TSCM Work from mcmandpmc on 2009-02-17 (file.mbox)

From: mcmandpmc <MCMa..._at_gmail.com>
Date: Tue, 17 Feb 2009 04:11:25 -0800 (PST)

>From - Sat Mar 02 00:57:28 2024
Received: by 10.36.126.9 with SMTP id y9mr3713138nzc;
 Tue, 12 Sep 2006 16:02:01 -0700 (PDT)
Return-Path: <kon..._at_phreaker.net>
Received: from smtp-out.hotpop.com (smtp-out.hotpop.com [38.113.3.71])
 by mx.googlegroups.com with ESMTP id h49si1779920nzf.2006.09.12.16.02.01;
 Tue, 12 Sep 2006 16:02:01 -0700 (PDT)
Received-SPF: neutral (googlegroups.com: 38.113.3.71 is neither permitted nor denied by best guess record for domain of kon..._at_phreaker.net)
Received: from phreaker.net (kubrick.hotpop.com [38.113.3.105])
 by smtp-out.hotpop.com (Postfix) with SMTP id 80AF72E95D8C
 for <TSCM-..._at_googlegroups.com>; Tue, 12 Sep 2006 23:01:51 +0000 (UTC)
Received: from router_4.phreaker.net (niagara-cuda1-24-52-121-144.kntnny.adelphia.net [24.52.121.144])
 by smtp-1.hotpop.com (Postfix) with ESMTP id 3368C14815B
 for <TSCM-..._at_googlegroups.com>; Tue, 12 Sep 2006 23:01:46 +0000 (UTC)
Message-Id: <7.0.1.0.2.20060912034941.03ed9b80_at_macronet.net>
X-Mailer: QUALCOMM Windows Eudora Version 7.0.1.0
Date: Tue, 12 Sep 2006 03:50:14 -0400
To: TSCM-L2006_at_googlegroups.com
From: kondrak <kon..._at_phreaker.net>
Subject: Fwd: [ISN] Lock guru says Targus still leaves notebooks
 vulnerable
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="=====================_128978937==.ALT"
X-HotPOP: -----------------------------------------------
 Sent By HotPOP.com FREE Email
 Get your FREE POP email at www.HotPOP.com
 -----------------------------------------------

--=====================_128978937==.ALT
Content-Type: text/plain; charset="us-ascii"; format=flowed

>
>
>http://www.twincities.com/mld/twincities/living/15473832.htm
>
>By JULIO OJEDA-ZAPATA
>Pioneer Press
>Sept. 11, 2006
>
>Computer-hardware makers keep churning out new laptop locks, and Marc
>Tobias keeps trying to crack them often with what he said is absurd
>ease.
>
>His new victim: Targus' Defcon CL Armor Combo Cable Lock. It's the
>latest in a series of devices with reinforced cables designed to lash a
>laptop (or any other computer with a built-in security slot) to an
>immovable object.
>
>Targus said it released the new lock partly in response to 2004 reports
>that an earlier version of the lock could be cracked with little effort
>as Tobias dramatically demonstrated to a Pioneer Press reporter at the
>time.
>
>But the new lock is all but worthless, said Tobias, a South Dakota lock
>and lock-picking authority. The $55 device, like its predecessor, sports
>a combination-style mechanism that slips into a security slot so a
>laptop can't be moved.
>
>But, much like the flawed earlier version, the new lock can be probed
>with ordinary objects a length of wire, a straightened paperclip or a
>sliver of pop-can metal, in this case to ascertain its combination,
>according to Tobias.
>
>This chore can be completed in minutes with little training, he argues.
>
>"Targus has learned little from their original mistake," Tobias writes
>in an analysis of the locking mechanism. It "continues to put laptop
>users at a significant risk of loss and theft."
>
>Targus' much-ballyhooed "steel-on-steel, extreme-cut-resistant" cable is
>also fatally flawed, Tobias said.
>
>Ringlets used to sheath the cable are, indeed, difficult to damage, he
>acknowledges. But a thief need only pry apart two of the ringlets to get
>at the cable beneath and slice it with ordinary cutting tools sold in
>hardware stores, he said.
>
>An outer transparent-plastic coating provides little protection because
>it can be easily cut or melted, Tobias adds.
>
>"Although the (lock) appears to be virtually invincible, it is not,"
>said Tobias, who suggests Targus hire better engineers.
>
>Tobias has details on the Targus lock and its vulnerabilities at
>www.security.org.
>
>He said recently released Kensington and PC Guardian locks have better
>locking mechanisms and harder-to-cut cables that offer far better if
>never absolute security for computer users.
>
>Targus defends its lock.
>
>"Based on our internal tests, the ringlets on our Defcon Armor lock are
>snug and have some movement to allow flexibility of the cable and still
>protect the cable from cable cutters," product manager Henry Watanabe
>said in a statement.
>
>"Our notebook lock is foremost a theft-deterrent device," Watanabe said,
>"and is one of the most robust notebook cable locks available in the
>market."
>
>Poorly reinforced security slots built into some laptops are "the
>weakest link" when using such locks, Watanabe argues. "The strength of
>(that) attach point varies quite widely from notebook to notebook. The
>stronger the attach point, the more secure the notebook."
>
>Tobias agrees that a computer lock's mechanism or the strength of its
>cable is irrelevant if a computer's security slot is easy to compromise.
>He said the slots must be cut into a hardened-metal portion of a
>computer or reinforced somehow.
>
>But, as the Pioneer Press recently found, ripping locks from too-fragile
>slots such as those built into certain HP laptops is all but effortless.
>
>-=-
>
>Julio Ojeda-Zapata can be reached at jojeda (at) pioneerpress.com or
>651-228-5467. For more personal technology on the Web or via RSS, go to
>TwinCities.com and click "Business," then "Personal Tech."
>
>2006 St. Paul Pioneer Press and wire service sources. All Rights
>Reserved.

--=====================_128978937==.ALT
Content-Type: text/html; charset="us-ascii"

<html>
<body>
<blockquote type=cite class=cite cite=""> 
<a href="http://www.twincities.com/mld/twincities/living/15473832.htm" eudora="autourl">
http://www.twincities.com/mld/twincities/living/15473832.htm</a> 
By JULIO OJEDA-ZAPATA 
Pioneer Press 
Sept. 11, 2006 
Computer-hardware makers keep churning out new laptop locks, and Marc
 
Tobias keeps trying to crack them often with what he said is absurd 
ease. 
His new victim: Targus' Defcon CL Armor Combo Cable Lock. It's the 
latest in a series of devices with reinforced cables designed to lash a
 
laptop (or any other computer with a built-in security slot) to an 
immovable object. 
Targus said it released the new lock partly in response to 2004 reports
 
that an earlier version of the lock could be cracked with little effort
 
as Tobias dramatically demonstrated to a Pioneer Press reporter at the
 
time. 
But the new lock is all but worthless, said Tobias, a South Dakota lock
 
and lock-picking authority. The $55 device, like its predecessor, sports
 
a combination-style mechanism that slips into a security slot so a 
laptop can't be moved. 
But, much like the flawed earlier version, the new lock can be probed
 
with ordinary objects a length of wire, a straightened paperclip or a
 
sliver of pop-can metal, in this case to ascertain its combination, 
according to Tobias. 
This chore can be completed in minutes with little training, he
argues. 
"Targus has learned little from their original mistake," Tobias
writes 
in an analysis of the locking mechanism. It "continues to put laptop
 
users at a significant risk of loss and theft." 
Targus' much-ballyhooed "steel-on-steel, extreme-cut-resistant"
cable is 
also fatally flawed, Tobias said. 
Ringlets used to sheath the cable are, indeed, difficult to damage, he
 
acknowledges. But a thief need only pry apart two of the ringlets to get
 
at the cable beneath and slice it with ordinary cutting tools sold in
 
hardware stores, he said. 
An outer transparent-plastic coating provides little protection because
 
it can be easily cut or melted, Tobias adds. 
"Although the (lock) appears to be virtually invincible, it is
not," 
said Tobias, who suggests Targus hire better engineers. 
Tobias has details on the Targus lock and its vulnerabilities at 
<a href="http://www.security.org/" eudora="autourl">www.security.org</a>
. 
He said recently released Kensington and PC Guardian locks have better
 
locking mechanisms and harder-to-cut cables that offer far better if
 
never absolute security for computer users. 
Targus defends its lock. 
"Based on our internal tests, the ringlets on our Defcon Armor lock
are 
snug and have some movement to allow flexibility of the cable and still
 
protect the cable from cable cutters," product manager Henry
Watanabe 
said in a statement. 
"Our notebook lock is foremost a theft-deterrent device,"
Watanabe said, 
"and is one of the most robust notebook cable locks available in the
 
market." 
Poorly reinforced security slots built into some laptops are "the
 
weakest link" when using such locks, Watanabe argues. "The
strength of 
(that) attach point varies quite widely from notebook to notebook. The
 
stronger the attach point, the more secure the notebook." 
Tobias agrees that a computer lock's mechanism or the strength of its
 
cable is irrelevant if a computer's security slot is easy to compromise.
 
He said the slots must be cut into a hardened-metal portion of a 
computer or reinforced somehow. 
But, as the Pioneer Press recently found, ripping locks from too-fragile
 
slots such as those built into certain HP laptops is all but
effortless. 
-=- 
Julio Ojeda-Zapata can be reached at jojeda (at) pioneerpress.com or
 
651-228-5467. For more personal technology on the Web or via RSS, go to
 
TwinCities.com and click "Business," then "Personal
Tech." 
2006 St. Paul Pioneer Press and wire service sources. All Rights 
Reserved.</blockquote></body>
</html>

--=====================_128978937==.ALT--
Received on Sat Mar 02 2024 - 00:57:28 CST

This archive was generated by hypermail 2.3.0 : Sat Mar 02 2024 - 01:11:47 CST