Author Topic: They will get your data no matter what.  (Read 810 times)

anunitu

  • Member
  • ****
  • Posts: 897
They will get your data no matter what.
« on: June 29, 2016, 07:52:32 AM »
Totally caught my eye,the truly weird they can hack your data.

https://www.wired.com/2016/06/clever-attack-uses-sound-computers-fan-steal-data/?google_editors_picks=true

Quote from the site:

In the past two years a group of researchers in Israel has become highly adept at stealing data from air-gapped computers—those machines prized by hackers that, for security reasons, are never connected to the internet or connected to other machines that are connected to the internet, making it difficult to extract data from them.

Mordechai Guri, manager of research and development at the Cyber Security Research Center at Ben-Gurion University, and colleagues at the lab, have previously designed three attacks that use various methods for extracting data from air-gapped machines—methods involving radio waves, electromagnetic waves and the GSM network, and even the heat emitted by computers.

Now the lab’s team has found yet another way to undermine air-gapped systems using little more than the sound emitted by the cooling fans inside computers. Although the technique can only be used to steal a limited amount of data, it’s sufficient to siphon encryption keys and lists of usernames and passwords, as well as small amounts of keylogging histories and documents, from more than two dozen feet away. The researchers, who have described the technical details of the attack in a paper (.pdf), have so far been able to siphon encryption keys and passwords at a rate of 15 to 20 bits per minute—more than 1,200 bits per hour—but are working on methods to accelerate the data extraction.

“We found that if we use two fans concurrently [in the same machine], the CUPU and chassis fans, we can double the transmission rates,” says Guri, who conducted the research with colleagues Yosef Solewicz, Andrey Daidakulov, and Yuval Elovici, director of the Telekom Innovation Laboratories at Ben-Gurion University. “And we are working on more techniques to accelerate it and make it much faster.”

KeepingRealBusy

  • Member
  • ***
  • Posts: 426
Re: They will get your data no matter what.
« Reply #1 on: June 29, 2016, 09:54:41 AM »
If you read the link, you first need to infect the target machine to modulate the fan speed to transmit the data. So, the target machine is already suspect.

Dave.

hutch--

  • Administrator
  • Member
  • ******
  • Posts: 4814
  • Mnemonic Driven API Grinder
    • The MASM32 SDK
Re: They will get your data no matter what.
« Reply #2 on: June 29, 2016, 12:50:58 PM »
Bottom line is an isolated machine cannot be hacked except by user error that infects the machine. Much like it was done with the Iranian reactors a few years ago.
hutch at movsd dot com
http://www.masm32.com    :biggrin:  :biggrin:

Magnum

  • Member
  • *****
  • Posts: 2235
Re: They will get your data no matter what.
« Reply #3 on: June 29, 2016, 06:36:05 PM »
Bottom line is an isolated machine cannot be hacked except by user error that infects the machine. Much like it was done with the Iranian reactors a few years ago.

How do you define an isolated machine ?

Iranian reactors went down because someone plugged in a flash drive and got their whole system infected.

Take care,
                   Andy

Ubuntu-mate-16.04-desktop-amd64

http://www.goodnewsnetwork.org