMPEST... (Score:2)
Think folks like disgruntled techies trying to grab payroll data. Or somebody stealing a competitor's secrets. Or so forth. There are, potentially, circumstances under which somebody would be willing and able to attempt TEMPEST ELINT surveillance, but not send folks to do a B&E or a little physical coercion...
Re:Boxes For Sale? (Score:2)
Advanced Technology Systems Corporation [atsc-usa.com] -- has TEMPEST-compliant and "ruggedized" (their word not mine) devices.
Candes Systems, Inc. [aol.com] -- Offers TEMPEST-compliant desktops and laptops.
The EMF Safety Catalog [berk.com] -- Mostly stuff about reducing EMF radiation, but also has some TEMPEST-compliant devices
It's an evil plot. (Score:2)
Another alternative is that the CIA is under control of a renegade communist band that fled Russia after the collapse of the U.S.S.R. Notice the "da" in the beginning of both DARPA, data, and dara. And the 't' being changed to an 'r' has to be a secret message; perhaps they want to "transfer" top-secret government information about TEMPEST so they can spy on Microsoft, steal the source code for Windows, and take over the world!
Wait. How can the source code to Windows possibly help them?
And we should be concerned because? (Score:2)
TEMPEST and its ilk are bad, because they protect governmental/military sensitive data.
It's a poor sort of logic that has to be internally consistent.
Look it up, buddy -- there's LOTS to fear! (Score:2)
Yeah, right. You probably don't believe Kennedy was killed by aliens, the philidelphia experiment irradiated apple pie loving American soldiers against their will, Jimmy Hoffa peaks up umpires crotches, or the that the CIA is in league with NOW to get Gloria Steinam elected "Mrs. America" AND president in 2004, in a nihilistic attempt to discredit American politicians in the voter's eyes.
You are sadly mistaken, and clearly naive.
You're confusing high level malice.... (Score:3)
Civil trials are NOT proof of innocence or guilt. It is a proponderance of the evidence, not beyond a shadow of a dobut. Futhermore, its being reviewed by a layman jury who knows nothing of what it is like to be under fire. The question is, what where they looking at?
Any lawyer worth his weight is capable of painting the Feds as being evil, and can then take admissions of shooting to the bank. But just because a single sniper shot an "innocent" (person not happening to be carrying a gun), doesn't even mean he violated protocol. A jury simply isn't qualified to review such cases. Even if he did violate protocol, it doesn't mean he did so maliciously or even particularly recklessly. Nor does it indicicate higher level involvement. Why do you assume his superiors would want an "innocent" person killed? It is just hogwash...
Links as links. (Score:3)
GUID [news.com]
Win98 profiling [techweb.com]
Professor Spokesman [chronicle.com]
Astroturf [latimes.com]
Ads as news [thestandard.net]
Video [wired.com]
got an old 7100? try this (Score:3)
Re:This is not that big a deal (Score:3)
Paranoid rantings? Ok, for the vast majority of the population, who doesn't care what happens to the world as long as they can have a house in the burbs, SUV, 2.5 kids, and no one messes with their bowling night, yes. The NSA has already said in documents released through FOIA, that if you fit into this profile, they're not going to mess with you.
However, the rest of us, who have actually been paying attention to the events of the world, have reason to be nervous. Those of us who have noticed that our rights have been slipping away one by one, those of us who have noticed that the government is wresting control from the people, and those of us who may have been very vocal about their dissatisfaction with having their Constitutional liberties and god-given rights being taken away have a real serious reason to worry. And those of us who have seen the Justice Department kill innocent victims and children at Waco and Ruby Ridge have real reason to be upset.
Granted, the NSA, FBI, CIA, or whatever else government agency is not going to spy on everyone. But if the NSA find reason enough to tap you, there is plenty of evidence to suggest that you will be tapped. What violates national security might interest you. For all I know they could go definately go after ESR next, with all that huge arsenal he has. (HHOS)
Yes there is reason to worry, there is reason to look at the government with a cautious eye. Its people who are completely ignorant who will be the first against the wall when the revolution starts.
Re:This is not that big a deal (Score:3)
Maybe you do, and maybe you don't. I am not trying to prove that one way or the other. Personally, some of the things the government does do worry me, and I am concerned about them.
But EMSEC isn't one of them. EMSEC is about as much a violation of your rights as strong crypto is. Note: Not restrictions on strong crypto, but the possestion of it. If EMSEC is a threat to my privacy, then so is strong crypto. See my point?
And those of us who have seen the Justice Department kill innocent victims and children at Waco and Ruby Ridge have real reason to be upset.
Right. The entire DOJ decided, "Hey, let's go kill some innocent people. And children! Make sure you go after the children first! They make the best targets!"
Have you ever been in a firefight? Things are not quite so cut-and-dry as you seem to think. When you start getting shot at, you shoot back at any available target. Otherwise, you'll have a bullet in the brain quicker then you can say "Constituional liberties".
The fact of the matter is, the people at Waco were holed up in a compound, in violation of multiple laws, and shooting at people. The police fired back. What do you expect?
I think it is a shame that some of the people in that compound who were just caught up in the whole thing got hurt, but shit happens. You seem to think the police went out of their way to hurt these people. Did it ever occur to you that it was an accident?
<FLAME SETTING=MILD>
To put it bluntly: Get a grip.
</FLAME>
Re:Multiple computers/moniters? (Score:3)
"We had no problem viewing computer screens on adjacent floors in the building (we were sometimes hindered by noise) and were able to differentiate (to my surprise) between different computers in a large office. We aimed our device out the window across the street at an adjacent office building and were able to view CRT screens without too much difficulty."
The full article is here [thecodex.com] (scroll down to "WHAT WE WERE ABLE TO CAPTURE...")
Another point lost in the shuffle... (Score:5)
These documents were acquired by people submitting paperwork for the Freedom Of Information Act and acting on their beliefs. We can all sit around and argue about Echelon, or worry about some other terrible conspiracy, but I think that until people really start to hold their government responsible for it's actions, things will continue as before and worse.
Ask 'em for the documents. Make em worry about what to classify. Cause the office that checks for classification issues to overload; after all, classification decisions are pretty high level, and the model doesn't scale well. As the office becomes more clogged with requests for information, either they will mess up and release material they wouldn't have otherwise, or they will get so clogged they can't process all of the information coming in and going out.
Take responsiblity for the destiny afforded you by your government. Alone you are nothing, but in groups you are its greatest enemy.
Microsoft Using Tempest to Check Serial Numbers (Score:5)
Microsoft was funding a project to use this to put product serial numbers on the screen so they could drive a truck through an office park and pick out software pirates. Honest.
This is not that big a deal (Score:5)
"Getting all my secrets department"? Uh-huh. More paranoid ravings from the YRO folks. The more YRO I read, the less it sounds like a legitimate concern and the more it sounds like the delusions of people who have been watching too many "X-Files" episodes. Here's a hint: TV isn't real.
Made by humans (Score:5)
3.1.4 (U) Bit Rate. -- A general term used to express the dara transfer rate of binary digital signals.
clearly indicates the spelling error "dara" instead of "data". Well, this proves that, as of 1992, the entire government has not been usurped by artificial or alien intelligence.
However, since 1992, I can make no assurances. Or that dara represents some coset of the coin data, with more specific meaning (or more general meaning), of some purpose I cannot yet surmise.
Re:Microsoft Using Tempest (here's the article) (Score:5)
Here's the article you were talking about:
From www.sciam.com/1998/1298issue/1298techbus4.html
And like a predictable villian from a tired James Bond movie:
Of course Microsoft wouldn't abuse this technology, right? They may sneak the GUID serial number into user's documents, track users' PCs who install Windows 98, pay your college professors to push their products, organize an astroturf campaign to fake support for their DOJ lawsuit, disguise advertisements as news stories, and fake evidence during their DOJ trial, but they're honest, dammit!
Sorry if there are any typos in this, but it's hard to type when you have your head buried in the sand.
GUID: //www.news.com/News/Item/0,4,33413,00.html
Win98 profiling: //www.techweb.com/wire/story/TWB19990312S0008
Professor Spokesman: /chronicle.com/data/articles.dir/art-44.dir/issue- 33.dir/33a03001.htm
Astroturf: http://www.latimes.com/HOME/NEWS/BUSINESS/UPDATES/ lat_microsoft0410.htm
Ads as news: //www.thestandard.net/articles/display/0,1449,6087 ,00.html?home.bf
Video: //www.wired.com/news/news/politics/story/17938.htm l