encrypted
Latest
Researchers eavesdrop on encrypted GSM call: all you need is a $15 phone and 180 seconds
It's hardly a fresh idea -- researchers have claimed that GSM calls could be cracked and listened in on for years. But there's a difference between being able to do something with a $50,000 machine and a warrant, and being able to do the same thing with a few $15 Motorola phones, a laptop, open source software and 180 seconds of spare time. Security Research Labs researcher Karsten Nohl and OsmocomBB project programmer Sylvain Munaut recently spoke about a new GSM hack at the Chaos Communication Conference in Berlin, and they were able to walk the audience through the eavesdropping process in a matter of minutes. According to them, it's not terribly difficult to use a $15 handset to "sniff out" location data used to correctly route calls and texts, and once you've nailed that down, you could use modified firmware to feed raw data into a laptop for decryption. Using a 2TB table of precomputed encryption keys, a cracking program was able to break in within 20 seconds -- after that, you're just moments away from recording a live GSM call between two phones. Of course, speeches like these are made to encourage security officials to beef up the layers between you and ill-willed individuals, but it's hard to say what (if anything) will change. For now, we'd recommend just flying to each and every person you'd like to speak with. Unless you live in the Greater New York area -- you're probably better off risking a hacked conversation than heading out to LGA / JFK / EWR.
Military's first Advanced Extremely High Frequency satellite makes its way into orbit
The first piece of the Advanced Extremely High Frequency communications system made its way into space recently with the launch of the AEHF 1 satellite. Also referred to as Milstar III, the planned successor to the current Milstar system will consist of three or more geostationary satellites, each of which has five times the capacity of current Milstar satellites. They will communicate with each other directly via crosslinks, and with the ground via narrow spot beams. The AEHF "is built to provide the highest levels of protection for our nation's most critical users. Encryption, low probability of intercept and detection, jammer resistance and the ability to penetrate the electro-magnetic interference caused by nuclear weapons are essential features when communication can be of the highest priority," said Col. Michael Sarchet, commander of the Protected Satellite Communications Group at the Space and Missile Systems Center. The craft will spend the next 100 days in testing, circularizing the orbit 22,300 miles over the equator with its conventional and exotic ion propulsion systems, at which point it should enter service from an orbital location to be determined.
Aegis Bio grows to 640GB of fingerprint-protected storage
Apricorn specializes in the fine art of making people believe their data is worth stealing and charging them for the privilege of protecting it. Its Aegis Bio range has now been expanded, both in number and in capacity, as the former ceiling of 250GB has been lifted with the introduction of 320GB, 500GB and 640GB variants. The 2.5-inch external disk validates user identity with that handy fingerprint scanner on top before allowing access to the otherwise 128-bit encrypted precious stuff within it. Prices of the new models top out at $160 for the most voluminous one, making them thrifty enough to buy even if you don't need secret agent-level security -- which, let's face it, you don't. Full PR after the break.
Corsair's Padlock 2 offers 256-bit AES encryption inside a rugged body
Our British readers will already be painfully familiar with the comical propensity that government officials (even spies!) have for losing sensitive data while on the move. It might be an idea, therefore, to give your forgetful local representative a break with one of these new Corsair USB drives. The Padlock 2 features OS-agnostic password protection via the keypad you see above plus 256-bit encryption of the data stored on the flash inside. So even if someone is tenacious enough to pry the case open, he'll have a hard time getting anything useful out of it. Oh, and don't worry about forgetting the passcode, there's a procedure for wiping the drive clean and generating a new one. 8GB units are available immediately, and we've spotted them online priced at £46 in the UK and $59 in the good old US of A.
WiebeTech gets rugged with ToughTech Secure mini HDD enclosure
It's been a (blazing) hot minute since we've heard a good word from the folks at WiebeTech, but lo and behold, it's hitting back with a new portable hard drive case here at CES. The ToughTech Secure mini is described as a 2.5-inch encrypted external HDD enclosure, and with four interfaces to choose from (FireWire 800, FireWire 400, USB 2.0 and eSATA), you should be set when it comes time to connect it. 'Course, we wish SuperSpeed USB 3.0 were represented here, but we guess that'll have to wait until next year. The case ships with a USB encryption key that's meant to keep your information safe from prying eyes, and the rugged aluminum chassis should protect it from most bumps and bruises. There's no mention of a price, but the full specification list awaits you just past the break while you wait for a February ship date.
Germany ousts BlackBerry for government VIPs
RIM may have recently opened a facility in Bochum, but that apparently wasn't enough Bavarian love to save it from being canned as the German government's platform of choice for its high-security needs. Deutsche Telekom subsidiary T-Systems has been selected to lead up an effort to procure "several thousand" customized handsets with mega-uncrackable encryption, winning the deal over the old BlackBerry standby thanks to concerns that state secrets are being transmitted overseas -- to Canada, specifically. Canada has always struck us as a pretty trustworthy bunch of good, hard-working folks, but then again, it's all fun and games until Canadian Motor Works, Canadawagen, Canada-Benz, and Canadorsche all come out of nowhere. [Thanks, Toby]
Quantum cryptography: now ready for space travel
It's been awhile since we've heard of any major advancements in the world of quantum cryptography, but at long last the silence is being broken by a squad of jubilant Austrian physicists. As the story goes, a team from Austria's Institute for Quantum Optics and Quantum Information (IQOQI) managed to send "entangled photons" 90 miles between the Spanish islands of Las Palmas and the Balearics. Calling the ephemeral test successful, the crew has boldly asserted that it's now feasible to send "this kind of unbreakable encrypted communication through space using satellites." Funny -- last we remember, quantum cryptography still had a few kinks to work through here beneath the stratosphere.
Kingston's DataTraveler BlackBox USB drives meet federal security standards
Kingston's got a thing for über-secure flash drives, and its latest DataTraveler definitely keeps the trend alive. The waterproof BlackBox is the outfit's first Federal Information Processing Standard (FIPS)-validated drive, which means that it was given the seal of approval from the National Institute of Standards and Technology and the Communications Security Establishment of the Government of Canada. More specifically, you'll find "256-bit hardware-based AES encryption via a dedicated processor which automatically encrypts and decrypts data on the fly" and it'll also enter lock down mode if you happen to forget your password ten consecutive times. Of course, Kingston's pretty proud of this thing, so don't be shocked when you see the $165 (2GB), $242 (4GB) and $424 (8GB) price tags, alright? Alright.[Via Electronista]
Vodafone UK serving up secure SMS
Vodafone's British arm has partnered with Broca Communications to offer its Secure Advanced Message Service -- cleverly named "SAMS" for short -- to business customers. Sitting atop SMS, SAMS offers encrypted messaging for those times when you simply must know beyond a shadow of a doubt that the "meet 4 dnr?" you just received is authentic. Of course, security has its price; the service will be billed on a per-message basis, which pretty much explains why it's being pitched to Voda's enterprise user base.[Via texutally.org]
Rayservers Cerberus laptop touts rugged frame, thick security
While there's already a fair amount of competition in the rugged laptop realm, Rayservers is taking its uber-secure approach and blending it with military-grade toughness for its Cerberus MIL-STD-810F Crypto Toughbook. Aside from borrowing the "100-percent encrypted hard drives and privacy protected internet access" from its other models, this "Secure-Out-of-the-Box" machine also touts a sealed plastic keyboard, 80GB shock-mounted removable hard drive, magnesium alloy case (with handle), and moisture / dust resistance to boot. If these amenities sound familiar, it's because the actual hardware is a Panasonic Toughbook CF-30, but the AES 256 Encrypted Linux is all Rayservers, and you'll also find Intel's 1.66GHz L2400 processor, GMA 950 graphics set, up to 4GB of DDR2 RAM, a 13.3-inch XGA touchscreen, DVD burner, gigabit Ethernet, PCMCIA, 802.11a/b/g, FireWire, 56k modem, and a trio of USB 2.0 ports on the machine. Of course, the 8.2-pound beast demands a hefty premium for all this literal and theoretical security, as it'll reportedly cost you about $10,000 (saywha?) to weather a data-jacking invasion and mountainside fall simultaneously.
Safari AppleScript to enable Private Browsing, mount temporary download disk image
Now that we know how to enable the AppleScript menubar item, it's time to give Safari some AppleScript-enabled privacy features.For all those times when you need to enable Private Browsing and 'private downloading' in Safari, a macosxhints reader has posted an AppleScript with setup instructions that can enable Private Browsing and mount a disk image and temporarily changing Safari's download folder to said disk image for the ultimate in browsing privacy (macosxhints uses 'online banking' as a usage scenario; I guess that works).The script requires a little bit of setup and customization however, so check out the post for instructions. When you're finished you'll have a simple, handy AppleScript that prompts you to enable or disable Private Browsing in Safari, and then it will mount your encrypted (password-prompted) disk image for safe, secure and private downloading as well. Enjoy.
