cryptogon.com

Security researchers found that poor shielding on some keyboard cables means useful data can be leaked about each character typed.

By analysing the information leaking onto power circuits, the researchers could see what a target was typing.

The attack has been demonstrated to work at a distance of up to 15m, but refinement may mean it could work over much longer distances.

Hotel attack

“Our goal is to show that information leaks in the most unexpected ways and can be retrieved,” wrote Andrea Barisani and Daniele Bianco, of security firm Inverse Path, in a paper describing their work.

The research focussed on the cables used to connect PS/2 keyboards to desktop PCs.

Usefully, said the pair, the six wires inside a PS/2 cable are typically “close to each other and poorly shielded”. This means that information travelling along the data wire, when a key is pressed, leaks onto the ground wire in the same cable.

The ground wire, via the PC’s power unit, ultimately connects to the plug in the power socket, and from there leaks out onto the circuit supplying electricity to a room.

Even better, said the researchers, data travels along PS/2 cables one bit at a time and uses a clock speed far lower than any other PC component. Both these qualities make it easy to pick out voltage changes caused by key presses.

A digital oscilloscope was used to gather data about voltage changes on a power line and filters were used to remove those caused by anything other than the keyboard.

“The PS/2 signal square wave is preserved with good quality… and can be decoded back to the original keystroke information,” wrote the pair in a paper describing their work.

They demonstrated it working over distances of 1, 5, 10 and 15m from a target, far enough to suggest it could work in a hotel or office.

“The test performed in the laboratory represent a worst case scenario for this type of measurement, which along with acceptable results emphasizes the feasibility of the attack on normal conditions,” they added.

The pair said their research was “work in progress” and expect the equipment to get more sensitive as it is refined.

New Fabris was declared in liquidation in April, so the workers stand to get no redundancy money, although they are entitled to draw state unemployment benefit.

They want Renault SA and PSA Peugeot Citroen to pay 30,000 euros ($41,800) for each of the 336 staff at the factory, or some 10 million euros in total, in return for its remaining stocks of equipment and machinery.

“The bottles of gas have already been placed at various parts of the factory and are connected with each other,” CGT trades union official Guy Eyermann told France Info radio.

“If Renault and PSA refuse to give us that money it could blow up before the end of the month,” he added

A delegation of the workers has a meeting on Thursday with Renault, which had no immediate comment. Police also declined to comment on the threat by the workers, who are occupying the New Fabris factory at Chatellerault, near Poitiers in central France.

The company is the successor to Fabris, founded in 1947 and put into liquidiation in 2007. It was later acquired by ZEN of Italy which is headed by Florindo Garro. ZEN SpA, based in Albignasego near Padua, makes cast iron parts for vehicles.

Garro controls other metal firms in France such as Rencast and SBFM that also have financial difficulties.

When the new vaccine for swine flu arrives in Britain, regulators said this weekend, it could be approved for use in just five days.

Regulators at the European Medicines Agency (EMEA) said the fast-tracked procedure has involved clinical trials of a “mock-up” vaccine similar to the one that will be used for the biggest mass vaccination programme in generations. It will be introduced into the general population while regulators continue to carry out simultaneous clinical trials.

The first patients in the queue for the jab – being supplied to the UK by GSK and Baxter Healthcare – may understandably be a little nervous at any possible side effects. A mass vaccination campaign against swine flu in America was halted in the 1970s after some people suffered Guillain-Barré syndrome, a disorder of the nervous system.

However, regulators said fast-tracking would not be at the expense of patient safety. “The vaccines are authorised with a detailed risk management plan,” the EMEA said. “There is quite a body of evidence regarding safety on the trials of the mock-up, and the actual vaccine could be assessed in five days.”

The UK government has ordered enough vaccine to cover the entire population. GPs are being told to prepare for a nationwide vaccination campaign.

Dr Peter Holden, the British Medical Association’s lead negotiator on swine flu, who has been attending Department of Health meetings on the outbreak, said GPs’ surgeries were prepared for one of the biggest vaccination campaigns in almost 50 years.

He said although swine flu was not causing serious illness in patients, health officials were eager to start a mass vaccination campaign, starting first on priority groups. First, the jabs would reduce the chances of a shortage of hospital beds because of people suffering from swine flu. Second, it would reduce the effect on the economy by ensuring workers were protected from the virus.

“The high-risk groups will be done at GPs’ surgeries. People are still making decisions over this, but we want to get cracking before we get a second wave, which is traditionally far more virulent.”

Holden said it was likely the elderly would be given their seasonal flu jab as well as the swine flu vaccination. The new vaccine is likely to require two doses.

Details of the inoculation plans emerged after the death of a patient, reportedly a middle-aged man, at a hospital in the Basildon area of Essex. The victim had no underlying health problems, but officials say there is no evidence the swine flu virus had mutated into a more dangerous strain.

Holden said it would be the biggest campaign in response to an outbreak since mass vaccination against smallpox in 1962. He said surgeries would be aiming to inoculate about 30 people an hour in a “military-style operation”.

The Department of Health said it had still not finalised which groups would be vaccinated first, but children, frontline health workers, people with underlying illnesses and the elderly are likely to take priority.

The European Commission is also identifying population groups which it believes should get priority. It is keen to ensure that countries such as the UK, which had ordered supplies of the vaccine in advance, do not cause inequities in treatment elsewhere in Europe.

It warned health ministers in a note circulated last month that if the vaccines were more readily available in some countries it could cause “vaccine tourism/shopping in other member states”.

The Foreign Ministry intends to hire young people who speak at least one language and who study communication, political science, or law – or alternately, Israelis with military experience gained at units dealing with information analysis.

Beyond the fact that these job requirements reveal a basic lack of understanding in respect to the dynamics of the online discourse – the project’s manager argued that “adults don’t know how to blog” – they are not too relevant either. An effective talkbacker does not need a law degree or military experience. He merely needs to care about the subject he writes about.

The sad truth is that had Israeli citizens believed that their State is doing the right thing, they would have made sure to explain it out of their own accord. Without being paid.

Foreign Ministry officials are fighting what they see as a terrible and scary monster: the Palestinian public relations monster. Yet nothing can be done to defeat it, regardless of how many foolish inventions will be introduced and how many bright communication students will be hired.

That’s because experiments have shown that the e-passport begins transmitting some data when opened even a half inch, and chipped passport cards and EDLs can be read from varying distances depending on reader techonology.

The cover of the e-passport booklet contains a metallic sheathing that can diminish the distances radio waves travel, presumably hindering unwanted interceptions. Alloy envelopes that come with the PASS cards and driver’s licenses do the same, the government says.

The State Department asserts that hackers won’t find any practical use for data skimmed from RFID chips embedded in the cards, but “if you don’t want the cards read, put them in an attenuation sleeve,” says John Brennan, a senior policy adviser at the Office of Consular Affairs.

Gigi Zenk, a spokeswoman for the Washington state Department of Licensing, says the envelope her state offers with the enhanced driver’s license “ensures that nothing can scan it at all.”

But that wasn’t what researchers from the University of Washington and RSA Laboratories, a data security company in Bedford, Mass., found last year while testing the data security of the cards.

The PASS card “is readable under certain circumstances in a crumpled sleeve,” though not in a well maintained sleeve, the researchers wrote in a report.

Another test on the enhanced driver’s license demonstrated that even when the sleeve was in pristine condition, a clandestine reader could skim data from the license at a distance of a half yard.

Will Americans consistently keep their enhanced driver’s licenses in the protective sleeves and maintain those sleeves in perfect shape – even as driver’s licenses are pulled out for countless tasks, from registering in hotels to buying alcohol?

The report’s answer: “It is uncertain … ”

And when the sleeves come off, “you’re essentially saying to the world, ‘Come and read what’s in my wallet,'” says Marc Rotenberg, executive director of the Electronic Privacy Information Center in Washington, D.C.

Dr Kelly’s body was found six years ago this week in woods close to his Oxfordshire home, shortly after he was exposed as the source of a BBC news report questioning the grounds for war in Iraq.

Unusually, no coroner’s inquest was held into his death.

The only official verdict has come from the Hutton Inquiry, commissioned by Tony Blair, which concluded that Dr Kelly, 59, died from loss of blood after cutting his wrist with a blunt gardening knife.

Critics regarded the report as a ‘whitewash’, and Mr Blair remains acutely sensitive to the accusation that he has ‘blood on his hands’ over the scientist’s death.

But now a team of 13 specialist doctors has compiled a detailed medical dossier that rejects the Hutton conclusion on the grounds that a cut to the ulnar artery, which is small and difficult to access, could not have caused death.

It will be used by their lawyers to demand a formal inquest and the release of Dr Kelly’s autopsy report, which has never been published. It will also be sent to Sir John Chilcot’s forthcoming inquiry into the Iraq War.

The 12-page opinion, a copy of which has been seen by The Mail on Sunday, concludes: ‘The bleeding from Dr Kelly’s ulnar artery is highly unlikely to have been so voluminous and rapid that it was the cause of death.

‘We advise the instructing solicitors to obtain the autopsy reports so that the concerns of a group of properly interested medical specialists can be answered.’

The doctors do not say how, or why, they believe Dr Kelly did die but they have worked closely with campaigning Liberal Democrat MP Norman Baker, who believes that the scientist was murdered by enemies he made in the course of his work as a weapons inspector.

…

They intend to use the Coroners Act to challenge Lord Falconer’s suspension of the inquest.

One of the doctors, David Halpin, told The Mail on Sunday that they had argued their case in the legal document in ‘microscopic’ detail.