Chaos Program

I’ve been taking a class in computer forensics and, possibly because the textbook is very dull, sometimes my mind wanders to odd implications of what I’m reading. There are some known facts about most operating systems that work in favor of forensic investigators. For example, the contents of deleted files linger on a system, sometimes for a very long very long time. The traces can be found and reconstructed by someone with the right tools and know how.

There are times when there are legitimate reasons to try to avoid this. The most widely known of these is when the defense department gets rid of old equipment. It’s important to wipe the data on a hard drive in such a way that it is close to impossible to recover, in order to protect defense secrets. And whatever porn and games the poor defense workers may have downloaded during lunch.

What about resistance members (assuming there are any) in totalitarian countries (assuming they can even get their hands on a computer)? Don’t they also have legitimate reason to hide the traces of what they’ve done? How about spies? When someone from a free country tries to gather hidden information in a totalitarian country (let’s say British spies in Iran, since the Soviet Union is gone and the CIA is not what it once was), being caught could mean torture and death. For them, having an operating system that reliably deletes evidence could literally be a life saver.

That was what got me thinking, wouldn’t it be goo dif those people had access to an operating system that automatically did things to protect their lives? read more »

It seems that everywhere I look lately there’s news about a new “weakness” found in the RSA algorithm. This has been reported with headlines screaming about the “severe” weakness and how everything in the universe that is encrypted depends on RSA. For examples of those rather overheated stories look here and here.

Let’s have a moment of sanity please. The sky is not falling. The attack described depends on manipulating the power supply of the targeted system, making tiny changes in the voltage to generate bad output from the algorithm. It’s a very interesting attack technique but the actual risk of it happening in the real world is incredibly low. Anyone who can get close enough to manipulate the power to a unit can do lots of other much more interesting things to it.

In general, no one can get close enough to perform this kind of attack.  Locking the doors on the server rooms is a standard IT practice. You see, most criminals who get close enough to attach the equipment needed to play games with the power supply are much more likely to simply unplug it and steal the computer.  We guard against that sort of thing and, incidentally, against creative attacks on the power as well.

This is just one more example (in a nearly infinite list) of why the news should never be taken at face value. Read carefully. THINK. Apply salt liberally and move on to something less ridiculous.