4 ms·
you can exfiltrate data at a bit/hour through power consumption. Run while(1){sin(cos(tan(rand(1))) for 1, nothing for 0, every half hour, with a correctional
by Jerrrry 5y ago
you can exfiltrate data at a bit/hour through power consumption.
Run while(1){sin(cos(tan(rand(1))) for 1, nothing for 0, every half hour, with a correctional bit thrown in for good measure.
measure the heat of the room via remote sensing, power consumption, AC/air frequency analysis.
the NSA will have to add a layer of thermodynamic static noise in addition to their rooms full of stereo's blasting white noise.
a technically proficient attacker could infer the value of a encryption key given the GDP of the nation-state, if the data was granular enough.
- aaaaaaaaaaab 5y ago>a technically proficient attacker could infer the value of a encryption key given the GDP of the nation-state, if the data was granular enough Hm. So maybe the recent spike in inflation is just a series of ones in an RSA key?
- extrapickles 5y agoAdding noise helps, but an attacker can trade bitrate for noise immunity. Probably the only way of keeping data secure would be to heavily insulate (noise, thermal, RF, power, etc) the room so that any signal would take weeks to pass through the insulation, and then rotate your key material more often than that. Opening the door would have to dump power to the room before the door can be opened so an attacker couldn't leak data out when people entered/left.
- Jerrrry 5y agorotating the keys quicker than they can be exfiltrated, and expanded. similar to the original reason password rotation exists - that the hashes of passwords to all users were known to all parties, and were assumed cracked after a certain timeframe - passwords were required to be changed before that cyclic window. similarly, captcha's for high-sensitive sites embed the domain in the captcha, and only allow the captcha for a small timeframe. it then has a delay to show/fetch the captcha challenge, and must be completed/expires quickly. this reduces the chance of a MitM attack or a phishing attack to nil. ultimately, if you want to prevent information leakage, you'll have to create a event horizon surrounding the secret. and even then, Hawking predicts that black holes sweat, so even then, your 2^^8^^8 key is still derivable from collecting and de-entrophizing the sweated muons of a photon-sphere. *: unless you use reversible computing to generate the secret, then reverse the computation, but keep the result. this prevents people in the future from collecting information on current wave-states, barring entanglement.
- dr_dshiv 5y agoWhat. The. F
- bitexploder 5y agoThe nuts and bolts of information theory, of course.
- ceroxylon 5y agoyou've never de-entrophized the sweated muons of a photon-sphere before?
- omginternets 5y agoAre people like this even allowed on Hacker News??
- Jerrrry 5y agoI post by whistling DT-MF tones into a payphone. The DT-MF tones exploit a small ACE allowing a POST payload to be reconstructed and curl-ed. The payphone and nearby homeless are then vaporized for opsec.
- FredPret 5y ago> a technically proficient attacker could infer the value of a encryption key given the GDP of the nation-state, if the data was granular enough I wonder if even knowing every transaction down to the cent is granular enough
- CamperBob2 5y agomeasure the heat of the room via remote sensing, power consumption, AC/air frequency analysis. If you can get access to the same AC power circuit, or something that's not too far upstream, you could also look at the power consumption directly by watching for very small voltage drops and/or phase shifts. Extra credit if you modulate the data to be exfiltrated with a Gold code or a similar sequence that facilitates recovery below the noise floor. Bandwidth won't be great but it'll beat IP over HVAC.