3 ms·

Was there not a PoC recently (~months ago) of someone who did similar over a speaker/microphone but outside the audible range of ears? It was a PoC of the Flame

by NamTaf 10y ago

Was there not a PoC recently (~months ago) of someone who did similar over a speaker/microphone but outside the audible range of ears? It was a PoC of the Flame malware capability to jump airgapped PCs

niftich 10y ago
Not sure if this is what you meant, but Chromecast's guest mode will pair using ultrasound. The guy who worked on it has some code using the WebAudio API on github and his linked blog: https://github.com/borismus/sonicnet.js https://github.com/borismus/sonicnet.js
- NamTaf 10y ago
  No there was an article on here several months ago that I couldn't find when searching where someone wrote a PoC for the transmission of data via near-ultrasonic sounds from a computer speaker and microphone. I don't think it was this [1] one, but it shows the concept being used. Maybe I'm misintepreting the OP's work and not realising how it differs in some subtle way? I get that they've put TCP/UDP over it, but is there something else I'm oblivious to? Also, I meant BadBIOS [2], not Flame. [1]: https://www.anfractuosity.com/projects/ultrasound-via-a-laptop/ https://www.anfractuosity.com/projects/ultrasound-via-a-lapt... [2]: https://en.wikipedia.org/wiki/BadBIOS https://en.wikipedia.org/wiki/BadBIOS
  - JorgeGT 10y ago
    Maybe this one? https://github.com/quiet/quiet-js https://github.com/quiet/quiet-js I remember it sparked a discussion about airgap breaking.
  - deutronium 10y ago
    I've actually done TCP/IP over sound, via GNU Radio - https://www.anfractuosity.com/projects/ultrasound-networking/ https://www.anfractuosity.com/projects/ultrasound-networking...
  - niftich 10y ago
    Oh, I think you mean this from Fraunhofer FKIE in 2013: [1] Ars Coverage: http://arstechnica.com/security/2013/12/scientist-developed-malware-covertly-jumps-air-gaps-using-inaudible-sound/ http://arstechnica.com/security/2013/12/scientist-developed-... [2] Paper: http://www.jocm.us/uploadfile/2013/1125/20131125103803901.pdf http://www.jocm.us/uploadfile/2013/1125/20131125103803901.pd...

by NamTaf 10y ago

niftich 10y ago

Not sure if this is what you meant, but Chromecast's guest mode will pair using ultrasound. The guy who worked on it has some code using the WebAudio API on github and his linked blog: https://github.com/borismus/sonicnet.js https://github.com/borismus/sonicnet.js

NamTaf 10y ago
No there was an article on here several months ago that I couldn't find when searching where someone wrote a PoC for the transmission of data via near-ultrasonic sounds from a computer speaker and microphone. I don't think it was this [1] one, but it shows the concept being used. Maybe I'm misintepreting the OP's work and not realising how it differs in some subtle way? I get that they've put TCP/UDP over it, but is there something else I'm oblivious to? Also, I meant BadBIOS [2], not Flame. [1]: https://www.anfractuosity.com/projects/ultrasound-via-a-laptop/ https://www.anfractuosity.com/projects/ultrasound-via-a-lapt... [2]: https://en.wikipedia.org/wiki/BadBIOS https://en.wikipedia.org/wiki/BadBIOS
- JorgeGT 10y ago
  Maybe this one? https://github.com/quiet/quiet-js https://github.com/quiet/quiet-js I remember it sparked a discussion about airgap breaking.
- deutronium 10y ago
  I've actually done TCP/IP over sound, via GNU Radio - https://www.anfractuosity.com/projects/ultrasound-networking/ https://www.anfractuosity.com/projects/ultrasound-networking...
- niftich 10y ago
  Oh, I think you mean this from Fraunhofer FKIE in 2013: [1] Ars Coverage: http://arstechnica.com/security/2013/12/scientist-developed-malware-covertly-jumps-air-gaps-using-inaudible-sound/ http://arstechnica.com/security/2013/12/scientist-developed-... [2] Paper: http://www.jocm.us/uploadfile/2013/1125/20131125103803901.pdf http://www.jocm.us/uploadfile/2013/1125/20131125103803901.pd...