Re: [PEN-TEST] Penetration Testing and Van Eck Scanning

[ISSO <ISSO () DATASHARE COM>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I think TEMPEST eavesdropping has very limited value with today's low
rad monitors.  The monitor has always been the traditional target for
this activity.  When TEMPEST first became widely known, the CRTs were
much easier to rasterize.  Today that is not the case, although some
people still say that their devices can intercept upto 1KM, I would
guess it is more likely a few feet.

- -----Original Message-----
From: Johann van Duyn [mailto:johann.vanduyn () APPLETON COM]
Sent: Wednesday, November 08, 2000 10:45 AM
To: PEN-TEST () SECURITYFOCUS COM
Subject: [PEN-TEST] Penetration Testing and Van Eck Scanning


Just a thought I had while on a nicotine-and-caffeine break:

Has anyone ever done a bit of Van Eck (aka TEMPEST) surveillance as
part of
a penetration test, just to show people what can be seen from a van
in the
corporate parking lot when the security attendant is on his lunch
break?
That could provide a few hot debates in boardrooms, especially if one
were
to tune in to the Internet browsing habits of a few senior
directors...

Has anyone done it, or had/seen it done (esp. outside of a military
environment)? Are there any good references around re. proposed
civilian
standards for 'safety' from Van Eck scanning? And where would one
look
around either for people who do that type of surveillance, or the
equipment
to do that with.

And, finally, if this is not the right forum for such discussions,
could
anyone in the know point me to such?

Very ta,

+----------------
| Johann van Duyn BA, MCSE, BCP-ISS
| Network Manager: The Appleton Group Ltd
| johann.vanduyn () appleton com
| tel. +27 21 7998026
| cel. +27 82 4588472
| fax. +27 21 7944677
+----------------

"Many that live deserve death. And some that die deserve life. Can
you give
it to them? Then do not be too eager to deal out judgement. For even
the
very wise cannot see all ends."
                -- Gandalf, in "Lord of the Rings" by JRR Tolkein


***The Appleton Group Ltd***

This message, including any attachments, is intended only for the
individual
or institution to which it is addressed and may contain information
that is
privileged, confidential or prohibited from disclosure or
unauthorized use.
If the recipient of this transmission is not the intended recipient,
you are
hereby notified that any use, reproduction dissemination, copying,
disclosure, modification, distribution and/or publication of this
email
message or any of its attachments other than by its intended
recipient is
strictly prohibited by the sender. If you have received this message
in
error, please notify The Appleton Group Ltd immediately at
postmaster () appleton com and destroy the message and all copies
thereof in
your possession.

****************************

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBOgmH0w/uiy0Nl6aFEQLfeACgkiCTUhYoyRbWGlFsw8auGV43TrsAn1vE
3yCU25sL4xqppS2LUn66GZ2e
=sN0v
-----END PGP SIGNATURE-----