4 ms·

Can I get some clarity on the types of data they extract? Looking at blinking LEDs tells me that the HDD is on and processing something, yes, but it doesn’t te

by jbob2000 6y ago

Can I get some clarity on the types of data they extract? Looking at blinking LEDs tells me that the HDD is on and processing something, yes, but it doesn’t tell me the digits of the credit card number it’s processing (for example). Do they researchers track the value of the information they “steal”? Or is any data at all valuable?

ken 6y ago
"Guri's research doesn't look at ways of compromising and planting malware on these super-secure systems" ... "malicious code planted on an air-gapped system can control the speed at which fans work"
jlg23 6y ago
If you control the blinking of the led you have established a very low bandwidth communication channel.
- jbob2000 6y ago
  Ohhh I misunderstood; I thought they were stealing data by simply observing the blinking LED, not that they had infiltrated the computer and were controlling the LED.
  - na85 6y ago
    The term "exfiltrate" implies that the data is being "pushed" or otherwise sent outward from the machine, as opposed to being harvested from the outside.
  - fbi-director 6y ago
    Thank you, because you wrote this, I too now understand what they meant. My train of thought was apparently on the same track as yours!
  - hutzlibu 6y ago
    Allmost (or all?) of those attacks are only possible, if the target computer is infected. And the scenario is that the virus wants to send data out, to a nearby decice which is also infected.
    - skykooler 6y ago
      Which is why this is "exfiltration", not "infiltration".
WoahNoun 6y ago
It's about how to get data out once you've already compromised the machine. You control the blinking of the LED to match match the data you want to capture out.
mlazos 6y ago
Basically the idea is that air gapped is still not secure. If someone plugs in a foreign flash drive into a computer that is air gapped one would think the data can’t leave the secure machine. With these methods though, it’s clear that any hardware observable to the outside world can be used to exfiltrate data
- makapuf 6y ago
  Well, I think anyone could have thought of the screen or speakers or, well the usb you achieved to plug to get data out of a computer. You have no network but I doubt you can consider airgapped a pc you just plugged a usb device into. Why not plug a mini wifi chip then ?

ken 6y ago

"Guri's research doesn't look at ways of compromising and planting malware on these super-secure systems" ... "malicious code planted on an air-gapped system can control the speed at which fans work"

jlg23 6y ago

If you control the blinking of the led you have established a very low bandwidth communication channel.

jbob2000 6y ago
Ohhh I misunderstood; I thought they were stealing data by simply observing the blinking LED, not that they had infiltrated the computer and were controlling the LED.
- na85 6y ago
  The term "exfiltrate" implies that the data is being "pushed" or otherwise sent outward from the machine, as opposed to being harvested from the outside.
- fbi-director 6y ago
  Thank you, because you wrote this, I too now understand what they meant. My train of thought was apparently on the same track as yours!
- hutzlibu 6y ago
  Allmost (or all?) of those attacks are only possible, if the target computer is infected. And the scenario is that the virus wants to send data out, to a nearby decice which is also infected.
  - skykooler 6y ago
    Which is why this is "exfiltration", not "infiltration".

WoahNoun 6y ago

It's about how to get data out once you've already compromised the machine. You control the blinking of the LED to match match the data you want to capture out.

mlazos 6y ago

Basically the idea is that air gapped is still not secure. If someone plugs in a foreign flash drive into a computer that is air gapped one would think the data can’t leave the secure machine. With these methods though, it’s clear that any hardware observable to the outside world can be used to exfiltrate data

makapuf 6y ago
Well, I think anyone could have thought of the screen or speakers or, well the usb you achieved to plug to get data out of a computer. You have no network but I doubt you can consider airgapped a pc you just plugged a usb device into. Why not plug a mini wifi chip then ?