The big big flaw with all the talk on the palm / psion front is the assumption that data isn't encrypted. Anyone half-sensible does that already with sensitive data. There are plenty of strong encryption tools out there see gnu keyring or secure memo by certicom for good examples. What is missing is a decent authentication scheme / sec comms, one thing I thought of was given both palm and psion have a tcpip stack and have ssh clients (excepting the palm VII) tunneling could be a solution (if normal IR comms can be securely restricted.) Has anyone tried this ? L > -----Original Message----- > From: Oliver Petruzel [mailto:opetruzelat_private] > Sent: Tuesday, April 17, 2001 7:21 AM > To: PEN-TESTat_private > Subject: [PEN-TEST] infrared question > > > I was thinking about the following question and wanted to throw it to > the wolves for input: > > Is it possible to code a pocket pc or similar infrared app which > sends/recieves without anouncing itself by opening a dialog on the > target system? In other words: > > Scenerio A: > Upon entering a briefing/meeting, one could run this app, set > his device > down directly across the table from someone else's system (target) and > send/receive data without the target owner noticing? > > Has something like this been coded? Puclically? Are there mechanisms > within palm os/windows to prevent this? If so, what are they? > > Thanks. > > _____________________________________ > Oliver Petruzel > Systems Engineer, Eastern Region > Entercept Security Technologies > www.entercept.com > Work: (703)250-3280 > Cell: (703)608-8250 > Home: (703)250-1059 > Personal Email: opetruzelat_private > Business Email: opetruzelat_private >
This archive was generated by hypermail 2b30 : Sat Apr 21 2001 - 10:31:10 PDT