5 ms·
Ridiculously impressive and extremely hard to shield against, baring using your computer in a faraday cage. Thinking about it, is there any way to vary the ele
by arboroia 11y ago
Ridiculously impressive and extremely hard to shield against, baring using your computer in a faraday cage.
Thinking about it, is there any way to vary the electricity consumption of the computer as to transmit that way if it was in such a cage?
- yk 11y agoIt should be possible to vary the sleep states of the processor, at least if you are root. That should give you something like 50 W amplitude. No idea how that would look on the other side of the power supply.
- tedunangst 11y agoIt's pretty obvious, but perhaps worth noting that this requires the malware be installed on the computer somehow. That in itself is probably a challenge for an air gapped computer.
- jacobwcarlson 11y agoNot if you access to the supply chain for the construction of the computer.
- retbull 11y agoOr if you simply do what the REDACTED government did when they released StuxNet which is infect thumb drives and leave them near by the building in the parking lot. People pick up and plug in anything.
- mirimir 11y agoIdeally, people don't use random USB drives in air-gapped computers ;)
- stephengillie 11y agoOr you use one of a number of methods to disable unnecessary USB ports, so there's nowhere to plug anything in.
- mirimir 11y agoOr you miswire them, disconnecting data lines from the ports, and routing bus power to the data terminals on them ;)
- 9wzYQbTYsAIc 11y agoComputer enclosure and server rack manufacturers might have a new market for built-in Faraday cages.
- brohee 11y agoTEMPEST hardened computer certainly isn't a new market, see e.g. http://apitech.com/products/sn6730tf-tempest-laptop-notebook-computer http://apitech.com/products/sn6730tf-tempest-laptop-notebook... It is however a very niche market. For server rooms, it's much cheaper to harden the room, which limits the market to desktop and notebooks...
- nickpsecurity 11y agoOld is New Again meme. ;) True: rooms or safe's are best route. There's also more suppliers for that and more willing to work with non-defense customers. However, you've always been limited on desktop and notebooks in high security assessment given all the functionality (esp wireless) in them. There's just way too much risk. So, I recommended hardened thin-clients/monitor/keyboard/mouse plus key servers in a shielded room, no wireless anything, shielding of building from external signals where possible, and of course a lot of distance around the building. Costs quickly become an issue and most just don't do TEMPEST/EMSEC at all. Open season when the attacks get democratized. ;)
- 9wzYQbTYsAIc 11y agoAmazing, thanks for sharing! This is why I enjoy HN - I learn at least one new thing a day.
- opless 11y agoYes. http://www.simonwaite.com/random-thoughts/communication-from-an-air-gapped-machine http://www.simonwaite.com/random-thoughts/communication-from...