[mythtv-users] Packet sniffing consumer electronic devices

[Stephen P. Villano]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


On 12/3/13, 11:10 PM, John Morris wrote:
> On Tue, 2013-12-03 at 23:06 +0000, Gary Buhrmaster wrote:
>
>> I think you misunderstand the actual interpretation of
>> the term "air gap" in the security community.  As
>> Jay alludes to, a Faraday room (cage) may be part
>> of the actual implementation.  In some environments,
>> EMSEC has to be considered.
>
> An air gap is usually understood to mean an isolated workstation or a
> network disconnected from any link to 'the world.'  Faraday cages are
> way beyond that basic level and you are talking TEMPEST protection.  The
> problem is these terms predate WiFi.
>
> Any device with a live (electrically) radio (WiFI/BT/NFC) has to be
> considered connected to the world, especially when you have no access to
> the software controlling it.  Can you PROVE that your TV's WiFi won't
> quietly associate to a hidden ESSID when the Google Streetview car
> drives by and upload your viewing history?  Not doubt it would, PROVE it
> won't?
>
> Yes, seriously thinking this way for any length of time will drive you
> mad.
>
>
> _______________________________________________
>
Sort of, the isolated network may have an aisle server with significant
filtering and highly restricted access to transfer data between
information domains.

But, for fun, *I* can prove my TV won't associate with anything. Not a
single one of them are network capable.
They also don't show up on passive scans that ran for weeks or on active
scans. (No, I'm not *that* paranoid, but do do periodic security scans
and once, needed network access and had zero connectivity and hence,
tried quick and easy access.)

Have *yet* to go mad, but think on it all the time. But then, I did that
in my military career in non-electronic terms, later, in electronic
terms and network terms. I'm also quite good at asymmetric warfare.
But then, in that last does lie madness.  ;)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iF4EAREIAAYFAlKesR0ACgkQ3XOy3AMq/gkT7QEAys/v+e+c7hkROybs6qjt/+ma
fBFEpmVc2WdVlPQr5icA/j4+dQc9/vaDosHpqsECwJaG19oy/rSLDsn2B55uYDOd
=xP3v
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.mythtv.org/pipermail/mythtv-users/attachments/20131203/82009d91/attachment.html>