13797 stories
·
4 followers

Secure Boot is completely broken on 200+ models from 5 big device makers

2 Shares
Secure Boot is completely broken on 200+ models from 5 big device makers

Enlarge (credit: sasha85ru | Getty Imates)

In 2012, an industry-wide coalition of hardware and software makers adopted Secure Boot to protect against a long-looming security threat. The threat was the specter of malware that could infect the BIOS, the firmware that loaded the operating system each time a computer booted up. From there, it could remain immune to detection and removal and could load even before the OS and security apps did.

The threat of such BIOS-dwelling malware was largely theoretical and fueled in large part by the creation of ICLord Bioskit by a Chinese researcher in 2007. ICLord was a rootkit, a class of malware that gains and maintains stealthy root access by subverting key protections built into the operating system. The proof of concept demonstrated that such BIOS rootkits weren't only feasible; they were also powerful. In 2011, the threat became a reality with the discovery of Mebromi, the first-known BIOS rootkit to be used in the wild.

Keenly aware of Mebromi and its potential for a devastating new class of attack, the Secure Boot architects hashed out a complex new way to shore up security in the pre-boot environment. Built into UEFI—the Unified Extensible Firmware Interface that would become the successor to BIOS—Secure Boot used public-key cryptography to block the loading of any code that wasn’t signed with a pre-approved digital signature. To this day, key players in security—among them Microsoft and the US National Security Agency—regard Secure Boot as an important, if not essential, foundation of trust in securing devices in some of the most critical environments, including in industrial control and enterprise networks.

Read 36 remaining paragraphs | Comments

Read the whole story
JimB
22 hours ago
reply
Share this story
Delete

Whiskey Tango Foxtrot is Up With the NATO Phonetic Alphabet?

1 Share

Alfa, Bravo, Charlie, Delta, Echo, Foxtrot, Golf, Hotel, India, Juliett, Kilo, Lima, Mike, November, Oscar, Papa, Quebec, Romeo, Sierra, Tango, Uniform, Victor, Whiskey, X-Ray, Yankee, Zulu. If you have ever served in the armed forces or worked in the aviation industry, these words are most likely permanently seared into your brain. And even if you haven’t, you have probably heard them used in countless war movies and other places. This is the NATO phonetic spelling alphabet, a series of 26 words mapped acrophonically onto the letters of the Roman alphabet. Officially adopted by NATO in 1956, this alphabet has since become the de facto standard for militaries and civilian organizations around the world. But what is this alphabet even for? And how was this collection of seemingly-random words chosen? Well, Lima Echo Tango Sierra Foxtrot India November Delta Oscar Uniform Tango as we dive into the long and fascinating history of phonetic spelling alphabets.

Ratiotelephonic or phonetic spelling alphabets – not to be confused with phonetic alphabets, which indicate how words are meant to be pronounced – were developed in response to the limitations of early voice communications technologies like telephones and radio. Due to static, distortion, and the tendency of these devices to cut off certain frequencies or the start of words, many sounds can become indistinguishable to the listener. For example, C, D, E, V, P, and Z [NOTE: “zee” in the American style] are often mistaken for one another, as are M and N; F and S; H and 8; and 5 and 9. The lack of visual cues when speaking over the telephone or radio only adds to the potential confusion. When transmitting vital information such as military orders or instructions between aircraft and air traffic control, even minor misunderstandings can have serious consequences, so pending significant improvements in telecommunications technology, some sort of interim solution was needed.

Early on, radio and telephone operators hit upon the method of assigning a distinct codeword to each letter of the alphabet, such that the receiver could recognize the letter being transmitted even if parts of the codeword were distorted or cut off. Even with recent advances in transmission quality, this practice persists to this day, with people often coming up with their own phonetic spelling alphabets on the fly; after all, who among us, while dealing with customer service over a particularly unreliable telephone connection, hasn’t resorted in frustration to spelling out or names or addresses by shouting “D as in David! A as in Angel! V as in Valentine!” and so on? Among the first formalized phonetic alphabets was developed in 1898 by the British Army’s Royal Corps of Signals. This was a partial alphabet, with codewords assigned only to those letters most likely to be confused: Ack for A, Beer for B, Emma for M, Pip for P, Esses for S, Toc for T, and Vic for V. The remaining letters remained unchanged, though regulations dictated standard pronunciations like a rolling R and long O. This early system had a significant impact on British culture, spawning enduring British slang terms like Ack-Ack for “antiaircraft fire”, Emma Gee for “Machine Gun Corps” , Pip-Emma for “Prime Minister”, and Toc-H for “Talbot House”, a veteran’s organization and Christian movement founded after the First World War.

Interestingly, many of the earliest spelling alphabets were intended not for communication not with voice but rather Morse Code, though the basic principle remained the same. Like spoken messages, Morse transmissions could become garbled due to electronic interference or poor signalling technique; thus, when sending important information, it was preferable to send entire codewords instead of individual letters so that at least part of each word would be recognized and the accompanying letters more easily worked out. The longer the words, the greater the chances of them being understood, leading to some truly unwieldy alphabets like this one used in Tasmania in 1908:

Authority, Bills, Capture, Destroy, Englishmen, Fractious, Galloping, High, Invariably, Juggling, Knights, Loose, Managing, Never, Owners, Play, Queen, Remarks, Support, The, Unless, Vindictive, When, Xpeditiously, Your, Zigzag

While this may seem like a truly odd and random collection of words, they were designed to be arranged in a particular order as a memorization aid for telegraphers:

Englishmen Invariably Support High Authority Unless Vindictive. The Managing Owners Never Destroy Bills. Remarks When Loose Play Jangling. Fractious Galloping Zigzag Knights Xpeditely Capture Your Queen.

Another telecommunications alphabet in use at this time was the Against Barbarian system, developed during the U.S. Civil War and consisting of the words:

Against, Barbarian, Continental, Dahlia, Egg, Furiously, Gallantly, Humility, Ivy, Jurisdiction, Kangaroo, Legislator, Mountain, Noble, Offensive, Photographer, Queen Katherine, Rebecca, Several, Tea, Uniform, Very Varied, Waterloo, Exhibition, Youthful and fair, 2-long 2-short

Unlike the Authority Bills system, however, these words were not intended to be transmitted; rather, the syllables in each word were meant to help telegraphers remember the Morse Code sequence for each letter. For example, Ag-ainst, with one short and one long syllable, corresponds to Morse Code letter A: Dot-Dash. Similarly, Bar-ba-ri-an corresponds to B or Dash Dot Dot Dot; Cont-in-ent-al to C or Dash Dot Dash Dot – and so on. But while certainly clever, the system was far from perfect. Not only could its creators not be bothered to come up with an actual word for Z, opting instead for the lazily literal “two long two short”, but the ambiguity of which letters belong in which syllable could potentially lead to confusion. For example, spelling out Continental as Con-tin-en-tal rather than Cont-in-ent-al would yield Dash Dash Dot Dash – that is, Q rather than the intended C. Still, Authority Bills remains a fascinating if flawed attempt at demystifying Morse Code for new telegraphers.

Coming back to radiotelegraphic spelling alphabets, the partial Ack-Beer system was still the Royal Corps of Signals’ standard alphabet when Britain entered the First World War in 1914. By war’s end in 1918, however, it had been replaced by a complete 26-letter alphabet, which introduced several words that have persisted all the way to the present day:

Apple, Brother, Charlie, Dover, Eastern, Father, George, Harry, India, Jack, King, London, Mother, November, October, Peter, Queen, Robert, Sugar, Thomas, Uncle, Victoria, Wednesday, Xmas, Yellow, Zebra

But while Apple Brother – also known as Signalese – became the standard system for the British Army and Royal Flying Corps, the Royal Navy, always a bit contrarian, adopted its own unique alphabet retaining several elements of the old Ack-Beer system:

Ack, Beer, Charlie, Don, Edward, Freddy, George, Harry, Ink, Johnnie, King, London, Monkey, Nuts, Orange, Pip, Queen, Robert, Sugar, Toc, Uncle, Vic, William, X-Ray, Yorker, Zebra

This system also had a lasting impact on British culture, with “F for Freddie” and “S for Sugar” in particular remaining part of many Britons’ informal phonetic alphabets to this day. F for Freddie was also the name of several aircraft during the Second World War, including a Vickers Wellington bomber featured in the 1941 British documentary film Target for Tonight and a De Havilland Mosquito bomber flown by the Royal Canadian Air Force. The latter is significant for having survivdc 213 operations over enemy territory – more than any other Allied bomber of the war. However, in a tragic irony, F for Freddie’s luck ran out on May 9, 1945 – just one day after the end of the war in Europe – when she crashed into the control tower at Calgary Municipal Airport in Alberta, Canada, killing her pilots Flying Officer John Baker and Lieutenant Maurice Briggs.

After the war, elements of the Army’s Apple Brother and Navy’s Ack Beer systems were combined to create the Royal Air Force Radiotelephony or Apple Beer spelling alphabet, which comprised the words:

Apple, Beer, Charlie, Don, Edward, Freddie, George, Harry, Ink, Johnnie, King, London, Monkey, Nuts, Orange, Pip, Queen, Robert, Sugar, Toc, Uncle, Vic, William, X-ray, Yorker, Zebra

In 1921, Apple Beer was adopted as standard by all three branches of the British Armed Forces as well as the civilian aviation industry – and would remain so until well into the Second World War.

Meanwhile, the American Expeditionary Force, which joined the First World War in 1917, had its own standard phonetic spelling alphabet, comprising the words:

Able, Buy, Cast, Dock, Easy, Fox, George, Have, Item, Jig, King, Love, Mike, Nap, Opal, Pup, Quack, Rush, Sail, Tape, Unit, Vice, Watch, X-ray, Yoke, Zed

Many of these words would remain in the various iterations of the U.S. military phonetic alphabet until the adoption of the NATO standard in the 1950s.

Up until this point, most phonetic spelling alphabets had been developed for military use. The first internationally-recognized standard alphabet for civilian use was introduced in 1927 by the International Telecommunications Union or ITU, and used the names of cities from around the world:

Amsterdam, Baltimore, Casablanca, Denmark, Edison, Florida, Gallipoli, Havana, Italia, Jerusalem, Kilogramme, Liverpool, Madagascar, New York, Oslo, Paris, Quebec, Roma, Santiago, Tripoli, Uppsala, Valencia, Washington, Xanthippe, Yokohama, Zurich

Over the following decade, this alphabet was officially adopted by dozens of organizations around the world, including the International Commission for Air Navigation, the International Radio Consultative Committee, the International Maritime Organization, the Civil Aeronautics Board, the International Amateur Radio Union, and the American Radio Relay League.

Finally, in 1941, the United States Military developed one of the most famous and widely-used phonetic alphabets until the adoption of the NATO standard. Officially called the Joint Army/Navy Radiotelephony Alphabet, this system comprised the words:

Able, Baker, Charlie, Dog, Easy, Fox, George, How, Item, Jig, King, Love, Mike, Nan, Oboe, Peter, Queen, Roger, Sugar, Tare, Uncle, Victor, William, X-ray, Yoke, Zebra

Officially adopted by the Royal Air Force in 1943, the Able Baker alphabet soon became standard across all the Allied nations, and was used in all sorts of applications. For example, fans of the 2001 HBO miniseries Band of Brothers will recognize Able, Baker, Charlie, Dog, and Easy as names of infantry companies of the American 506th Infantry Regiment. The Army/Navy alphabet was used to name several American nuclear tests throughout the 1940s and 50s, such as shots Able and Baker of Operation Crossroads in 1946 and shots George and Item of Operation Greenhouse – while the first animals successfully recovered from outer space by United States in 1959 were a pair of monkeys named Miss Able and Miss Baker.

Meanwhile, on the other side of the conflict, the Germans had their own phonetic alphabet, developed during the 1920s and composed of the names:

Anton, Berta/Bruno, Caesar, David, Emil, Friedrich/Fritz, Gustav, Heinrich, Ida, Jakob, Konrad/Kurfust, Ludwig, Martha, Nathan, Otto, Paula, Quelle, Richard, Samuel, Theordor/Toni, Ulrich, Viktor, Wilhelm, Xanthippe, Ypsilon/Ypern, and Zacharias

along with Ärger, Ödipus, and Übel for umlauted As, Os, and Us. However, after the Nazi Party came to power, all Jewish-sounding names were replaced by more ‘Aryan’-sounding ones; specifically, David was replaced with Dora; Jakob with Julius or Jot; Nathan with Nordpol, Samuel with Siegfried, and Zacharias with Zeppelin. And you thought the Nazis’ fanatical obsession with antisemitism couldn’t get any more absurd…

Though the American Able Baker alphabet remained in use after the Second World War, it soon became clear that it had many shortcomings. Indeed, during the War itself, one Major F.D. Handy of the U.S. Army Air Force Directorate of Communications partnered with Harvard University’s Psycho-Acoustic Laboratory to scientifically evaluate the effectiveness of the Army/Navy phonetic alphabet under actual combat conditions. These experiments revealed that few of the Able Baker codewords were actually all that intelligible, and in his final report Major Handy included a list of 250 possible replacement words. Despite this, after the War the Able Baker alphabet was officially approved and adopted by the United States Government for use in civil aviation.

In 1947, the International Telecommunications Union or ITU criticized the Able-Baker alphabet for being too Anglocentric and containing many sounds unfamiliar to speakers of other languages. For example, certain Spanish pronunciations of the letter “P” might sound more like a “B” to an English speaker. In response, the organization created its own alphabet, whose words were chosen to be accessible to speakers of English, French, and Spanish. This included a unique numbering system in which the names of numbers in both English and various romance languages were combined – specifically: Nadazero, Unanone, Bissotwo, Terrathree, Kartefour, Pantafice, Soxsix, Setteseven, Oktoeight, and Novenine. The following year, the International Civil Aviation Organization or ICAO began developing its own universal phonetic alphabet. This effort was spearheaded by Jean-Paul Vinay, a professor of linguistics at the University of Montreal, who laid out five major guidelines for word selection:

  1. A word must be “live” – that is, still currently in use – in English, French and Spanish

  2. It must be easily pronounced and recognized by speakers of all three languages

  3. It must have good transmission and readability characteristics

  4. It must have similar spelling in English, French, and Spanish, and the initial letter must be that which the word identifies

  5. And it must be free of objectionable connotations or double meanings

In 1949, ICAO presented its finalized alphabet, which comprised the words:

Alfa, Beta, Coca, Delta, Echo, Foxtrot, Golf, Hotel, India, Julietta, Kilo, Lima, Metro, Nectar, Oscar, Polka, Quebec, Romeo, Sierra, Tango, Union, Victor, Whiskey, eXtra, Yankee, Zulu

The timing of this announcement couldn’t have been better, for the formation of NATO that same year increased the urgency of finding a new phonetic alphabet usable by all member nations. But while the 1949 ICAO alphabet was very close to the current NATO standard, it still had some issues. For example, several of the words such as Delta and Extra, Nectar and Victor, and Kilo and Metro sounded very similar to one another, while eXtra broke one of Jean-Paul Vinay’s selection rules by not starting with the letter it was meant to represent. Nonetheless, the alphabet was officially adopted by the ICAO and the International Air Transport Association or AITA in November 1951 and entered civil aviation use in April 1952. Still, believing that the alphabet needed further refinement, in late 1952 the ICAO conducted an extensive series of tests using speakers from 31 nations to find superior replacements for the most troublesome codewords. As a result of these tests, Beta was replaced with Bravo, Coca with Charlie, Metro with Mike, Polka with Papa, Union with Uniform, and eXtra with X-ray. This new ICAO alphabet was evaluated by NATO in 1955, with the final report concluding that:

It is known that [the spelling alphabet] has been prepared only after the most exhaustive tests on a scientific basis by several nations. One of the firmest conclusions reached was that it was not practical to make an isolated change to clear confusion between one pair of letters. To change one word involves reconsideration of the whole alphabet to ensure that the change proposed to clear one confusion does not itself introduce others.”

Consequently, the alphabet was officially adopted by NATO on March 1, 1956 and internationally for civil aviation use soon after. Aside from one change – the replacement of Nectar with November – in 1961, the alphabet has remained unchanged to this day.

In its current form, the NATO phonetic alphabet features many small details intended to maximize comprehension for all users. For example, Alfa is intentionally spelled with an F instead of a PH as the latter is not pronounced as an F in all languages. Similarly, Juliett is intentionally spelled with two Ts since in French a single T at the end of a word is usually silent.

The selection of some words required a measure of compromise and nuance. For example, while football was found to be more comprehensible in isolation, foxtrot was ultimately selected as superior for long-term communication.

There are also specific regulations for how numbers must be pronounced. For example, three is pronounced tree, four as foe-er, five as fife to prevent confusion with “fire”, and nine as niner to prevent confusion with five or the German word for “no”. Furthermore, numbers under one thousand are spelled out digit by digit – for example five seven instead of fifty seven or one six zero instead of one hundred sixty. The only exceptions are ten, eleven, and twelve for indicating clock positions as in “twelve o’clock high”.

While the NATO phonetic alphabet is meant to be universal, minor regional changes are often necessary. For example, in Malaysia, London is used in place of Lima as the latter means five in the Malay language. And at Atlanta International Airport, Dixie is used in place of Delta because the airport is home to Delta Airlines.

Finally, certain languages use additional codewords to indicate letters not found in the English language. For example, German uses Alfa-Echo, Oscar-Echo, Uniform-Echo, and Sierra-Sierra to indicate umlauted As, Os, and Us, and the eszett; while Spanish uses ñoño to indicate an N with a tilde.

And that is the story of the NATO phonetic alphabet, which, like many of its predecessors, has had a significant cultural impact far beyond the military sphere. For instance, during the Cold War, Checkpoint Charlie became one of the most infamous diplomatic hotspots in Berlin, while today expressions like Zulu Time for Greenwich Mean Time, Bravo Zulu for “well done,” and Whiskey Tango Foxtrot for – well, you know – have become pop culture staples. But perhaps the most famous expression derived from the NATO phonetic alphabet originated during the Vietnam War in the 1960s. North Vietnamese guerrilla troops operating in the South were known as the Viet Cong or VC. This was then translated via the NATO phonetic alphabet to “Victor Charlie” – or “Charlie” for short.

Expand for References

Phonetic Alphabet, Army Study Guide, https://www.armystudyguide.com/content/army_board_study_guide_topics/communications/phonetic-alphabet-military.shtml

Hickok, Kimberly, A Brief History of the NATO Phonetic Alphabet, Popular Mechanics, March 7, 2022, https://www.popularmechanics.com/culture/a39297126/origin-of-the-nato-phonetic-alphabet/

A Look at the History of the NATO Phonetic Alphabet, Air Charter Service, February 10, 2022, https://www.aircharter.co.uk/about-us/news-features/blog/a-look-at-the-history-of-the-nato-phonetic-alphabet

The NATO Phonetic Alphabet, NATO, https://www.nato.int/cps/en/natohq/declassified_136216.htm

Strong, Abby, From Alpha to Zulu: the Evolution of the Phonetic Alphabet, Charlie Mike, May 4, 2023, https://charliemike.org/2023/05/04/from-alpha-to-zulu-the-evolution-of-the-phonetic-alphabet/

Spink, Adam, From Butter to Bravo – a Brief History of the Phonetic Spelling Alphabet, NATS, April 3, 2020, https://nats.aero/blog/2020/04/from-butter-to-bravo-a-brief-history-of-the-phonetic-spelling-alphabet/

Phonetic Alphabets in the British Service, The Wireless Set No.19 Group, https://www.royalsignals.org.uk/articles/alpha.htm

Jones, Paul, 4 Phonetic Alphabets That Didn’t Survive, Mental Floss, October 30, 2017, https://www.mentalfloss.com/article/504886/4-phonetic-alphabets-didnt-survive

Uncle Sam’s Able Fox, Historic Wings, March 1, 2013, http://fly.historicwings.com/2013/03/uncle-sams-able-fox/#Local%20Variations%20Based%20on%20Need

Gannon, Terence, ‘F’ for Freddie: It Wasn’t Supposed to End This Way, Medium, March 7, 2019, https://terencecgannon.medium.com/f-for-freddie-9f4e60236f6e

The post Whiskey Tango Foxtrot is Up With the NATO Phonetic Alphabet? appeared first on Today I Found Out.

Read the whole story
JimB
4 days ago
reply
Share this story
Delete

Sunak names new top team as Lord Cameron resigns

1 Comment
The interim shadow cabinet features some new names after 12 former cabinet ministers lost their seats.
Read the whole story
JimB
18 days ago
reply
Cameron runs away again but is still allowed to remain in the Lords!
Share this story
Delete

Hundreds of jobs at risk at wet wipe factory

1 Comment
A wet wipe manufacturer has said it may have to close one of its sites due to the plastic ban.
Read the whole story
JimB
30 days ago
reply
Good. They were a significant part of the litter when I did a beach litter Pick.
Share this story
Delete

Assorted Stupidity #162

1 Share
LTB logo

  • LEAD STORY: As admirably summarized by the Columbus Dispatch, “[t]he Ohio attorney who was disciplined for pooping in a Pringles can and tossing it into a parking lot got his law license reinstated on Tuesday.” The pooper, who is a criminal-defense attorney, lobbed the can into the parking lot of a crime-victim advocacy center in November 2021, and the Ohio Supreme Court eventually held that this is the kind of thing that might call into question one’s fitness to practice law. But it imposed only a six-month suspension, which has now expired. According to the Dispatch, the attorney said that he “didn’t target anyone” with the can, which I suppose is a plus, but also that “he pulled the Pringles prank at least 10 times that year,” which definitely seems like a minus.
  • On Wednesday, Louisiana’s governor signed HB 71, which requires the Ten Commandments to be displayed in all public classrooms. Most of the bill is essentially a legal argument as to why this doesn’t violate the First Amendment, which it obviously does. The argument contains such nonsense as the assertion that this is not a religious measure because the Ten Commandments is simply one of the “foundational documents of our state and national government,” which is the opposite of true. Even in Louisiana, where the state constitution prohibits laws respecting the establishment of religion, just like the federal version does. “I can’t wait to be sued,” the governor declared, and he won’t have to wait long.
  • It’s certainly not the first time this sort of thing has been tried. And, as you may recall, one of the more remarkable attempts to “sneak” religion into state affairs happened in Louisiana a while back, when a committee of the Louisiana House considered a bill that would have made the Bible the “official state book,” prompting a lengthy debate over which version of the Bible deserved to be official. See Louisiana Debates Which Holy Bible to Make Official State Book” (Apr. 7, 2014). Did they at last recognize the irony that debates just like that one are why we don’t allow laws respecting the establishment of religion? No, but at least that bill didn’t become law. See also Legislator Upset That Muslims Want to Use School-Voucher Program Too” (July 20, 2012) (also Louisiana).
  • Police in St. John’s, Newfoundland, reported on May 10 that a “very irate male” had assaulted a constable with a piece of cheese. The piece was apparently large enough to qualify as a “block,” but the article notes that “the officer did not require medical attention.” The spokesperson said he did not know what type of cheese had been used in the assault. Still, the incident “shows we can never let our guard down,” he told reporters.
  • Police in Austin, Texas, reported on June 4 that they had arrested Optimus Prime. This was not the ancient and noble leader of the Autobots, but a 37-year-old alleged car thief named Optimus Prime Blakely. According to the report, police spotted a vehicle that had been reported stolen and followed it to a “game room” that was “known as a hub for criminal activity.” The driver then told police that he “discovered the car while it was unattended and running at a Dollar General on Riverside Drive, proceeded to enter the vehicle and drove away,” which seems like a very long way of saying “stole it.”
Read the whole story
JimB
34 days ago
reply
Share this story
Delete

What does Nigel Farage really want?

1 Share
Why is a man who has failed to get elected to Parliament seven times causing panic in Tory ranks?
Read the whole story
JimB
40 days ago
reply
Share this story
Delete
Next Page of Stories