Re: [PEN-TEST] Penetration Testing and Van Eck Scanning

[Johann van Duyn <johann.vanduyn () APPLETON COM>]

PGP Security had a "Tempest" surveillance prevention option in its secure
viewer (used when viewing encrypted text files), which is basically a
low-contrast window in which your text is viewed. That would probably
obfuscate the text if viewed from a van... I suppose high-contrast text is
easier to pick up that way. Hmmm... I can just imagine telling our Board of
Directors that they need to view all their documents in grey on grey...

-----Original Message-----
From: David Alexander [mailto:dalexander () TRISKELE CO UK]
Sent: 08 November 2000 17:59
To: PEN-TEST () SECURITYFOCUS COM
Subject: Re: [PEN-TEST] Penetration Testing and Van Eck Scanning


I have never done it, but I have seen the results, it shows legible text.
Ross Anderson at Cambridge University has produced a set of word processing
software that can defeat V-E scanning using software only. What you see on
the screen is not what you see in the van - it's unintelligible. I don't
know how it works and I have no idea if anyone is picking up on it
commercially.
Regards
David Alexander
Project Manager & Information Security Consultant
Qualified BS7799 Lead Auditor
Triskele Ltd.
Office  01491 833280
Mobile 0780 308 3130


> -----Original Message-----
<snippety-snip!>


***The Appleton Group Ltd***

This message, including any attachments, is intended only for the individual
or institution to which it is addressed and may contain information that is
privileged, confidential or prohibited from disclosure or unauthorized use.
If the recipient of this transmission is not the intended recipient, you are
hereby notified that any use, reproduction dissemination, copying,
disclosure, modification, distribution and/or publication of this email
message or any of its attachments other than by its intended recipient is
strictly prohibited by the sender. If you have received this message in
error, please notify The Appleton Group Ltd immediately at
postmaster () appleton com and destroy the message and all copies thereof in
your possession.

****************************