Penetration Testing mailing list archives

Re: [PEN-TEST] OT - How secure is an ISDN line?


From: Cold Fire <coldfire () CLOSED-NETWORKS COM>
Date: Fri, 20 Oct 2000 04:40:47 +0100

On Thu, Oct 19, 2000 at 03:38:40PM -0400, JLJ wrote:
ISDN is as secure as a phone call, no more or less.  If you can access the
wire anywhere along the route and have equipment you can snoop the line,
just like you can a phone call.  I don't really think it's sa,"Noo send much
of anything in the clear anymore...

I have to disagree on this, while you can plug a phone (with a few
simple adjustments, comenly called a beige box) into an analogue
phone anywhere along the line and using either a linemans handset,
or a datatap (available from the many exchange&mart spy shops in the
uk). It was always my understanding that it was far more difficult
to intercept a digital connection rather than a analogue connection
that said, as long as they are using a 56k connection it sould be
pretty difficult to intercept anyway, of course you could slow the
connection down ( by way of line noise eiugh to force it into an
much more intercept friendly mode of none error correcting 4800/9600.

In my defence this is not my specialist subject, howver I know of
a company selling the full kit to intercept faxes+data, but
i doubt this would be of much use over 14400, you are all
aware of course that most SERIOUS (ie. not internet) nets works
work at speeds less than this.

later

CF

If you reread the above post you will realise you will not be able
to intercept 56k connections like that, the error correction etc
makes it impracticle. The simple answer is IF ITS SECRET, ENCRYPT IT
BEFORE YOU SEND IT OVER A PUBLIC NETWORK!!!!!!!!! And if encryption
is illegal in your country stay out of this argument.

It is not worth going to jail for!!!!!!!!!




-

stonewall

--
'Cold Fire, Britains most notorious hacker' Observer, July 1997
'The most recent conviction was that of [Cold Fire] whose On-line
escapades spanned from hacking into educational sites to more
sinister activities such as tapping into industrial and United
States military sites.' DC Paul Cox, SO6 Scotland Yard CCU


Current thread: