+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: World News (https://sinister.ly/Forum-World-News)
+--- Thread: Computer coughs up passwords, encryption keys through its cooling fans (/Thread-Computer-coughs-up-passwords-encryption-keys-through-its-cooling-fans)
Pages:
1
2
RE: Computer coughs up passwords, encryption keys through its cooling fans - Eclipse - 07-07-2016
(07-07-2016, 12:06 AM)Skullmeat Wrote:(07-06-2016, 10:05 AM)Eclipse Wrote: It was legit, and allowed for a very slow transmission of data over a couple of metres, but if you're going to use it maliciously then you'll need malware and physical access. If you have those then there's much easier and more effective ways than this.
This article is overhyping and misinterpreting what would otherwise be a pretty interesting piece of research.
So it's legit? Whats your sources? Because if its real I'd like to see some hard research and more reputable articles about it. Might be an interesting read.
Just Google it. iirc someone linked to a research page or a PDF or something on HN
RE: Computer coughs up passwords, encryption keys through its cooling fans - CRNpolyfluoric - 07-29-2016
Most of my machines are liquid-cooled and PWM-controlled, so I think my diary is safe >). The number of hardware configurations (chipset, cpu, RAM, fans) and the benchmarking/data collection required to develop the analytical software would be interesting to consider though. ATC this is not terribly impressive as it requires physical access to the machine; TEMPEST was more interesting and useful for surveillance because observation could be performed from a more remote physical vantage.
After this acoustic version becomes rote then what form of observable energy will be next? My bet is EMR (nonoptical). Any thoughts?
RE: Computer coughs up passwords, encryption keys through its cooling fans - Wildfire - 08-01-2016
(07-29-2016, 03:59 PM)CRNpolyfluoric Wrote: Most of my machines are liquid-cooled and PWM-controlled, so I think my diary is safe >). The number of hardware configurations (chipset, cpu, RAM, fans) and the benchmarking/data collection required to develop the analytical software would be interesting to consider though. ATC this is not terribly impressive as it requires physical access to the machine; TEMPEST was more interesting and useful for surveillance because observation could be performed from a more remote physical vantage.
After this acoustic version becomes rote then what form of observable energy will be next? My bet is EMR (nonoptical). Any thoughts?
It wasn't very practical of an exfiltration method to be begin with, too much interference, maybe.
I'd say just straight up RF, the NSA has been up to it for a while. A bit of money and you can get people to plug in anything.
Article related: http://www.nytimes.com/2014/01/15/us/nsa-effort-pries-open-computers-not-connected-to-internet.html?_r=2
RE: Computer coughs up passwords, encryption keys through its cooling fans - Skullmeat - 08-01-2016
I still find this a bit hard to believe. Even if it works, it sounds highly impractical.
RE: Computer coughs up passwords, encryption keys through its cooling fans - CRNpolyfluoric - 08-03-2016
(08-01-2016, 02:14 AM)Axari Wrote:(07-29-2016, 03:59 PM)CRNpolyfluoric Wrote: Most of my machines are liquid-cooled and PWM-controlled, so I think my diary is safe >). The number of hardware configurations (chipset, cpu, RAM, fans) and the benchmarking/data collection required to develop the analytical software would be interesting to consider though. ATC this is not terribly impressive as it requires physical access to the machine; TEMPEST was more interesting and useful for surveillance because observation could be performed from a more remote physical vantage.
After this acoustic version becomes rote then what form of observable energy will be next? My bet is EMR (nonoptical). Any thoughts?
It wasn't very practical of an exfiltration method to be begin with, too much interference, maybe.
I'd say just straight up RF, the NSA has been up to it for a while. A bit of money and you can get people to plug in anything.
Article related: http://www.nytimes.com/2014/01/15/us/nsa-effort-pries-open-computers-not-connected-to-internet.html?_r=2
Agreed. Your insight makes me want to crimp new cables and dust off the Yaesus
