Smart computer people: is this a real thing or sensationalism?

[Balog]

My initial bet is on the latter, but I am not qualified to say either way.

https://bgr.com/2015/07/08/hacking-tools-pita-encryption-keys-radio-waves/

[lee n. field]

It is, sort of.  I'trying to remember what that kind of attacks called.  Starts with an 'S' ("T").

[Ron]

We've had threads about hacking air gapped computers before.

IIRC our resident experts weren't convinced.

[Balog]

We've had threads about hacking air gapped computers before.

IIRC our resident experts weren't convinced.

I think that was a different technology though, wasn't it?

[Brad Johnson]

Key phrase: "... up to 19 inches away."

Given a 1.5' maximum effective distance it's not of much use, or threat, unless you always use your laptop in the same exact location. Being the "size of a piece of pita bread" it's not exactly covert, either.

As always, context and perspective are key.

Brad

[Firethorn]

TEMPEST is a thing.  Want to double the distance?  Multiply the cost by 10. 

It wouldn't be the password to your laptop that they'd want, it's the passwords(and usernames) to your online sites. 

[lee n. field]

TEMPEST is a thing.  Want to double the distance?  Multiply the cost by 10. 

It wouldn't be the password to your laptop that they'd want, it's the passwords(and usernames) to your online sites. 

Tempest what the name I was trying to remember.  Yes, expensive stuff.  Gov't level expensive.

[zahc]

Usually, these schemes require the computer to be previously compromised before the hack i.e. some malicious software is required on the computer itself to accomplish the communication via sound waves or whatever.

[Headless Thompson Gunner]

Sounds like Van Eck hacking, only applied to a processor instead of the display.  Seems possible in theory, and apparently they can make it work in controlled environments.  But it also seems mighty impractical.

[230RN]

The hell with tinfoil hats.  I want a mu-metal tent for me and my machine. 

Yeah, I know, they allege that Faraday cages don't work.  Huh.

[KD5NRH]

Given a 1.5' maximum effective distance it's not of much use, or threat, unless you always use your laptop in the same exact location. Being the "size of a piece of pita bread" it's not exactly covert, either.

Depending on cost, it could end up being worthwhile to build a few of them into various tables and swap them in at the local Starbucks.  Not so much around here unless you want to steal a bunch of university and MMORPG logins, but in places where more folks are going to be checking company email via VPN, etc. you could easily snag enough passwords and keys to pay for the equipment.

[Balog]

Depending on cost, it could end up being worthwhile to build a few of them into various tables and swap them in at the local Starbucks.  Not so much around here unless you want to steal a bunch of university and MMORPG logins, but in places where more folks are going to be checking company email via VPN, etc. you could easily snag enough passwords and keys to pay for the equipment.

Find coffee shop where fed.gov employees (or Capitol Hill staffers) go, glue device under table, profit.

[RevDisk]

State of the art, for 1950's. With computers, it got big during the late 80's and you had TEMPEST. CRTs were popular for van Eck because they were essentially small TV stations.

All electronics outside of a Faraday cage leak electromagnetic noise. It'd be relatively trivial to build a jammer and incorporate it into any electronic device, or make a handheld version. At the microvoltage levels we're talking about, FCC isn't going to care even if it technically a violation of the rules. This will also only work for electronics that aren't designed to minimize EMI production, which a lot of crappier designed stuff isn't. So, it'll probably be easy as hell for Widget XYZ and virtually impossible for Widget ABC.

[KD5NRH]

All electronics outside of a Faraday cage leak electromagnetic noise. It'd be relatively trivial to build a jammer and incorporate it into any electronic device, or make a handheld version.

Or a laptop power supply; I've owned a few pretty darn noisy ones in the past, and this seems like a good excuse for slightly sloppier methods there.

[230RN]

'S funny.  I was going to suggest bringing along a little Compaq laptop I have and parking it next to me.  Have it run a little BASIC program:

10  A = TAN(0.80285)
20  REM 46 DEGREES = 0.80285 RADIANS
30  GO TO 10

Or some such.

Then I got back on and read the above two posts.

Great minds.... thinking alike... you know the rest.

:)

[KD5NRH]

'S funny.  I was going to suggest bringing along a little Compaq laptop I have and parking it next to me.  Have it run a little BASIC program:

10  A = TAN(0.80285)
20  REM 46 DEGREES = 0.80285 RADIANS
30  GO TO 10

Oh, now I have an evil thought...some cheap, tiny addition to those under-the-laptop cooler setups, that does nothing but have an old 386 simulate logins to VPNs at whitehouse.gov, fbi.gov, etc.

Even better if you know of some sites owned by less restrained organized criminal groups.

[lee n. field]

Oh, now I have an evil thought...some cheap, tiny addition to those under-the-laptop cooler setups, that does nothing but have an old 386 simulate logins to VPNs at whitehouse.gov whitehouse.com, fbi.gov, etc.

Even better if you know of some sites owned by less restrained organized criminal groups.

FIFY

 

[Firethorn]

FIFY

 

I still remember when my dad found whitehouse.com.

I sighed, 'Yes dad, it's porn.  You want whitehouse.gov.'

[230RN]

Hey, you know what? You could probably slip an Arduino computer in the cooling box.  Or maybe one of those Basic Stamps... yes? Or just keep it nearby, running an endless loop program... I think they call them "Sketches" for some reason.

https://upload.wikimedia.org/wikipedia/commons/7/71/Arduino-uno-perspective-transparent.png

Terry

[RevDisk]

You'd want randomized noise or it'd be easy to filter out.