4 ms·

I hope air gaping will stay a niche. If it goes mainstream there will be more attacks on it...

by pulse7 5y ago

intunderflow 5y ago
There's some interesting attacks based on working out the sound of each key on a keyboard and then guessing keystrokes - https://github.com/ggerganov/kbd-audio https://github.com/ggerganov/kbd-audio
- GoblinSlayer 5y ago
  Can a white noise machine help there? https://ggerganov.github.io/jekyll/update/2018/11/30/keytap-description-and-thoughts.html https://ggerganov.github.io/jekyll/update/2018/11/30/keytap-... says the method is sensitive to noise.
  - LouisSayers 5y ago
    Blasting some Meshuggah should do it
    - GoblinSlayer 5y ago
      Meshuggah is a fixed pattern that can be subtracted. Ideally noise should unpredictable.
      - LouisSayers 5y ago
        True, I guess they'd need to perform it live - as part of the security ceremony
        LouisSayers 5y ago
        Preferably in ceremonial cloaks
- hammock 5y ago
  Airgapped machines ought to be housed in an airgapped room, equivalent to a SCIF.
  - intunderflow 5y ago
    Funny you mention this because the SCIF tech specs from DNI.gov are cited a lot in our physical security envelope docs, interesting but very terse read, I wouldn't read the whole thing for fun: https://www.dni.gov/files/Governance/IC-Tech-Specs-for-Const-and-Mgmt-of-SCIFs-v15.pdf https://www.dni.gov/files/Governance/IC-Tech-Specs-for-Const... I'd skip to Chapter 2: Risk Management and Chapter 3: Fixed Facility SCIF Construction
- mathieubordere 5y ago
  You could let the system ask the characters of the passwords in random order. It would be a bit of a hassle, but gives some added protection for largish passwords.
- beermonster 5y ago
  “..it cannot connect to any wireless network, so we don’t have to worry about it doing so maliciously. We’ve also taken other measures to frustrate attackers, for example we have physically removed the hard drive so there is no way to persist data on the laptop itself” Hopefully by physically removing where possible? Also consider microphone and speakers if you’ve not already..

I hope air gaping will stay a niche. If it goes mainstream there will be more attacks on it...

by pulse7 5y ago

I hope air gaping will stay a niche. If it goes mainstream there will be more attacks on it...

There's some interesting attacks based on working out the sound of each key on a keyboard and then guessing keystrokes - https://github.com/ggerganov/kbd-audio https://github.com/ggerganov/kbd-audio

GoblinSlayer 5y ago
Can a white noise machine help there? https://ggerganov.github.io/jekyll/update/2018/11/30/keytap-description-and-thoughts.html https://ggerganov.github.io/jekyll/update/2018/11/30/keytap-... says the method is sensitive to noise.
- LouisSayers 5y ago
  Blasting some Meshuggah should do it
  - GoblinSlayer 5y ago
    Meshuggah is a fixed pattern that can be subtracted. Ideally noise should unpredictable.
    - LouisSayers 5y ago
      True, I guess they'd need to perform it live - as part of the security ceremony
      - LouisSayers 5y ago
        Preferably in ceremonial cloaks
hammock 5y ago
Airgapped machines ought to be housed in an airgapped room, equivalent to a SCIF.
- intunderflow 5y ago
  Funny you mention this because the SCIF tech specs from DNI.gov are cited a lot in our physical security envelope docs, interesting but very terse read, I wouldn't read the whole thing for fun: https://www.dni.gov/files/Governance/IC-Tech-Specs-for-Const-and-Mgmt-of-SCIFs-v15.pdf https://www.dni.gov/files/Governance/IC-Tech-Specs-for-Const... I'd skip to Chapter 2: Risk Management and Chapter 3: Fixed Facility SCIF Construction
mathieubordere 5y ago
You could let the system ask the characters of the passwords in random order. It would be a bit of a hassle, but gives some added protection for largish passwords.
beermonster 5y ago
“..it cannot connect to any wireless network, so we don’t have to worry about it doing so maliciously. We’ve also taken other measures to frustrate attackers, for example we have physically removed the hard drive so there is no way to persist data on the laptop itself” Hopefully by physically removing where possible? Also consider microphone and speakers if you’ve not already..