3.6 Exotic Spy Equipment
271
low frequencies (below 10 kHz) and can easily be filtered out, while the target
noises of the electronic components are generated at higher frequencies. The use of
modern multi-core processors facilitates the work. The sounds of nearby computers
with similar hardware configuration do not interfere with each other either, since
computers are distinguished by the distance from the microphone, temperature, and
other parameters.
Possible attack scenarios:
• Installation of a special application on the agent’s smartphone, organization of
the agent’s meeting with the victim, and placement of the phone in proximity of
the laptop;
• Hacking of the victim’s phone, installation of a special program, and waiting for
the phone to get close to the computer;
• Use of a special web page which can activate the microphone via the browser
(Flash or HTML Media Capture);
• Utilization of standard bugs and laser microphones in a new field;
• Sending of the custom server to a hosting with a good internal microphone,
acoustic extraction of keys from all surrounding servers;
• Installation of bugs in ventilation holes of servers and workstations.
Moreover, Adi Shamir claims: “In addition to acoustics, such attack can be
performed by measuring the current potential of the computer body. To do this,
a properly equipped intruder only needs to touch the conducting parts of the case
with bare hand or to connect to the earthing contacts at the other end of the VGA,
USB or Ethernet cable.” Before that, it is necessary to measure the potential of one’s
own body in relation to the earthing potential in the room by touching a properly
grounded object.
The developers of GnuPG some time ago received such vulnerability information,
as well as Shamir’s specific recommendations for suggested protection from such
analysis. Later versions of GnuPG 1.x and libgcrypt already contained the necessary
algorithmic modifications complicating the analysis; however, certain effects are still
preserved: in particular, different RSA keys still can be acoustically distinguished.
3.7 Trojans in Household Appliances
Let us consider just a few examples of application of Trojans in household appliances.
After connection of the device to the power supply network, such implants easily
connect to networks and send out viruses and spam. A batch of such illegal household
appliances, including irons, kettles, and phones, was accidentally found a couple
of years ago in network stores in Saint Petersburg. Russian sellers were forced to
urgently terminate supply contracts and suffer losses.
All that happened because due to “creativity” of Chinese engineers, irons, and
kettles learned to spy covertly on their owners.
271
low frequencies (below 10 kHz) and can easily be filtered out, while the target
noises of the electronic components are generated at higher frequencies. The use of
modern multi-core processors facilitates the work. The sounds of nearby computers
with similar hardware configuration do not interfere with each other either, since
computers are distinguished by the distance from the microphone, temperature, and
other parameters.
Possible attack scenarios:
• Installation of a special application on the agent’s smartphone, organization of
the agent’s meeting with the victim, and placement of the phone in proximity of
the laptop;
• Hacking of the victim’s phone, installation of a special program, and waiting for
the phone to get close to the computer;
• Use of a special web page which can activate the microphone via the browser
(Flash or HTML Media Capture);
• Utilization of standard bugs and laser microphones in a new field;
• Sending of the custom server to a hosting with a good internal microphone,
acoustic extraction of keys from all surrounding servers;
• Installation of bugs in ventilation holes of servers and workstations.
Moreover, Adi Shamir claims: “In addition to acoustics, such attack can be
performed by measuring the current potential of the computer body. To do this,
a properly equipped intruder only needs to touch the conducting parts of the case
with bare hand or to connect to the earthing contacts at the other end of the VGA,
USB or Ethernet cable.” Before that, it is necessary to measure the potential of one’s
own body in relation to the earthing potential in the room by touching a properly
grounded object.
The developers of GnuPG some time ago received such vulnerability information,
as well as Shamir’s specific recommendations for suggested protection from such
analysis. Later versions of GnuPG 1.x and libgcrypt already contained the necessary
algorithmic modifications complicating the analysis; however, certain effects are still
preserved: in particular, different RSA keys still can be acoustically distinguished.
3.7 Trojans in Household Appliances
Let us consider just a few examples of application of Trojans in household appliances.
After connection of the device to the power supply network, such implants easily
connect to networks and send out viruses and spam. A batch of such illegal household
appliances, including irons, kettles, and phones, was accidentally found a couple
of years ago in network stores in Saint Petersburg. Russian sellers were forced to
urgently terminate supply contracts and suffer losses.
All that happened because due to “creativity” of Chinese engineers, irons, and
kettles learned to spy covertly on their owners.