funsec mailing list archives

Re: This is scary


From: der Mouse <mouse () rodents montreal qc ca>
Date: Wed, 19 Dec 2007 11:21:46 -0500 (EST)

Linking back to a database through a RF medium is inherently
insecure.

Insecure against what?

Almost regardless of encryption or RX methods.  Satellite,
notwithstanding.  MITM, possibly?  Corruption of transmitted data?

If encryption is done right, MitM gets the attacker nothing that can't
be done equally well with an RF jammer.

Yes, using RF is vulnerable to jamming (and other things which end up
being functionally equivalent to jamming).  It also makes traffic
analysis attacks easier.  Without breaking the crypto, that's all the
attacker gets, though.  (Of course, if the crypto is done wrong, it may
be easy to break, but it's not fair to blame that on the medium it's
carried over.)

/~\ The ASCII                           der Mouse
\ / Ribbon Campaign
 X  Against HTML               mouse () rodents montreal qc ca
/ \ Email!           7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: