van Eck Phreaking attack

[^Dash^]

I felt to open this thread, after i have ran across a website that said it had a "software designed to aid in a specific type of security testing against a spying attack known as van Eck Phreaking"; that had quite a ring to my ears...ofcourse i have never heard of van Eck Phreaking so i documented myself on google and http://eckbox.sourceforge.net/ and realised that this could be the next page in history if it actually worked..
In theory it is possible (as many things are :D ).
Has anybody tried or succeded on applying those methods? is this still posibile nowdayz?

[skroo]

Has anybody tried or succeded on applying those methods? is this still posibile nowdayz?

Absolutely. See this page for more info.

[Thorn]

... Has anybody tried or succeded on applying those methods? ...

I don't know if you'd call it "applying" the method, but I've seen it happen inadvertently. I used to have a TV in a bedroom directly above a certain PC. When the PC was on, you could see the computer's screen on one channel. It had to be a light TV picture, and it was faint, but unmistakable. It certainly proved to me that van Eck Phreaking was more than theory.

[renderman]

Did some significant research into this years ago.

Much is available on google, including some rudimentary designs and mucho theory.

There is also some (expensive) lab equipment for testing(exploiting) this. I've seen it done, it's definatly not theory. Making it cheap and homebrew is the trick.

The site skroo pointed you at is agood place to start.

have fun

[highwizard]

Did some significant research into this years ago.

Much is available on google, including some rudimentary designs and mucho theory.

There is also some (expensive) lab equipment for testing(exploiting) this. I've seen it done, it's definatly not theory. Making it cheap and homebrew is the trick.

The site skroo pointed you at is agood place to start.

have fun

Try running your Query through turbo10.com.

[^Dash^]

10x

Wow 10x for the info guyz... thos should keep me busy for a while, hope i can squeeze out some hardware out of the intel i acquired. ;)
I disscused this with a narrow mined fella' at my school (claimed to know electronics) and told me: "It's impossible". :D Hope i can prove him wrong.
This problem was highlighted in '85 (wasn't it?), it's 2004! hasn't anybody (except the NSA) took any countermeasures against this?
I mean, if i succeed in my attempt to build such a device (and i know little electronics), then what would happen if the word would get out to the masses? but then again... who cares, it's every man for himself anyway!!

[renderman]

van eck (tempest) is known, and proven. It's not groundbreaking unless you can build a device for the masses @<$50 and get best buy to carry it.

Besides this is old news at Defcon. Jim Carter did it at DC4 ( http://www.defcon.org/html/defcon-4/...-announce.html ) (can any old timers here remember if his demo worked?)

If anyone is truely paranoid about people in a van across the street reading the contents of thier screen, they have bigger things to worry about. The expense and twitchy nature of it makes it less than reliable for spying.

Again, if your interested definatly persue it, it's facinating stuff. Just don't expect to shake any foundations.

I'll see if I can dig out any of my old links to the actual lab equipment I saw working.

[valkyrie]

snippity snip for brevity

I'll see if I can dig out any of my old links to the actual lab equipment I saw working.

Render, if you have found those links, please send them to me or post them. Thanks.

r0cketgrl

[skroo]

Render, if you have found those links, please send them to me or post them. Thanks.

Post 'em if you find 'em... I'm interested too.

[JiTRiF]

I didn't read all the stuff on those links, but from what i hear, van Eck phreaking only works on older CRTs. New ones are too complex in their emissions, and LCDs don't have the same emissions.

[renderman]

http://www.ravenswoodinc.com/captwhos.htm
http://jya.com/bits.htm
http://www.shmoo.com/tempest/
http://www.tscm.com/TSCM101tempest.html
http://frequencyclock.montevideo.nl/forum/start.php

Some new, a couple old. A great majority of my old links were from 1999 and are now dead.

http://bss.sfsu.edu/fischer/IR%20360...gs/tempest.htm - report of a guy who built one

It took some digging, but here's a pdf with a device similar to what I saw years ago (unfortunatly at the time I did'nt realize what I was witnessing): http://www.cl.cam.ac.uk/~mgk25/ih98-tempest.pdf
http://www.cl.cam.ac.uk/~mgk25/ih98-tempest-slides.pdf
http://www.ftp.cl.cam.ac.uk/ftp/user...to-tempest.pdf

I think that is most of it. I've also some pdf's of tempest standards, but there's not much useful.

I also realized exactly how much crap I have saved over the years.

Enjoy!

[^Dash^]

10x

Cool linkz Render! wow u do have lots'o'stuff, how many links do you actually HAVE in your possesion right now?
I think the schematicz on the eckbox site doesent fully work... or i'm kinda' steoopeed :D .
Gotta gather more info !!

[renderman]

I'm full of interesting stuff. Most of what I'm full of is shit, but occasionally I have something useful or interesting to contribute.

Finally took a look at the project page and I'm glad too see that some sort of forward progress has been made. I've seen to many projects like this come out with nothing useful.

Hope you get your device working.

[nazo]

Crypto.

I seem to recall reading in Crypto that the NSA had researched into this, and found a defense. Can anyone in possesion of this book verify that?

[skroo]

I seem to recall reading in Crypto that the NSA had researched into this, and found a defense.

There are several: employing Faraday cages or direct chokes on and around RF-emitting components, use of RF-absorbent paints and materials, elimination of radiators such as exposed cabling, use of isolated mains power generation, use of non-RF-radiating display technologies... There're a lot of things you can do to cut down on a readable RF signature. Mostly, it's going to depend on the equipment in use and environment it's being used in.