7 ms·
Buried 4/5 down the page: "One limiting aspect of the described technique is that it requires a fairly loud conversation in the vicinity of the eavesdropping ha
by degenerate 8y ago
Buried 4/5 down the page: "One limiting aspect of the described technique is that it requires a fairly loud conversation in the vicinity of the eavesdropping hard drive. To record comprehensible speech, the conversation had to reach 85 dBA, with 75 dBA being the low threshold for capturing muffled sound."
For context, a vacuum cleaner is also 75 decibels, with 80db as the threshold for hearing loss:
https://ehs.yale.edu/sites/default/files/files/decibel-level-chart.pdf https://ehs.yale.edu/sites/default/files/files/decibel-level...
So you literally have to scream at each other right in front of the hard drive for it to record discernible speech. This is not an "eavesdropping mic" as the subheading of the article claims. Therefore, it's yet another clickbait BS fearmongering article about an interesting tech hack.
- CNJ7654 8y agoWHAT?! I CAN'T HEAR YOU! YOU NEED TO SPEAK UP! WHEN ARE YOU GOING TO BOMB THE PENTAGON?! On the upside, the NSA won't have any issues apprehending sitcom terrorists
- ralusek 8y agoStill pretty interesting without the need for conspiratorial bent.
- ifoundthetao 8y agoEavesdropping: To secretly listen to a conversation. The title is accurate. It's currently not the best or completely practical, but this type of attack will likely have room for improvement.
- Varcht 8y agoThis one was better. https://en.wikipedia.org/wiki/The_Thing_(listening_device) https://en.wikipedia.org/wiki/The_Thing_(listening_device)
- azinman2 8y agoSo far. Perhaps there are ways for it to still be useful, regardless. For example, you might care more about the binary state of sound vs no sound (learning the hours that someone or something is in operation). It’s also really freaking cool, and an amazing way to make something that’s created for one purpose into a seemingly unrelated one.
- jtchang 8y agoYou mentioned vacuum cleaner which could happen to be perfect. Imagine knowing the exact day and time the house cleaning service comes by to your target.
- Loughla 8y agoExactly - just because it can't pick up speech doesn't mean it's not useful. That it can pick anything up at all can be gamed to your advantage depending on the purpose.
- Dotnaught 8y agoAuthor here. I disagree that a straightforward report on computer science research qualifies as "clickbait BS fearmongering." Note the all caps subhead. That should make it clear there are limitations: GOOD ENOUGH TO RECOGNIZE MUSIC VIA SHAZAM IF YOU TURN IT UP TO 11. And as the researchers state in their paper, they expect the technique can be improved.
- Plough_Jogger 8y agoDoes another team have control of the actual title?
- Dotnaught 8y agoReporters submit suggested heds. Editors often change them.
- deleted 8y ago[deleted]
- stronglikedan 8y agoOP is likely taking exception to the use of the word "eavesdropping", since it means listening to, specifically, conversations.
- deleted 8y ago[deleted]
- Dotnaught 8y agoThe researchers use that very word in the title of their paper: "Hard Drive of Hearing: Disks that Eavesdrop with a Synthesized Microphone"
- shittyadmin 8y agoYeah, researchers are known to do this kind of thing to get more publicity for their research, they have career goals too after all. It's research clickbait basically.
- vardump 8y ago> So you literally have to scream at each other right in front of the hard drive for it to record discernible speech. Right. Because certainly no one can figure out how to improve this. How about using multiple hard disks simultaneously and use signal processing magic to clean it up, just like microphone arrays do? Maybe you could even start to get some limited spatial information about the surroundings, based on sound arrival time difference between multiple disks? Similar to the way reflections of sound waves in the Earth crust and below can be used to compute Earth internal structure. Or how bats navigate. I'm not saying these ideas work — most likely not. What I'm saying, that someone with this knowledge and some brilliant discovery might be able to take this technique way further.
- amelius 8y ago> Maybe you could even start to get some limited spatial information about the surroundings, Good point. I guess you could accurately triangulate the position of the hard drive using seismic reference data, in the case of an earthquake. Or you could make loud noises at different places in a city, and locate the hard drive that way.
- tedunangst 8y agoMaybe a spy satellite passes overhead and records the data center walls vibrating.
- orbital-decay 8y ago
- curlypaul924 8y agoWhat if you had samples from multiple hard drives in the same room? Could they be combined to provide a better signal than a sample from a single drive alone?
- dsfyu404ed 8y ago> Could they be combined to provide a better signal than a sample from a single drive alone? It's not as simple as just combining them but yes, the second data point would be immensely helpful.
- united893 8y agoHere's a Video of Brendan Gregg and Bryan Cantrill giving a demonstration of the effect > https://m.youtube.com/watch?v=tDacjrSCeq4 https://m.youtube.com/watch?v=tDacjrSCeq4
- ganoushoreilly 8y agoI saw the post and immediately thought of this video, glad someone posted it!
- dang 8y agoDiscussed at https://news.ycombinator.com/item?id=17388144 https://news.ycombinator.com/item?id=17388144
- laumars 8y agoThis is precisely why I avoid any articles published by El Reg. They're essentially the The Daily Mail of the tech scene. You're far better off reading about this stuff from other sources.
- deleted 8y ago[deleted]
- bitexploder 8y agoThere is a principle I have learned over time in infosec. Attacks only get better over time. If the defender does nothing, it is a net bad thing.
- vardump 8y agoAnd they get combined in novel and creative ways to create effective practical exploits.
- sandworm101 8y agoIn my rig, both my work and home machines, the drive is also exposed to massive local fan noise, not to mention the case. At these sensitivities, footfalls, even keyboard typing, might be enough to mask voices. It is all just another nail in the "spinning rust" coffin imho: A novel technique applicable only to a declining target base.
- anigbrowl 8y agoThis is wrong. I'm a professional sound engineer who's done location recording for film for over a decade and has another decade's worth of studio/editing experience. A vacuum cleaner is loud but not that loud. You don't have to scream over it. 80db will cause hearing loss if you listen to that level sustained over a long time, but it's not remarkably loud. In fact, the chart you link shows everyday examples of noises in that range like phones ringing, chamber music (from acoustic stringed instruments using resonant cavities, a good proxy for human voices), city traffic, and more. While a 75dB noise floor is definitely a problem for obtaining a clean recording (the kind you hear in a tv show), it's nothing unusual in forensic work. The sound from the servos moving the heads back and forth will consist of aperiodic loud but relatively slow and brief transients. It'll be like trying to listen in to a space while a spastic Autechre track plays on a speaker nearby - hard work but not impossible. A more prosaic example would be trying to follow the words of an unfamiliar song or rap at a live concert. I'm pretty confident that I could get what you said into your phone while you sat in front of your laptop with a mechanical hard drive, without even hearing any of their source material. I would find this easier than trying to deal with a bad recording made in high wind or in the vicinity of a diesel engine.
- lightedman 8y ago"A vacuum cleaner is loud but not that loud." You can hear a Kirby vacuum over an opera concert with full symphony from over 100 yards away. I volunteer for a local SoCal group and have had to deal with such nasty interruptions many times.
- Gpetrium 8y agoThis tool would probably be useful in conjunction with other tools or in specific conditions: * A tool that can clear the noise from the hard disk, allowing a glimpse at some parts of the conversation * When the computer is turned-off (assuming the listening device can stay on) * Some areas in an Airport * Construction areas It is not impossible to be useful for some actors, but it does require specific conditions.
- gwern 8y agoTypical middlebrow dismissal of every sidechannel attack ever. But, "Attacks only get better."
- ben509 8y ago> So you literally have to scream at each other right in front of the hard drive for it to record discernible speech. That's how people routinely talk in our open office, so entirely plausible.
- caf 8y ago"Fearmongering"? This is an exceedingly cynical and uncharitable take on the article, which literally says: But look, let's be real: for the vast, vast majority of people, this is all just a cunning academic exploitation of hard drive technology. No one's really going to bug you via your spinning rust.
- dgzl 8y agoThere's a volume measurement device in a bar I frequent (I'm here now), which hosts music in a very small venue. It's decently full right now (maybe 40-50 people) and there's music playing over the speakers (not live), and this device is reading 80-85db. I'll update if a band plays tonight.
- tim333 8y agoLondon tube trains are typically about 90-100db in the train when moving so it's not that freakily loud.