Are you safe? Optical data interception via LED on the hard drive

You know the LED light on your hard drive. Surely you have seen it… Do you think that computers that are not connected to a network are secure? Stuxnet has proven for the first time that they can be violated by the "air." But other than that, do you find it completely harmless to insert a USB drive into a computer that is not connected to the internet?

Security researchers from Israel's Ben Gurion University have shown that if an attacker manages to infect a computer, he could steal data remotely using a camera that can read the HDD LED.ice

The computer LEDs blink when the unit is in the read / write stage, but data transmission can also be performed visually.

As Wired says, the malware invented by researchers can cause a HDD LED to blink 6.000 times per second. If these lights are visible from a window, a drone or telescopic camera lens can capture signals from a distance.

The researchers explain in a publication that data can leak from HDD LEDs with 4kbps. Yes the speed is incredible by today's standards but it is enough to steal all the encryption keys.

The "good" thing about this attack is that the LED lights on the HDD are blinking anyway, so no one can tell if the infected system is transmitting data.

Please note that with other malware, researchers have been able to intercept data from unplugged computers from computer speakers, FM waves, and heat.

The coding system used for the data from HDD LEDs is called on-off keying, which is one of the visible light communication methods.

To steal data, the researchers used a Nikon DSLR, a high-end security camera, a GoPro Hero5, a Microsoft LifeCam, a Samsung Galaxy S6, Google Glass, and a sensor Photodiode.

The Siemens sensor was the fastest in data transfer (4kbps), while Galaxy S6 and GoPro Hero5 had bandwidth of 60 bits per second and 120 bits per second, respectively.

Fortunately, there are cheap methods to deal with this attack. Covering the LED or disconnecting it, or removing the computer from windows.

Watch the video

Paper (PDF)

iGuRu.gr The Best Technology Site in Greecefgns

every publication, directly to your inbox

Join the 2.100 registrants.

Written by giorgos

George still wonders what he's doing here ...

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).