National Security Secret #31

   National Security Secrets  

#31. A "side channel" attack is when oscillating current is used to fingerprint every file viewed or listened to on a computer.

You were mildly unconcerned about things like "Spectre" and "Meltdown" being used against your servers.  Ha!

What if those were only distractions to keep eyes off the CPU utilization and WiFi throughput?

It was once thought only people could be fingerprinted for not having committed a crime.  Well, files must be people too.  But they're easier to fingerprint without an awful attorney present to bring up civil rights and due process to the software in charge.  And right over there is exhibit A - the mountain of scorn attorneys are dealt until they're needed and then wanted... badly.

Details in the process of being confirmed:

  • A laptop used in the presence of oscillating current will experience - among other things - interference which is basically noise in it's electronic circuitry.
  • More interestingly, a side effect of oscillating current is how so many things which are conductive will behave as antennas and transmit a signal.
  • Taken together, the transmitted noise given off by a laptop when viewing or listening to files can be used to create a "fuzzy hash" to later identify the actual file itself. 

What's a "fuzzy hash"?  I have no idea.  The phrase may be "made up" and the reality much more invasive.

Details waiting to be confirmed:

  • The laptop, desktop, or phone must be physically possessed by someone who installs the software.
  • Whether that's done intentionally on their part or without their knowledge has not been confirmed.
  • The software used does not propagate itself from device to device.
  • All devices potentially containing the software must be re-acquired and never EVER lost track of. 
One key giveaway that a laptop's been involved in such shenanigans?  The perception of an old timey dial-up modem sound for a fraction of a second when connecting or disconnecting the power cord.

More information will be provided.



Originally posted on 10-16-2021

Comments