- cross-posted to:
- technology
- cross-posted to:
- technology
- Orvanis ( @Orvanis@lemm.ee ) English12•1 year ago
From a tech perspective, insanely clever to use modern phones rolling shutter mode to sample significantly more data points.
From a “is this going to cause problems for the average person” perspective - not even close. Requires 65 minutes of recorded, stable footage. The camera must be < 6 feet away if the lights are on, and the cryptography algorithm must be running during that magic hour of recording…
It does enable remote attacks, but only if all very specific requirements are met, and it requires you have access to a camera for a long period of time that is perfectly positioned.
- I eat words ( @saint@group.lt ) English7•1 year ago
sounds like a job for a hacked cam ;)
- davefischer ( @davefischer@beehaw.org ) English1•1 year ago
The rolling shutter trick is amazing.
Perhaps not the most practical of attacks, but still an impressive feat.
- someguy ( @someguy@lemmyland.com ) English7•1 year ago
Reminds me of LEDs used to extract data out of airgapped networks: https://threatpost.com/blinking-router-leds-leak-data-from-air-gapped-networks/126199/ but different because that one requires software within the airgapped network to exfiltrate.
Didn’t there used to be network equipment that was vulnerable to data exfil from data status lights, or did I dream that up? Most data LEDs now just consistently blink.
- supernovae ( @supernovae@readit.buzz ) 7•1 year ago
Note to self - don’t add flashing LEDs to any security devices
- peanuts4life ( @peanuts4life@beehaw.org ) English2•1 year ago
Yikes! I wonder how isolated the led has to be to the CPU power supply to prevent this sort of attack!
- cmnybo ( @cmnybo@discuss.tchncs.de ) English5•1 year ago
Placing a capacitor in parallel with the LED should be sufficient to prevent it. That would form a low pass filter when combined with the current limiting resistor for the LED.
The attack is not really practical though. The smart card has to be read for 65 minutes while recording the power LED. The cards are normally only read for a fraction of a second.
- DRx ( @DRx@lemmy.world ) English1•1 year ago
WOW! This is really cool! Seems a little unrealistic in real world capabilities for now, but very cool. I wonder if phone manufacturers will limit cameras in some way going forward. Kinda reminds me of Sony once had to recall a camera that could see through clothes where something is found to be nefarious later after release due to unintended advances in tech