See also: https://news.ycombinator.com/item?id=32139827
This is really just publication spam.
Pixhell Attack: Leaking Info from Air-Gap Computers via 'Singing Pixels'
11–20 of 32 posts
Re: Pixhell Attack: Leaking Info from Air-Gap Computers via 'Singing Pixels'
#12For those unindoctrinated with the underlying phenomenon being exploited, this demo[1] was shared almost a decade ago. Also, undiscussed mitigation techniques[2] relevant to this general class of nuisance that circuit designers may find of value. [1] https://news.ycombinator.com/item?id=8862689 [2] https://news.ycombinator.com/item?id=41505772
Heed the warning on that first link. The pattern can really hurt your eyes.
Re: Pixhell Attack: Leaking Info from Air-Gap Computers via 'Singing Pixels'
#13My uncle described the air gapped facility he worked in… when they said no EM out, they meant nothing in or out except humans and filtered air. It was behind dual interlocking nuclear blast doors and concrete. Even the water was sourced and recycled on site to prevent documents or capsules exfiltration via the sewer.
I would think that a much more likely exfiltration method (assuming a compromised employee) would be via a capsule in the metaphorical "prison wallet" rather than the sewer.
Re: Pixhell Attack: Leaking Info from Air-Gap Computers via 'Singing Pixels'
#14My uncle described the air gapped facility he worked in… when they said no EM out, they meant nothing in or out except humans and filtered air. It was behind dual interlocking nuclear blast doors and concrete. Even the water was sourced and recycled on site to prevent documents or capsules exfiltration via the sewer.
All sorts of practical questions.
Can you bring in a lunch (is that a Coke bottle or a secret camera?)? Are there trash bins? If there is water, does that mean there are bathrooms (who does the restocking?)? Is there coffee?! Who/how do you get data into the network? Who/how do you get data out of the network? Can you bring in printed reference materials from a slightly less secure facility?
Bottom line: probably a huge pain in the butt if you have to work like that.
Re: Pixhell Attack: Leaking Info from Air-Gap Computers via 'Singing Pixels'
#15My uncle described the air gapped facility he worked in… when they said no EM out, they meant nothing in or out except humans and filtered air. It was behind dual interlocking nuclear blast doors and concrete. Even the water was sourced and recycled on site to prevent documents or capsules exfiltration via the sewer.
All sorts of practical questions. Can you bring in a lunch (is that a Coke bottle or a secret camera?)? Are there trash bins? If there is water, does that mean there are bathrooms (who does the restocking?)? Is there coffee?! Who/how do you get data into the network? Who/how do you get data out of the network? Can you bring in printed reference materials from a slightly less secure facility? Bottom line: probably a h…
Honestly I’ve never asked him, this was me listening as a 12 year old at the dinner table as he ranted about another search as he went into work. Now I have questions haha.
Re: Pixhell Attack: Leaking Info from Air-Gap Computers via 'Singing Pixels'
#16TEMPEST met Funtenna and had a baby!
Re: Pixhell Attack: Leaking Info from Air-Gap Computers via 'Singing Pixels'
#17Earlier quoted context omitted.
All sorts of practical questions. Can you bring in a lunch (is that a Coke bottle or a secret camera?)? Are there trash bins? If there is water, does that mean there are bathrooms (who does the restocking?)? Is there coffee?! Who/how do you get data into the network? Who/how do you get data out of the network? Can you bring in printed reference materials from a slightly less secure facility? Bottom line: probably a h…
Honestly I’ve never asked him, this was me listening as a 12 year old at the dinner table as he ranted about another search as he went into work. Now I have questions haha.
if he sometimes got searched when he went into work then he was probably permitted to bring things in such as lunch
Re: Pixhell Attack: Leaking Info from Air-Gap Computers via 'Singing Pixels'
#18For those unindoctrinated with the underlying phenomenon being exploited, this demo[1] was shared almost a decade ago. Also, undiscussed mitigation techniques[2] relevant to this general class of nuisance that circuit designers may find of value. [1] https://news.ycombinator.com/item?id=8862689 [2] https://news.ycombinator.com/item?id=41505772
That just blew me away! I didn't think I was going to hear anything, but yeah, immediately it gave an almost pulse-width modulated high pitch tone. I'm not surprised, but it is also awesome. I'm so many years old yet I can still hear the hum from CRT's, but I'd say that tone is much higher frequency.
Yeah, this is absolutely WILD. You can definitely hear it... wow.
Re: Pixhell Attack: Leaking Info from Air-Gap Computers via 'Singing Pixels'
#19My uncle described the air gapped facility he worked in… when they said no EM out, they meant nothing in or out except humans and filtered air. It was behind dual interlocking nuclear blast doors and concrete. Even the water was sourced and recycled on site to prevent documents or capsules exfiltration via the sewer.
I would think that a much more likely exfiltration method (assuming a compromised employee) would be via a capsule in the metaphorical "prison wallet" rather than the sewer.
The original backdoor.
Re: Pixhell Attack: Leaking Info from Air-Gap Computers via 'Singing Pixels'
#20Earlier quoted context omitted.
Honestly I’ve never asked him, this was me listening as a 12 year old at the dinner table as he ranted about another search as he went into work. Now I have questions haha.
if he sometimes got searched when he went into work then he was probably permitted to bring things in such as lunch
Actually, it's probably the opposite. The searches are more than likely to make sure you're not bringing anything in that could exfiltrate data like a camera, usb drive, or even pen and paper.
I work in a similar, secure environment. We are not allowed to bring any items in other than our persons, smart card that we scan on enter/exit, and the clothes on our back. We have to leave the facility to use the bathroom, eat, drink, etc.