Live data from Hacker News

Headphones can be hijacked to surreptitiously record audio

wired.com

61–70 of 158 posts

Re: Headphones can be hijacked to surreptitiously record audio

#61
post #50
post #46

Earlier quoted context omitted.

> Headphones also make a really crappy mic -- try it out by plugging them into a microphone jack (essentially what this malware emulates) and recording yourself: you'll need to hold them inches from your mouth to be intelligible. The article itself claims two orders of magnitude better reach: > In their tests, the researchers tried the audio hack with a pair of Sennheiser headphones. They found that they could record…

> with a pair of Sennheiser headphones. And that's where this falls apart. While some people buy quality headphones, many will be using cheap, or rebranded low-quality headphones, like beats, or even no-name headphones.

One attack vector doesn't need to cover everyone. Developing many attack vectors as possible gives you the greatest chance that one of them will work against a particular target.

As an example, lets say that a particular organization has taken a number of standard precautions to prevent audio from being recorded surreptitiously. They've banned cell phones and chosen computers without internal mics. The ability to record sound via the output jack would be huge.

Besides, I bet beats would work just fine. The reason Sennheiser's worked so well is probably because they have a large speaker, whereas a ear bud has a pretty small speaker. A speaker being used to pick up audio is basically a dynamic mic, which are not very sensitive for a given size. So I'd expect something like Beats, or the cheapo AKGs I have connected to my audio jack right now to work quite well.

Re: Headphones can be hijacked to surreptitiously record audio

#62
post #56
post #54

Earlier quoted context omitted.

> Its not just recordings, but raw material to be edited and spliced together. "If one would give me six lines written by the hand of the most honest man, I would find something in them to have him hanged." ~ Cardinal Richelieu

Well, his thing was a culture where everyone was guilty of something and punishment was pretty harsh. To some extent like now. I'm sure I'm not recycling all my garbage precisely legally and that cap needs to be on (or off?) the creamer and I certainly was guilty of speeding this morning like everyone else on the road. I meant just outright fabrication. Record one conversation about my coworker being on vacation in n…

Well, I guess the quote also means how the most innocent thing, extracted from its context, can be very damaging. There's no need to edit your audio clips, just to imply it. "Tomorrow the president is going to northern Wisconsin. Mr. VLM is on record discussing shooting opportunities and ammo sale points near this precise area on the same precise day...". As you say, nothing that would stand trial, but enough for character assassination.

Re: Headphones can be hijacked to surreptitiously record audio

#65
post #40

Would be cool if Purism or similar companies had a nice big hardware switch that controlled access to any recording equipment.

A camera/mic switch should be required by law on every laptop and phone. Please don tell me a 5c switch is too expensive for a $300 phone.

It's not the cost of the switch. It's the cost of assembly (wiring). And the switch must fit the form factor.

Re: Headphones can be hijacked to surreptitiously record audio

#66

What we need here is a non-profit to vett devices and appliances against uninvited listening.

> What we need here is a non-profit to vett devices and appliances against uninvited listening.

The Free Software Foundation already does this:

https://www.fsf.org/resources/hw/endorsement/respects-your-f...

Re: Headphones can be hijacked to surreptitiously record audio

#70
post #53
post #11

Analog headphone amplifiers are quite easy to come by and can fix the problem for the ultimate paranoids.

Or USB amps for that matter.

The original exploit shows that you really can't trust any digital device connected to the headphones. USB doesn't provide any isolation, it can be used for input as well as output.
Post reply on HN