<story><title>Lasershark: Fast, bidirectional communication into air-gapped systems</title><url>https://intellisec.de/research/lasershark/</url></story><parent_chain></parent_chain><comment><author>Ansil849</author><text>&amp;gt; For our attacker model, we assume that an initial compromise has happened on the target device through the software supply-chain similar to the incidents at SolarWinds [8] and CodeCov [7]. For example, a regular update of the device’s firmware might unnoticeably add the necessary code for sending and receiving data through a built-in LED.&lt;p&gt;I mean, sure, if you have the ability to compromise the airgapped device by running code on it then you could presumably be doing a lot of things besides just leveraging potential LED line of sight.</text></comment>
<story><title>Lasershark: Fast, bidirectional communication into air-gapped systems</title><url>https://intellisec.de/research/lasershark/</url></story><parent_chain></parent_chain><comment><author>Jerrrry</author><text>you can exfiltrate data at a bit&amp;#x2F;hour through power consumption.&lt;p&gt;Run while(1){sin(cos(tan(rand(1))) for 1, nothing for 0, every half hour, with a correctional bit thrown in for good measure.&lt;p&gt;measure the heat of the room via remote sensing, power consumption, AC&amp;#x2F;air frequency analysis.&lt;p&gt;the NSA will have to add a layer of thermodynamic static noise in addition to their rooms full of stereo&amp;#x27;s blasting white noise.&lt;p&gt;a technically proficient attacker could infer the value of a encryption key given the GDP of the nation-state, if the data was granular enough.</text></comment>