Re: Tempest Info

There was some interesting stuff on the web page about
experience TEMPEST-surfing CRTs, and Sarah Ellerman's article
is better than some of its sources, but there's still bogosity around.

>It's so secret that the Feds refuse to even release its real name. 
>Privacy advocates have filled the void by nicknaming this
>technology "TEMPEST," which stands for "Transient Electromagnetic Pulse
>Emanation Surveillance Technology." 

Nope.  TEMPEST _is_ its real name.  It's not an acronym, and the stuff
doesn't even deal with Transient ElectroMagnetic Pulses; that's somebody's
attempt to take a non-acronym and find plausible buzzwords to fill it.

>What it does is allow a simple scanning device to read the output from 
>your monitor from up to one kilometer away.

It's not just about monitors; they're just easy targets because they're
usually electrically noisy, and the stuff they broadcast is in an easily
usable form (if you've got a monitor around that can handle the output
frequencies required, which is to say it costs at least as much
as the monitor you're bugging :-).  One reason they're noisy is the
basic technology they use; another is that they're hard to stick in 
metal boxes because you'd like to be able to see the screen.
In the days before FCC Class A and Class B certification became
near-mandatory, there were a _lot_ of noisy devices out there;
one early dot-matrix electronic typewriter could be read a couple
of miles away.  On the other hand, random signals from your CPU's crunching
are not only harder to detect among all the other electronic noise,
it's hard to translate them into anything human-readable.

>We headed east toward the New York Post newspaper offices and read the
>latest news off their monitors (which was printed the next day). We headed
>north toward City Hall and NYPD Police Headquarters. Guess what? They're not
>Tempest-certified either...Neither is the United Nations, any of the midtown

About 8-10 years ago, TEMPEST-certified computers typically cost about
$5000 more than equivalent regular computers, as well as being 6-12 months
behind the commercial products they were based on.  A big reason for
this is that certification is an expensive technical and paperwork process,
and most products aren't going to sell enough units to spread the cost around.
Sure, some of it's due to shielded cables, grounded metal boxes, and
paying careful attention to board design.

As one of the posters pointed out, you can cut down your exposure a lot
by using an LCD display instead of a CRT, and sticking to FCC Class B equipment,
which is a tighter standard than Class A.

One of the articles also described making a shielded room using some of 
the non-woven carbon-fiber fabric shielding, and said it didn't stop everything.
Shielding is a tricky business - modern computers have a lot of harmonic energy
in the 100 MHz - 10 GHz ranges, especially now that clock speeds are
in the 100 MHz range instead of the 8 MHz range that was common when I started,
so the wavelengths get very short and stuff leaks out easily around joints
unless you're very careful about both the technology and the installation;
you've _got_ to test a room for tightness and hunt down all the leaks
before you can trust it.  Also, of course, your electrical power system
needs to be shielded and filtered, so only 60Hz gets through,
unless you plan to stick to laptops and bring in spare battery packs.


#					Thanks;  Bill
# Bill Stewart, stewarts@ix.netcom.com, +1-415-442-2215
# goodtimes signature virus innoculation

Bill Stewart writes:
>  Also, of course, your electrical power system needs to be
>  shielded and filtered, so only 60Hz gets through, unless you
>  plan to stick to laptops and bring in spare battery packs.

At HoHoCon a few years ago, someone did a tempest demo and mentioned that  
signals could be recovered from water pipes!  Fire sprinkler systems were  
specifically mentioned...

Theres a lot of different avenues for your eminations to be recovered, some  
you may not of have thought of.  Like crypto, tempest is economics.


andrew

> 
> Bill Stewart writes:
> >  Also, of course, your electrical power system needs to be
> >  shielded and filtered, so only 60Hz gets through, unless you
> >  plan to stick to laptops and bring in spare battery packs.
> 
> At HoHoCon a few years ago, someone did a tempest demo and mentioned that  
> signals could be recovered from water pipes!  Fire sprinkler systems were  
> specifically mentioned...

Water pipes are often form the earth line. If only 60hz (US) can get through
the power cables then only 60 hz can get into the water pipes (I'll ignore
re-radiating, because water pipes are the least of your problems there).

-- 
"Of all tyrannies a tyranny sincerely  exercised for the good of its victims  
 may be the most  oppressive.  It may be better to live under  robber barons  
 than  under  omnipotent  moral busybodies,  The robber baron's  cruelty may  
 sometimes sleep,  his cupidity may at some point be satiated; but those who  
 torment us for own good  will torment us  without end,  for they do so with 
 the approval of their own conscience."    -   C.S. Lewis, _God in the Dock_ 
+---------------------+--------------------+----------------------------------+
|Julian Assange RSO   | PO Box 2031 BARKER | Secret Analytic Guy Union        |
|proff@suburbia.net   | VIC 3122 AUSTRALIA | finger for PGP key hash ID =     |
|proff@gnu.ai.mit.edu | FAX +61-3-98199066 | 0619737CCC143F6DEA73E27378933690 |
+---------------------+--------------------+----------------------------------+

> Water pipes are often form the earth line. If only 60hz (US) can get through
> the power cables then only 60 hz can get into the water pipes (I'll ignore
> re-radiating, because water pipes are the least of your problems there).

The high-frequency harmonics from your computers are probably above the
cutoff frequency of the water-pipes when considered as circular waveguides.
The water filling will act as a dielectric, bringing F0 down.  So, it
is conceivable that extremely high frequency radiation (>3 Ghz) could
propagate well in a water pipe.

Julian Assange wrote:
> 
> >
> > Bill Stewart writes:
> > >  Also, of course, your electrical power system needs to be
> > >  shielded and filtered, so only 60Hz gets through, unless you
> > >  plan to stick to laptops and bring in spare battery packs.
> >
> > At HoHoCon a few years ago, someone did a tempest demo and mentioned that
> > signals could be recovered from water pipes!  Fire sprinkler systems were
> > specifically mentioned...
> 
> Water pipes are often form the earth line. If only 60hz (US) can get through
> the power cables then only 60 hz can get into the water pipes (I'll ignore
> re-radiating, because water pipes are the least of your problems there).

As the water pipe can form a signal "drain", monitoring that with respoect to an 
artificial refernce "earth" allowsthe signal(s) to be reccovered, unless the waterpipe is of very low 
impedance.
lyal

-- 
All mistakes in this message belong to me - you should not use them!