|
|
|
|
|
|||||||
 |
|
|
LinkBack | Thread Tools | Rate Thread |
| Author |
|
|
Registered
|
Hackers can steal cryptographic keys by video-recording power LEDs 60 feet away
Just when you thought certain things were secure, some smart people prove you wrong.
Researchers have devised a novel attack that recovers the secret encryption keys stored in smart cards and smartphones by using cameras in iPhones or commercial surveillance systems to video record power LEDs that show when the card reader or smartphone is turned on. Full explanation from Ars here: https://arstechnica.com/information-technology/2023/06/hackers-can-steal-cryptographic-keys-by-video-recording-connected-power-leds-60-feet-away/ But, this video done by the researchers explains things simply and clearly. |
||
06-14-2023, 12:23 AM
|
|
|
The Unsettler
Join Date: Dec 2002
Location: Lantanna TX
Posts: 23,885
|
Cool but something i would lose less than zero sleep over.
__________________
"I want my two dollars" "Goodbye and thanks for the fish" "Proud Member and Supporter of the YWL" "Brandon Won" |
||
|
06-14-2023, 04:57 AM
|
|
|
Back in the saddle again
Join Date: Oct 2001
Location: Central TX west of Houston
Posts: 55,915
|
That's super cool and impressive. Not going to be an issue against us, but will probably be used by or against govts or possibly companies or maybe very specific targets. Granted, in most circumstances, this is probably one of the harder ways to get access/info.
__________________
Steve '08 Boxster RS60 Spyder #0099/1960 - never named a car before, but this is Charlotte. '88 targa  SOLD 2004 - gone but not forgotten
|
||
|
06-14-2023, 06:46 AM
|
|
|
You do not have permissi
Join Date: Aug 2001
Location: midwest
Posts: 39,848
|
There are scammers that walk around public places with RFID sniffers for credit cards.
I'm now putting my car keys in a double aluminum fold at night to prevent 'man in middle' unlocking/activation. My understanding is every car after 2014 with the 'shark fin' antenna has remote tracking with altering vehicle systems/operations. Not sure why this isn't disclosed and illegal.... It seems like Subaru disabled this, at least in Massachusetts. https://arstechnica.com/cars/2023/06/feds-tell-automakers-not-to-comply-with-mass-right-to-repair-law/
__________________
Meanwhile other things are still happening. |
||
|
06-14-2023, 06:55 AM
|
|
|
I see you
Join Date: Nov 2002
Location: NJ
Posts: 29,889
|
 Maybe my next degree should be in electronics.
__________________
Si non potes inimicum tuum vincere, habeas eum amicum and ride a big blue trike. "'Bipartisan' usually means that a larger-than-usual deception is being carried out." |
||
|
06-14-2023, 03:21 PM
|
|
|
Make Bruins Great Again
|
Quote:
__________________
-------------------------------------- Joe See Porsche run. Run, Porsche, Run: `87 911 Carrera |
||
|
06-14-2023, 05:26 PM
|
|
|
|
Registered
Join Date: Jun 2001
Location: Northeast GA
Posts: 2,059
|
Wait till AI becomes predictive to the point of causing (or allowing) desired outcomes.
__________________
Bob S. '87 911 ("Hardtop" per neighbor) |
||
|
06-15-2023, 12:21 PM
|
|
|
The Unsettler
Join Date: Dec 2002
Location: Lantanna TX
Posts: 23,885
|
Quote:
Use it everywhere you can. Phone and watch contactless pay is a unique string every single transaction and is only valid for the current transaction. Won't matter if it's ever sniffable, anything you'd get would be useless before the person walks away from the register.
__________________
"I want my two dollars" "Goodbye and thanks for the fish" "Proud Member and Supporter of the YWL" "Brandon Won" |
||
|
06-15-2023, 01:20 PM
|
|
|
Back in the saddle again
Join Date: Oct 2001
Location: Central TX west of Houston
Posts: 55,915
|
Quote:
__________________
Steve '08 Boxster RS60 Spyder #0099/1960 - never named a car before, but this is Charlotte. '88 targa SOLD 2004 - gone but not forgotten
|
||
|
06-15-2023, 05:07 PM
|
|
|
Registered
|
While I'm not any kind of a hacker, nor do I work elsewhere in the business - but when I was doing vulnerability assessments for some "interesting" parts of our US strategic defense stockpile we took a completely unclassified weeklong course from Joe Grand, one of Bunnie Huang's disciples. I'm only a simple country metallurgist by training (i.o.w. not a sparky) but at the end of the week I, and my colleagues, all agreed that we want to go live in a cave somewhere with tinfoil hats and underwear.
That introductory level showed that if you can get "hands-on" you own the device and its data. About the same time, sidechannel was becoming a big deal - but then you had to get close enough to almost get "hands-on" so it seemed to be a cool party trick. Also, typically to do a SS attack there needed to be additional, and unwelcome, software on the data-donor device. Time moves on, and at least from the ars article this looks kind of legit and useful in the real world. (until somebody discovers black electrical tape) Certainly more so than the whole "OMG they can read your CRT screen (remember those) just from EM emissions". That kind of turned out to be a sham.
__________________
'78SC, lots of other boring cars... |
||
|
06-16-2023, 01:38 PM
|
|
|
Registered
Join Date: Jan 2002
Location: west michigan
Posts: 26,603
|
I'm safe!
__________________
78 SC Targa Black....gone 84 Carrera Targa White 98 Honda Prelude 22 Honda Civic SI |
||
|
06-16-2023, 01:54 PM
|
|
|
The Unsettler
Join Date: Dec 2002
Location: Lantanna TX
Posts: 23,885
|
Quote:
My Tahoes had their own number and cell plan. So while technically yes it is “tracking” there is nothing nefarious going on.
__________________
"I want my two dollars" "Goodbye and thanks for the fish" "Proud Member and Supporter of the YWL" "Brandon Won" |
||
|
06-16-2023, 02:01 PM
|
|
|
Porsche 944
Max
1978 Porsche 911 SC 3.0
