Newsletters

Select newsletters below and click the button to sign up!

Boston News NY News
DC News Internet Daily
SiliconValley News
InternetNews Business Report




Become a Marketplace Partner



Partner With Us















Internetnews Bloggers

Recent Entries

Archives

July 2009
Sun Mon Tue Wed Thu Fri Sat
      1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30 31  

Monthly Archives

Search The Blog

Netstat -vat by Sean Michael Kerner (bio)

A command line view of IT



Sniffing passwords with Laser beams #BlackHat

laserbeams_small.jpg
From the 'friggin Laser beams' files:

LAS VEGAS. There are all kinds of ways that attackers can 'sniff' a users password, but laser beams and power cords?

No it's not Science Fiction, it's Black Hat.

Security researchers Andrea Barisani and Daniele Bianco gave a tremendously entertaining and informative talk here about how good old PS/2 keyboard leak though power lines and oh yeaah the lasers.

But first the keyboards.

"We attacked PS2 keyboards and they have multiple cables inside of it," Barisani said. "The wires are close to each other and poorly shielded so there is a leak of information from the data wire to the ground wire."
Barisani noted that the signal from the ground wire would also permeate to other electrical outlets in close proximity.  The two researcher showed some demo screens of what the electrical wires actually showed - at this stage they were able to make out letters. They didn't demo any kind of larger tool that could actually turn all the letters into numbers and words, though they said it was possible.
"We're confident that more expensive equipment can lead to more precise measurements," Barisani said. "We're two idiots and we did this in one week."
Now the laser beams is another story. The general idea is that the laser is used as an acoustic microphone that could be used to remotely pick up the sound vibration from a users keyboard. Somehow you can match that acoustic vibration to words/numbers, but frankly I didn't understand how that actually worked.

But it is something remarkable and according to their preliminary research very real too.

So how do you defend against these attacks? Tin hats of course
tin.hat.small.jpg

| Comments (0) | TrackBacks (0) | Share

0 TrackBacks

Listed below are links to blogs that reference this entry: Sniffing passwords with Laser beams #BlackHat.

TrackBack URL for this entry: https://swarm.jupitermedia.com/mt-tb.cgi/8582

Leave a comment