<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: satellite]]></title>
    <link>http://securityratty.com/tag/satellite</link>
    <description></description>
    <pubDate>Mon, 08 Sep 2008 09:41:55 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Is That a Coffee Table or a Munition?]]></title>
      <link>http://securityratty.com/article/bcc3ebc100f5b51c419148587e587e92</link>
      <guid>http://securityratty.com/article/bcc3ebc100f5b51c419148587e587e92</guid>
      <description><![CDATA[One of the standard software security prescriptions for the SDLC is to data classification and enforce least privilege. From a security perspective this sounds fantastic, especially on a whiteboard....]]></description>
      <content:encoded><![CDATA[<p>One of the standard software security prescriptions for the SDLC is to data classification and enforce least privilege. From a security perspective this sounds fantastic, especially on a whiteboard. When the rubber meets the real world road, things often turn out slightly different.&#0160;</p><br /><div>It turns out that it is hard to conduct business with excessive granularity.</div><div><a href="http://1raindrop.typepad.com/.a/6a00d83451c75869e201053619a7a7970b-pi" style="display: inline;"><a href="http://www.economist.com/displaystory.cfm?story_id=11965352"><img alt="D3408BB1" class="at-xid-6a00d83451c75869e201053619a7a7970b " src="http://1raindrop.typepad.com/.a/6a00d83451c75869e201053619a7a7970b-320wi" /></a></a><span style="font-family: &#39;Trebuchet MS&#39;; ">
</span> <br /></div><br /><div>Here is an <a href="http://www.economist.com/displaystory.cfm?story_id=11965352">article</a> from The Economist on the challenges of space technology, commercialization and information sharing. This is widely applicable to corporate information security policies:</div><br /><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="font-family: Verdana; font-weight: bold; line-height: normal; ">Gravity is not the main obstacle for America’s space business. Government is</span></p><p><span style="font-family: Verdana; line-height: normal; ">IN THE spring of 2006 Robert Bigelow needed to take a stand on a trip to Russia to keep a satellite off the floor. The stand was made of aluminium. It had a circular base and legs. It was, says the entrepreneur and head of Bigelow Aerospace in Nevada, “indistinguishable from a common coffee table”. Nonetheless, the American authorities told Mr Bigelow that this coffee table was part of a satellite assembly and so counted as a munition. During the trip it would have to be guarded by two security officers at all times.</span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="font-family: Verdana; line-height: normal;"><br /></span><span style="font-family: Verdana; line-height: normal; ">Exporting technology has always presented a dilemma for America. The country leads the world in most technologies and some of these give it a military advantage. If export rules are too lax, foreign powers will be able to put American technology in their systems, or copy it. But if the rules are too tight, then it will stifle the industries that depend upon sales to create the next generation of technology.</span><br /><span style="font-family: Verdana; line-height: normal; "><br /></span></p></blockquote><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><p><span style="font-family: Verdana; line-height: normal; ">It is a difficult balance to strike and critics charge that America has erred on the side of stifling. They claim that overly strict export controls have so damaged the space industry that America’s national security is now threatened by its dwindling leadership in space technology. The system, they complain, fails to distinguish between militarily sensitive hardware that should be controlled and widely available commercial technologies, such as lithium-ion batteries and solar cells. The zealous application of the export rules is the American space industry’s biggest handicap.</span></p></blockquote><div><span style="font-family: Verdana; font-weight: bold; line-height: normal;"><br /></span></div><div><span style="font-family: Verdana; line-height: normal; ">Read the whole thing its fascinating. So what started off as well intentioned asset protection eventually compromised the most important asset of all - strategic advantage.</span></div><div><span style="font-family: Verdana; line-height: normal;"><br /></span></div><div><span style="font-family: Verdana; line-height: normal;">So what&#39;s a better model? I am partial to think about these sorts of problems as free trade agreements. Each integration point should have a set of policies, and enforcement mechanisms that also include compensating transactions.</span></div><div><span style="font-family: Verdana; line-height: normal;"><br /></span></div><div><span style="font-family: Verdana; line-height: normal;">For example, did you know that in the US you can buy companies that trade on other exchanges through ADRs? You buy the ADR of say a French Telco which trades on a European exchange only you buy the ADR on the NYSE or Nasdaq. Then the French Telco issues you a dividend because you are a shareholder, but the French government withholds the dividend for foreign owners. Yet because there is a free trade agreement between the two countries, the US lets you write off the unreceived portion of the dividend on your taxes. (this may or may not be the case in US-France just an example). Anyway, its not a silver bullet but its an interesting strategy.</span></div><div><span style="font-family: Verdana; line-height: normal;"><br /></span></div>]]></content:encoded>
      <pubDate>Tue, 25 Nov 2008 09:40:20 +0000</pubDate>
      <category domain="http://securityratty.com/tag/coffee table">coffee table</category>
      <category domain="http://securityratty.com/tag/technology">technology</category>
      <category domain="http://securityratty.com/tag/american technology">american technology</category>
      <category domain="http://securityratty.com/tag/free trade agreement">free trade agreement</category>
      <category domain="http://securityratty.com/tag/trade">trade</category>
      <category domain="http://securityratty.com/tag/space technology">space technology</category>
      <category domain="http://securityratty.com/tag/french telco issues">french telco issues</category>
      <category domain="http://securityratty.com/tag/common coffee table">common coffee table</category>
      <category domain="http://securityratty.com/tag/information security policies">information security policies</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/11/is-that-a-coffee-table-or-a-munition.html">Is That a Coffee Table or a Munition?</source>
    </item>
    <item>
      <title><![CDATA[Bug allowed free access to Sirius radio service]]></title>
      <link>http://securityratty.com/article/b5268e25f07eb646bd350a361073100c</link>
      <guid>http://securityratty.com/article/b5268e25f07eb646bd350a361073100c</guid>
      <description><![CDATA[TippingPoint says it has found a flaw in Sirius satellite radio that could be used to get free...]]></description>
      <content:encoded><![CDATA[TippingPoint says it has found a flaw in Sirius satellite radio that could be used to get free service.<br style="clear: both;"/>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:6acad2416f941b2621aa8eee66c2bb7c:LlVZrroWBH8SNqH9TpQpoNp2oph3QBoODK3hwOT6KPqy9%2BiKmX9guRox2bb3qoSucs53ljh5aTyn'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:55d7f65637fbfb5bf06c3324a8fbb372:QhicN8PPO1R8A%2BxLNsecv0jg0wYEvJx7Dv5%2B9z4WkZ6Gp%2B0a4jRjjMMKDZLbGkw3EuHB161whXnP0w%3D%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:3d40712052a42b0ba882df5fdf85ec2e:Lryzn%2F5b6EmmioqDALkOJPkZae%2BcnW5Xs0aAIc82NEy4%2FtM%2BsctnTPOKP3xCN9e0iwmRGIj2ECIeKQ%3D%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:879b0ab5bac9154c627009c6126f16e8:4Q0A%2Bz7P31b3Bvqgl9VsT%2BLjnSsMdZyv2g2CaiJVRQCIFMV58hdBBad2s8RIPfUrQyPRU2lRVURb3A%3D%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>
<a href="http://www.pheedo.com/feeds/ht.php?t=c&amp;i=a5a01f0291c9298e72cd52bd79e85e44&amp;p=1"><img style="border:0;" src="http://www.pheedo.com/feeds/ht.php?t=v&amp;i=a5a01f0291c9298e72cd52bd79e85e44&amp;p=1" border="0" /></a>
]]></content:encoded>
      <pubDate>Mon, 24 Nov 2008 02:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/sirius satellite radio">sirius satellite radio</category>
      <category domain="http://securityratty.com/tag/free service">free service</category>
      <category domain="http://securityratty.com/tag/tippingpoint">tippingpoint</category>
      <category domain="http://securityratty.com/tag/flaw">flaw</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=a5a01f0291c9298e72cd52bd79e85e44">Bug allowed free access to Sirius radio service</source>
    </item>
    <item>
      <title><![CDATA[Bug allowed free access to Sirius radio service]]></title>
      <link>http://securityratty.com/article/6c9926b0dfff0e6c94047521fcc9165f</link>
      <guid>http://securityratty.com/article/6c9926b0dfff0e6c94047521fcc9165f</guid>
      <description><![CDATA[Sirius XM Radio has quietly fixed a bug in its satellite radio system that provided a way for former subscribers to gain free access to the Sirius service since 2002, according to security vendor...]]></description>
      <content:encoded><![CDATA[Sirius XM Radio has quietly fixed a bug in its satellite radio system that provided a way for former subscribers to gain free access to the Sirius service since 2002, according to security vendor TippingPoint Technologies.<p><A href="http://ad.doubleclick.net/jump/idg.us.nwf.rss/security;sz=468x60;ord=79078?">
<IMG src="http://ad.doubleclick.net/ad/idg.us.nwf.rss/security;sz=468x60;ord=79078?" border="0" width="468" height="60"></A>
</p>]]></content:encoded>
      <pubDate>Sun, 23 Nov 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/radio">radio</category>
      <category domain="http://securityratty.com/tag/sirius">sirius</category>
      <category domain="http://securityratty.com/tag/satellite radio system">satellite radio system</category>
      <category domain="http://securityratty.com/tag/gain free access">gain free access</category>
      <category domain="http://securityratty.com/tag/sirius service">sirius service</category>
      <category domain="http://securityratty.com/tag/quietly fixed">quietly fixed</category>
      <category domain="http://securityratty.com/tag/bug">bug</category>
      <category domain="http://securityratty.com/tag/subscribers">subscribers</category>
      <source url="http://www.networkworld.com/news/2008/112408-bug-allowed-free-access-to.html?fsrc=rss-security">Bug allowed free access to Sirius radio service</source>
    </item>
    <item>
      <title><![CDATA[TV Website Of Saudi-owned Satellite Channel Al-Arabiya Hit By Cyber Attack]]></title>
      <link>http://securityratty.com/article/b2fe25bf376636e7d9026ff9176ca119</link>
      <guid>http://securityratty.com/article/b2fe25bf376636e7d9026ff9176ca119</guid>
      <description><![CDATA[Computer hackers claiming to be Shiite shut down the website of Saudi-owned satellite channel Al-Arabiya on Friday, a month after Iran reported similar attacks on many of its websites by hardline...]]></description>
      <content:encoded><![CDATA[Computer hackers claiming to be Shiite shut down the website of Saudi-owned satellite channel Al-Arabiya on Friday, a month after Iran reported similar attacks on many of its websites by hardline Sunnis. The website of the Dubai-based channel was taken over by the hackers who displayed a message which warned that &#8220;if attacks on Shiite [...]]]></content:encoded>
      <pubDate>Mon, 13 Oct 2008 22:05:43 +0000</pubDate>
      <category domain="http://securityratty.com/tag/channel">channel</category>
      <category domain="http://securityratty.com/tag/satellite channel al-arabiya">satellite channel al-arabiya</category>
      <category domain="http://securityratty.com/tag/website">website</category>
      <category domain="http://securityratty.com/tag/attacks">attacks</category>
      <category domain="http://securityratty.com/tag/similar attacks">similar attacks</category>
      <category domain="http://securityratty.com/tag/computer hackers">computer hackers</category>
      <category domain="http://securityratty.com/tag/hackers">hackers</category>
      <category domain="http://securityratty.com/tag/hardline sunnis">hardline sunnis</category>
      <category domain="http://securityratty.com/tag/shiite">shiite</category>
      <source url="http://cyberinsecure.com/tv-website-of-saudi-owned-satellite-channel-al-arabiya-hit-by-cyber-attack/">TV Website Of Saudi-owned Satellite Channel Al-Arabiya Hit By Cyber Attack</source>
    </item>
    <item>
      <title><![CDATA[Clarity on Qantas' Plans: OnAir and Aeromobile]]></title>
      <link>http://securityratty.com/article/d054a83a986c1d357ea394b9721e5121</link>
      <guid>http://securityratty.com/article/d054a83a986c1d357ea394b9721e5121</guid>
      <description><![CDATA[Trade mag Flightglobal gets the full story on Qantas' in-flight calling, texting, and Internet plans: A few days ago, it seemed to come out that Qantas had dropped Aeromobile (its test partner last...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/plane.jpg" align="right" border="0" hspace="5" /><a href="http://www.flightglobal.com/articles/2008/09/24/316457/qantas-reveals-connectivity-plans-for-a380s-a330s-and.html"><strong>Trade mag Flightglobal gets the full story on Qantas' in-flight calling, texting, and Internet plans:</strong></a> A few days ago, it seemed to come out that Qantas had dropped Aeromobile (its test partner last year) for OnAir, and was moving to Internet service on A380s instead of in-flight cell calling and texting. Flightglobal clears the air, and reveals that Qantas will offer all of the above. (I wrote about this in "<a href="http://wifinetnews.com/archives/008448.html"><strong>Sorry, Qantas, No Unfettered Broadband</strong></a>.")</p>

<p>OnAir was chosen for A380 service, with the initial rollout--especially for international flights--using the 64 Kbps Inmarsat satellite offering, which is too paltry for anything but limited text communication. When the recently launched Pacific satellite is active--which may take up to a year--OnAir and Qantas can upgrade to the luxurious nearly 500 Kbps per channel service. </p>

<p>The head of OnAir is pushing some mighty serious horsehockey, however, when he says as quoted by Flightglobal that he "is confident that once the full service is up and running, passengers will be able to access the Internet 'in exactly the same way as they can on the ground.'" That may be the case in terms of access, but not in terms of cost. The cost will be enormously high unless OnAir has a magic deal with Inmarsat that's previously undisclosed. I suspect a per MB charge will be in effect that will discourage much use. Calls and texting could be carried over the same system, of course.</p>

<p>Qantas plans to continue to work with Aeromobile for domestic service, with calls and texting available, on their Boeing 767-300s and Airbus A330-200s, Flightglobal reports. Aeromobile has plans to launch a full Internet service later this year using cached and live content. [link via <a href="http://www.setteb.it/"><strong>Fabio Zambelli</strong></a>]</p>]]></content:encoded>
      <pubDate>Wed, 24 Sep 2008 12:01:14 +0000</pubDate>
      <category domain="http://securityratty.com/tag/plans">plans</category>
      <category domain="http://securityratty.com/tag/qantas">qantas</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/channel service">channel service</category>
      <category domain="http://securityratty.com/tag/internet service">internet service</category>
      <category domain="http://securityratty.com/tag/qantas plans">qantas plans</category>
      <category domain="http://securityratty.com/tag/onair">onair</category>
      <category domain="http://securityratty.com/tag/flightglobal">flightglobal</category>
      <category domain="http://securityratty.com/tag/trade mag flightglobal">trade mag flightglobal</category>
      <source url="http://wifinetnews.com/archives/008458.html">Clarity on Qantas' Plans: OnAir and Aeromobile</source>
    </item>
    <item>
      <title><![CDATA[Sorry, Qantas, No Unfettered Broadband]]></title>
      <link>http://securityratty.com/article/e46bb700b1a972d41bfd64aba65817f9</link>
      <guid>http://securityratty.com/article/e46bb700b1a972d41bfd64aba65817f9</guid>
      <description><![CDATA[Qantas backs off from earlier plans, changes provider for in-flight broadband: The Sydney Morning Herald somewhat erratically and incompletely reports that Qantas has delayed and modified its...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/plane.jpg" align="right" border="0" hspace="5" /><a href="http://www.smh.com.au/news/travel/qantas-limits-access-to-web/2008/09/17/1221330929870.html"><strong>Qantas backs off from earlier plans, changes provider for in-flight broadband:</strong></a> The Sydney Morning Herald somewhat erratically and incompletely reports that Qantas has delayed and modified its in-flight broadband plans. Aeromobile was the provider when the service <a href="http://www.breakingtravelnews.com/article.php?story=2007081609481129&query=qantas"><strong>was tested in second quarter 2007</strong></a>, but OnAir is now described as the airline's partner. This was noted by colleague Fabio Zambelli, who emailed me the news, and <a href="http://www.setteb.it/content/view/4742"><strong>has his own account</strong></a> at 7BIT (in Italian).</p>

<p><a href="http://www.onair.aero/index.php?pid=123"><strong>OnAir</strong></a> has so far tested their calling/texting-only service on two aircraft--one operated by Air France, one by TAP Portugal--even though RyanAir announced plans that its planes would started being unwired with the service by late 2007. Still no word on that fleet progress.</p>

<p>Qantas will apparently launch cached Web browsing and limited Web email (probably through a proxy) along with instant messaging, with full Internet service coming "later in 2009." This is clearly due to a lack of satellite coverage that was just remediated a few weeks ago (see below). The first plane with limited service, a new A380, should be in flight 20-October-2008.</p>

<div style="float:right; margin:0px; padding-left: 10px; padding-bottom: 0px;"><p><img src="http://wifinetnews.com//images/2008/SorryQantas.jpg" alt="SorryQantas.jpg" border="0" width="100" height="152"></p><p style="font-size: 10px">I hate in-flight<br/>broadband</p></div>To Qantas' credit, note that each seat on the plane will have a laptop opower socket, a USB port, and a multimedia system that can show 100 movies and 500 TV show episodes, play the contents of 1,000 CDs and 20 radio stations, and offer 80 games. 

<p>The Morning Herald seems to overstate the importance and scope of a complaint filed by the union representing American Airlines' flight attendants. The detailed coverage in the U.S. had more to do with the potential for issues, and likely attendants lack of interest in policing yet another media on the plane. Filtering doesn't work, the attendants probably already know, and this may just be a negotiating point with the airline.</p>

<p>On why Qantas is waiting until late 2009? This requires unwinding how OnAir gets its signal.</p>

<p>Aeromobile and OnAir both rely on Inmarsat satellites for their service. Both companies had several years ago staked their futures on the fourth-generation network Inmarsat was to inaugurate with three satellites that would use beamforming to allow precise delivery of nearly 500 Kbps per receiver, with hundreds or thousands of regions being able to be targeted from a single satellite. Inmarsat's third-gen network--don't confuse this with 3G cellular ground-based networks--can deliver about 64 Kbps per channel.</p>

<p>Now, unfortunately, Inmarsat was three years late on launching its trans-Pacific bird. While the company <a href="http://www.inmarsat.com/About/Newsroom/Press/00021465.aspx?language=EN&textonly=False"><strong>claims 85 percent coverage of the earth</strong></a> and 98 percent coverage of population, there's a big gap over the Pacific that also prevents them from having good overlap between the U.S. and Japan/China/Korea, as well as the southern Pacific, covering Australia. Since the biggest market for long-haul flights would likely be Australia, Japan, and China, traveling trans-Pacific or trans-hemispheric routes, that gap is rather large.</p>

<p>Aeromobile opted to build out a service, deployed only by Emirates airline as far as I can tell, that uses the 3G service since it was available, and most necessary equipment is already installed on most over-water planes. OnAir was waiting for 4G, which has necessitated a long wait, but allowed them to launch in Europe with a seemingly next-generation service. Given that OnAir is controlled by an airline-owned integration firm, SITA, and by Airbus, they're not going anywhere.</p>

<p>Inmarsat finally <a href="http://spaceflightnow.com/proton/i4f3/"><strong>lofted its third satellite on Baikonur Cosmodrome in Kazakhstan</strong></a> on 19-August-2008, and the launch and separation was reported as successful. Previously, the company has needed up to a year to verify and deploy its 4G satellites. (You can <a href="http://forum.nasaspaceflight.com/index.php?topic=12380.105"><strong>read extremely close coverage of the launch</strong></a> at a Web site devoted to space enthusiasm.)</p>

<p>However, the dirty little secret about Inmarsat's BGAN is that it costs a fortune to heft bandwidth across it. Thus, in-flight broadband over BGAN, if it's ever available, is going to be changed on an extremely high per-MB rate. None of the providers want to say this. This is in contrast to Row 44 (and, once, Connexion by Boeing), which relies on leased Ku-band transponders where they can fix costs and they require high volumes to keep per-bit costs efffectively low.</p>

<p>OnAir's launch of calling on Air France's service involves paying a few euros per minute for calls, which might help you understand what data costs could ultimately run.</p>]]></content:encoded>
      <pubDate>Thu, 18 Sep 2008 06:33:20 +0000</pubDate>
      <category domain="http://securityratty.com/tag/satellite coverage">satellite coverage</category>
      <category domain="http://securityratty.com/tag/coverage">coverage</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/service involves">service involves</category>
      <category domain="http://securityratty.com/tag/internet service">internet service</category>
      <category domain="http://securityratty.com/tag/in-flight broadband plans">in-flight broadband plans</category>
      <category domain="http://securityratty.com/tag/plans">plans</category>
      <category domain="http://securityratty.com/tag/inmarsat satellites">inmarsat satellites</category>
      <category domain="http://securityratty.com/tag/inmarsat">inmarsat</category>
      <source url="http://wifinetnews.com/archives/008448.html">Sorry, Qantas, No Unfettered Broadband</source>
    </item>
    <item>
      <title><![CDATA[GPS Spoofing]]></title>
      <link>http://securityratty.com/article/301910a8390d678e528ed1556dd2bb4e</link>
      <guid>http://securityratty.com/article/301910a8390d678e528ed1556dd2bb4e</guid>
      <description><![CDATA[Interesting : Jon used a desktop computer attached to a GPS satellite simulator to create a fake GPS signal. Portable GPS satellite simulators can fit in the trunk of a car, and are often used for...]]></description>
      <content:encoded><![CDATA[<p><a href="http://philosecurity.org/2008/09/07/gps-spoofing">Interesting</a>:</p>

<blockquote>Jon used a desktop computer attached to a GPS satellite simulator to create a fake GPS signal. Portable GPS satellite simulators can fit in the trunk of a car, and are often used for testing. They are available as commercial off-the-shelf products. You can also rent them for less than $1K a week -- peanuts to anyone thinking of hijacking a cargo truck and selling stolen goods.

<p>In his first experiments, Jon placed his desktop computer and GPS satellite simulator in the cab of his small truck, and powered them off an inverter. The VAT used a second truck as the victim cargo truck. "With this setup," Jon said, "we were able to spoof the GPS receiver from about 30 feet away. If our equipment could broadcast a stronger signal, or if we had purchased stronger signal amplifiers, we certainly could have spoofed over a greater distance."</p>

<p>During later experiments, Jon and the VAT were able to easily achieve much greater GPS spoofing ranges. They spoofed GPS signals at ranges over three quarters of a mile. "The farthest distance we achieved was 4586 feet, at Los Alamos," said Jon. "When you radiate an RF signal, you ideally want line of sight, but in this case we were walking around buildings and near power lines. We really had a lot of obstruction in the way. It surprised us." An attacker could drive within a half mile of the victim truck, and still override the truck's GPS signals.</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=XoEIL"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=XoEIL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=JZqYL"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=JZqYL" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Wed, 17 Sep 2008 03:03:53 +0000</pubDate>
      <category domain="http://securityratty.com/tag/gps">gps</category>
      <category domain="http://securityratty.com/tag/fake gps signal">fake gps signal</category>
      <category domain="http://securityratty.com/tag/signal">signal</category>
      <category domain="http://securityratty.com/tag/gps satellite simulator">gps satellite simulator</category>
      <category domain="http://securityratty.com/tag/truck">truck</category>
      <category domain="http://securityratty.com/tag/victim truck">victim truck</category>
      <category domain="http://securityratty.com/tag/victim cargo truck">victim cargo truck</category>
      <category domain="http://securityratty.com/tag/stronger signal amplifiers">stronger signal amplifiers</category>
      <category domain="http://securityratty.com/tag/cargo truck">cargo truck</category>
      <source url="http://www.schneier.com/blog/archives/2008/09/gps_spoofing.html">GPS Spoofing</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: Indian Terror over Wi-Fi; Fastest Wireless; Health Fears; Wi-Fi Tub; and More]]></title>
      <link>http://securityratty.com/article/38100bf79f0cedd88c5f6a02e45c5a85</link>
      <guid>http://securityratty.com/article/38100bf79f0cedd88c5f6a02e45c5a85</guid>
      <description><![CDATA[Another terror message sent via open Wi-Fi in India: Credit for terrorist blasts in Delhi was sent by email minutes before the attack took place using a Wi-Fi network owned by a retired engineer's...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/weefi.jpg" align="right" border="0" hspace="5" /><a href="http://www.telegraphindia.com/1080915/jsp/nation/story_9835144.jsp"><strong>Another terror message sent via open Wi-Fi in India:</strong></a> Credit for terrorist blasts in Delhi was sent by email minutes before the attack took place using a Wi-Fi network owned by a retired engineer's wife. Though articles keep saying the network was "hacked," the Telegraph also notes that the network was "unsecured."</p>

<p>Italian free space optics test hits 1.2 terabits per second (<a href="http://www.corriere.it/scienze_e_tecnologie/08_settembre_11/wifi_pisa_record_3a9bf132-801f-11dd-9f6f-00144f02aabc.shtml">in Italian</a>, <a href="http://translate.google.com/translate?u=http://www.corriere.it/scienze_e_tecnologie/08_settembre_11/wifi_pisa_record_3a9bf132-801f-11dd-9f6f-00144f02aabc.shtml&hl=en&ie=UTF-8&sl=it&tl=en">Google translation</a>): Researchers in Pisa, Italy, along with colleagues from two Japanese institutions, crossed 1.2 Tbps in a test. Free space optics typically uses infrared lasers, and can work over a distance of kilometers. </p>

<p><a href="http://www.canada.com/montrealgazette/news/story.html?id=2e090761-519c-4de6-9ace-4153d6dc71d2"><strong>More Canadian Wi-Fi health fears:</strong></a> This time in an island in Montr&eacute;al. One of the concerned citizens: "This is something that is really under the radar. People do not know that long-term health hazards are associated with wireless technology." They don't know that because all verifiable, repeatable, well-conducted, academic tests so far indicate that there's no such health hazard associated with EMF. The concerned folks are raising an alarm about Wi-Fi being broadcast island wide, but are not paying attention, obviously, to the AM/FM radio, satellite radio, cellular, cordless, and thousand other wireless uses that are bombarding them right now, often at far higher signal levels.</p>

<p><a href="http://www.washingtonpost.com/wp-dyn/content/article/2008/09/13/AR2008091300340.html"><strong>Wi-Fi in a tub:</strong></a> I'm not going to say anything more.</p>

<p><a href="http://www.quickertek.com/products/expresscard.php"><strong>QuickerTek adds antenna to 300 mW ExpressCard for MacBook Pro:</strong></a> Users of Apple's higher-end laptops can drop $200 to get a 300 mW Draft N (802.11n) ExpressCard and 5 dBi external antenna with a mounting clip. That's a lot of power, and it's important to recall that have a louder signal doesn't mean that distant base stations can necessarily hear you better. Draft N devices typically pair better listening (receive sensitivity) with higher transmission power, however.</p>

<p><a href="http://networklocationapp.com/"><strong>Mac product ties location settings to Wi-Fi position:</strong></a> Centrix has updated its $29 Mac OS X location preferences program NetworkLocation to take advantage of Skyhook Wireless's Wi-Fi positioning data. You can now tie the package of settings that control what email account you use, iChat status, programs launched, disks mounted, and other factors, to where you're currently at.</p>]]></content:encoded>
      <pubDate>Mon, 15 Sep 2008 06:03:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/wi-fi">wi-fi</category>
      <category domain="http://securityratty.com/tag/wi-fi network owned">wi-fi network owned</category>
      <category domain="http://securityratty.com/tag/wireless">wireless</category>
      <category domain="http://securityratty.com/tag/wi-fi position">wi-fi position</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/skyhook wireless">skyhook wireless</category>
      <category domain="http://securityratty.com/tag/broadcast island wide">broadcast island wide</category>
      <category domain="http://securityratty.com/tag/island">island</category>
      <category domain="http://securityratty.com/tag/dbi external antenna">dbi external antenna</category>
      <source url="http://wifinetnews.com/archives/008439.html">Wee-Fi: Indian Terror over Wi-Fi; Fastest Wireless; Health Fears; Wi-Fi Tub; and More</source>
    </item>
    <item>
      <title><![CDATA[Gait Analysis from Satellite]]></title>
      <link>http://securityratty.com/article/c4329cf7b26fedf8f9283beaa7d4c09c</link>
      <guid>http://securityratty.com/article/c4329cf7b26fedf8f9283beaa7d4c09c</guid>
      <description><![CDATA[Ignoring the sensationalist headline , this is interesting: By analysing the movements of human shadows in aerial and satellite footage, JPL engineer Adrian Stoica says it should be possible to...]]></description>
      <content:encoded><![CDATA[<p>Ignoring the <a href="http://technology.newscientist.com/channel/tech/mg19926725.800?DCMP=NLC-nletter&nsref=mg19926725.800">sensationalist headline</a>, this is interesting:</p>

<blockquote>By analysing the movements of human shadows in aerial and satellite footage, JPL engineer Adrian Stoica says it should be possible to identify people from the way they walk -- a technique called gait analysis, whose power lies in the fact that a person's walking style is very hard to disguise.

<p>Video taken from above shows only people's heads and shoulders, which makes measuring the characteristic length and rhythm of a person's stride impossible. That's not true of shadows, though, Stoica told a security conference in Edinburgh, UK, last month. Shadows, he says, provide enough gait data to deduce a positive ID. To prove it, he has written software that recognises human movement in aerial and satellite video footage. It isolates moving shadows and uses data on the time of day and the camera angle to correct shadows if they are elongated or foreshortened. Regular gait analysis is then applied to identify people. In tests on footage shot from the sixth floor of a building, Stoica says his software was indeed able to extract useful gait data.</blockquote></p>

<p>The article goes on to say that using satellite images would be harder, but that the basic idea is the same.</p>

<p>Of course, this is less useful for finding individuals and more useful for tracking a population as it moves about its day.  But some individuals will have more distinctive gaits than others, and will be easier to track.  Soon we may all need to walk with <a href="http://www.scribd.com/doc/2937714/Cory-Doctorow-Little-Brother">rocks in our shoes</a>.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=QLnhL"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=QLnhL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=VvB5L"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=VvB5L" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Tue, 09 Sep 2008 08:22:42 +0000</pubDate>
      <category domain="http://securityratty.com/tag/gait analysis">gait analysis</category>
      <category domain="http://securityratty.com/tag/shadows">shadows</category>
      <category domain="http://securityratty.com/tag/correct shadows">correct shadows</category>
      <category domain="http://securityratty.com/tag/human shadows">human shadows</category>
      <category domain="http://securityratty.com/tag/data">data</category>
      <category domain="http://securityratty.com/tag/gait data">gait data</category>
      <category domain="http://securityratty.com/tag/regular gait analysis">regular gait analysis</category>
      <category domain="http://securityratty.com/tag/video">video</category>
      <category domain="http://securityratty.com/tag/satellite video footage">satellite video footage</category>
      <source url="http://www.schneier.com/blog/archives/2008/09/gait_analysis_f.html">Gait Analysis from Satellite</source>
    </item>
    <item>
      <title><![CDATA[Google Military-Controlled Satellite: 'We Don't Feel Lucky']]></title>
      <link>http://securityratty.com/article/4869bc97ba9192a092a4fd763ddb69b1</link>
      <guid>http://securityratty.com/article/4869bc97ba9192a092a4fd763ddb69b1</guid>
      <description><![CDATA[Google Military-Controlled Satellite Reaches Orbit, We Don't Feel LuckyAccording to the company, the GeoEye-1 satellite is the highest resolution commercial satellite orbiting the planet right now. It...]]></description>
      <content:encoded><![CDATA[Google Military-Controlled Satellite Reaches Orbit, We Don't Feel LuckyAccording to the company, the GeoEye-1 satellite is the highest resolution commercial satellite orbiting the planet right now. It reached orbit yesterday, but in reality, it's not an ordinary commercial satellite: it's fully controlled by the Department of Defense's U.S. ]]></content:encoded>
      <pubDate>Mon, 08 Sep 2008 09:41:55 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ordinary commercial satellite">ordinary commercial satellite</category>
      <category domain="http://securityratty.com/tag/satellite reaches orbit">satellite reaches orbit</category>
      <category domain="http://securityratty.com/tag/resolution commercial satellite">resolution commercial satellite</category>
      <category domain="http://securityratty.com/tag/google">google</category>
      <category domain="http://securityratty.com/tag/geoeye-1 satellite">geoeye-1 satellite</category>
      <category domain="http://securityratty.com/tag/orbit yesterday">orbit yesterday</category>
      <category domain="http://securityratty.com/tag/department">department</category>
      <category domain="http://securityratty.com/tag/defense">defense</category>
      <category domain="http://securityratty.com/tag/reality">reality</category>
      <source url="http://digg.com/security/Google_Military_Controlled_Satellite_We_Don_t_Feel_Lucky">Google Military-Controlled Satellite: 'We Don't Feel Lucky'</source>
    </item>
  </channel>
</rss>
