Hacker News Reader

Comment by MisterTea | Hacker News Reader

I even believe there is an attack which measures fluctuation in the AC current to the power supply. Might as well add power supply masking via a motor-generator set or inverter/on-line UPS that obfuscates/filters transients from the load to line.

View on HN

Yup, power differential analysis are well-known enough to make their way into Wikipedia: https://en.wikipedia.org/wiki/Power_analysis#Power_analysis_...

I recall high-speed light capture being used to exfiltrate data from router activity lights in the past.

EDIT: link here: https://threatpost.com/blinking-router-leds-leak-data-from-a...

Or highspeed cameras being used to discern the minute colour and luminance changes on a window or a material in the target room which occur due to vibrations in the glass or many other materials due to sound in the target room. This allows reproducing sound that occurs in the room without having access to any microphones.

Or using appropiate lenses to "look through" blinds or other materials that have tiny lensing gaps which the typical person regards as not see-through.

Bouncing a laser off a window has been around since AFAICT the 80's. Maybe 70's. And it didn't need a high speed camera.

It's also relatively easy to defend against as well.

Or hack their router to figure out their physical location. Water+microwaves etc.

Or van eck phreaking.

Or sell them tattletale electronics, like ethernet or usb cables.

Or rubber hose em.

Or ask scroogle/fecebook.

Not limited to audio forensics as the article mentions.

That’s an easy one. There’s nothing different between blinking that status LED and sending a transmission over fibre and wiretapping that.

In my experience, all the racks going into the comms rooms on the Navy ships we worked in had TEMPEST filters on their power inputs. The term I believe comes from the name of a NSA program using those kind of techniques for spying.

Reply on news.ycombinator.com