[WTF!] Toughest encryption cracked by listening to your CPU with a phone

[conspirosphere.tk]

“Security researchers have successfully broken one of the most secure encryption algorithms, 4096-bit RSA, by listening – yes, with a microphone — to a computer as it decrypts some encrypted data. The attack is fairly simple and can be carried out with rudimentary hardware. In this case, the security researchers listen to the high-pitched (10 to 150 KHz) sounds produced by your computer as it decrypts data.  The researchers successfully extracted decryption keys over a distance of four meters (13 feet) with a high-quality parabolic microphone. They also managed to pull of this attack with a smartphone placed 30 centimeters (12 inches) away from the target laptop.”

http://www.extremetech.com/extreme/173108-researchers-crack-the-worlds-toughest-encryption-by-listening-to-the-tiny-sounds-made-by-your-computers-cpu

(we're going to need safe rooms in deep underground bunkers to access our wallets)

[1714975412]

1714975412

[1714975412]

1714975412

[1714975412]

1714975412

[1714975412]

1714975412

[CoinGeneral]

Agreed with the playing music option, have a bunch of random static noise to cancel out any frequencies made by the CPU so any attackers will have a hard time decoding the noise

Or make invisible noise that only those kinds of microphones can hear

Then there will be anti-invisible noise microphones

Anyway there will be a long lasting war vs these microphones as they become more powerful, the cpus become more silent and more distractions are made for them as well.

[Bittzy78]

You could easily render those listening devices useless by continuously playing a loop of the song She Blinded Me With Science by Thomas Dolby.

[CoinGeneral]

You could easily render those listening devices useless by continuously playing a loop of the song She Blinded Me With Science by Thomas Dolby.

No, like I said, the same people who cracked the code can filter out any excess noise, that includes that song

[BitcoinFr34k]

Lol that's crazy

[compro01]

Music or recordings aren't going to help you.  Your speakers aren't capable of producing frequencies that high.  This sound is at about 290KHz.  Your speakers peter out at about 20KHz.

[Vod]

Music or recordings aren't going to help you.  Your speakers aren't capable of producing frequencies that high.  This sound is at about 290KHz.  Your speakers peter out at about 20KHz.

So they'll invent new speakers that produce higher frequencies just for this issue.

[ni|]

  MIND BLOWING ...

Dang , nothing is safe nowadays .

[P_Shep]

Hmmmm... with CPUs pushing data through at gbps, I'm not so sure that the sound sampling is going to be quick enough.

Calling BS.

[dopey]

Fascinating. I wonder how long until we see a phone app for this.

[Frost000]

That's absolutely insane... Yet cool at the same time!

Like others, I guess I'll be listening to some loud music from now on.

[AirFlame]

I need to cut my micro chip from my motherboard with the sound card !!! Yes this is insane !

[some1]

You can easily get rid of the problem with multi core CPUs or some background CPU-intensive process.
I see it as an exploit that works only in laboratories.

[Wipeout2097]

The PC bios has "spread spectrum" options to mitigate this kind of attacks

[Lethn]

I'm not a hardware expert but haven't we known for years about this kind of thing? Not surprised somebody has found out how to work stuff out through the computer noises because you even can diagnose technical problems from the beeps that come from your motherboard when you turn on the computer. To get past this it should be just a matter of designing components so that they don't transmit noises like this anymore if you want to be really paranoid about hackers.

While it's certainly pretty cool I don't know if it's cause for panic

[shorena]

Keep in mind that you need:

• to send several mails (amount depends on the length of the key) to the victim which you know the content off, mainly because of the bandwith of the used frequency.
• a victim using an old GPG version (2.x is not affected)
• to be able to get that close to your victim at the moment the prepared mails are encrypted
• a victim using specific hardware (as far as I understood the paper not every cpu, board etc. is affected)

so keep your panties on and update GPG, which you should have done allready anyway.

[whiskers75]

Easy to stop, just do this in the background:

Code:

nice yes > /dev/null

(basically spams "y" to /dev/null)

[Ch1bi]

woah.. that is bananas

[mprep]

Another encryption system cracked open, well, at least a bit.

[eyjgvfdhbshm]

they can listen in on your computer using the power supply, no internet connection needed, the power grid is the internet