(Adam Shostack, CC: cryptography, Wed Jun 22 15:04:45 2005)

On Wed, Jun 22, 2005 at 01:54:34PM +0100, Ian Grigg wrote:
| A highly aspirated but otherwise normal watcher of black helicopters asked:
|
| > Any idea if this is true?
| > (WockerWocker, Wed Jun 22 12:07:31 2005)
| > http://c0x2.de/lol/lol.html
|
| Beats me. But what it if it was true. What's your advice to
| clients?

"Duuude, stop buying Dell."

The Secret service isn't part of DHS. DHS seal is different. The photos don't really show that cable in a laptop, and if they do, they don't show it in a Dell laptop.

It is most likely a hoax:

http://www.boingboing.net/2005/06/16/conspiracy_theory_of.html

As to your second question. There are several options available to you depending on your level of paranoia:

1. Run a personal firewall (assuming you can find one that doesn't have a trojan that talks back to the manufacturer <cough> zone alarm </cough> ).

2. Monitor and review all traffic that flows from your ethernet card using Ethereal, TCPDump or some other program.

3. Use an on-screen keyboard.

allan

Hi Iang,

> It's going to happen so get used to it, guys. I'll go first: *I'll
> bet you didn't think of this:*
>
> http://c0x2.de/lol/lol.html

Its a hoax... it had me going for a while, I even sent it out to a couple of friends based on your email.

http://www.engadget.com/entry/1234000317047049/

I suppose keyghost loggers as easily available tho.

Cheers,

-v.

--
https://rayservers.com/
Computers. Installed Secure. OpenPGP. AES Encrypted HD. Colocation.
Tel:+1-607-546-7300 Fax:+1-607-546-7387 Skype: rayservers
PGP/GPG Key: https://rayservers.com/keys/0x12430522.asc
4856 01AB F8BA E0EB F128 A57F 59D9 16FD 1243 0522
Your Privacy and Security are our Business [TM]

They will use a brokerage firm because of the loopholes a national as in US payment system cost $6 Million in net capital with little or no value added a Broker Dealer captures the payments and the capital markets. Google sees this and will not buy the banking scenario. Google will adopt a multi-currency money market and avoid the banks like the plague. You must ask yourself who is the most influencial person at Google? The answer will tell you what direction they are heading. That person is Tim Armstrong a Paul Allen student and a microcurrency dude. Google will mint I tell you and mint from within a brokerage firm just like mutual funds do.

"Tim Armstrong presides over Google's US advertising sales and operations effort as leader of the company's national sales team. Armstrong has gained wide recognition as a proponent of online advertising and is frequently asked to present to industry leaders on how best to generate online advertising ROI.

"Armstrong joined Google from Snowball.com. As that company's vice president of Sales and Strategic Partnerships, he managed a team of 100 people and built the revenue foundation needed to take the company public in just 16 months. Armstrong was also responsible for key strategic partnerships that included equity and marketing investments by New Line Cinema and an exclusive partnership with the NFL.

"Prior to his role at Snowball.com, Armstrong served as national sales manager for IDG's first Internet magazine, I-Way before founding and serving as director of Integrated Sales & Marketing at Starwave's and Disney's ABC/ESPN Internet Ventures. Armstrong is a graduate of Connecticut College with a double major in Economics and Sociology.

http://c0x2.de/lol/lol.html is BS; the same photos appear at http://www.dansdata.com/keyghost.htm.

>> http://c0x2.de/lol/lol.html

googling 'dell keylogger' certainly turns up a lot of sites who insist that this is a hoax.

> Beats me. But what it if it was true. What's your advice to clients?

Um, be suspicious of keyboard changes? Bring your own if you're paranoid? Remove any "harmless" extension cables that suddenly attach themselves? Most server-class hardware already has 'tamper-detection' hardware that
will warn you if the machine has been opened, which should cover the "internal keylogger" case...

(suggests reasons why Dell was picked)

http://www.ioerror.us/2005/06/17/keylogger-found-in-dell-laptop/

Allan Liska wrote:
> 3. Use an on-screen keyboard.

For extra points, try Dasher.

http://www.inference.phy.cam.ac.uk/dasher/

Guys, do you really believe that any "decent IQ value" PC manufacturer whould build a mega visible device in tiny laptops to spy on your keyboard? No need to comment further . ROTFL.