Slashdot Mirror


Hack Air-Gapped Computers Using Heat

An anonymous reader writes Ben-Gurion University of the Negev (BGU) researchers have discovered a new method to breach air-gapped computer systems called "BitWhisper," which enables two-way communications between adjacent, unconnected PC computers using heat. BitWhisper bridges the air-gap between the two computers, approximately 15 inches apart that are infected with malware by using their heat emissions and built-in thermal sensors to communicate. It establishes a covert, bi-directional channel by emitting heat from one PC to the other in a controlled manner. Also at Wired.

12 of 123 comments (clear)

  1. Skynet foiled by ceiling fan by Crashmarik · · Score: 5, Funny

    Film at 11:00

  2. goddamnit!!! by Anonymous Coward · · Score: 5, Informative

    they didn't "hack" the machine using heat!

    they gained control of both machines ahead of time, and THEN used heat (etc) to exfil data.

    they didn't gain control of an otherwise stock computer using heat over air gap. stop saying "hack".

    1. Re:goddamnit!!! by Lumpy · · Score: 5, Informative

      Just like the "hack using computer speakers" just install this malware first...

      It's an interesting out of band communications process, a very very VERY slow one... but still interesting.

      --
      Do not look at laser with remaining good eye.
    2. Re:goddamnit!!! by Sique · · Score: 3, Informative

      They used heat as an attack vector by creating a covered channel. It is not an attack vector to gain access, it's an attack vector to siphon data.

      --
      .sig: Sique *sigh*
    3. Re:goddamnit!!! by LordLimecat · · Score: 3, Insightful

      So I fail to care about which term is used, it is a security breach and one of the worst kind

      Except it will only work in the most esoteric scenarios with laboratory conditions, sure. 2 PCs, with side-vent cooling and no cold aisle, and a distance of 15 inches?

      Somehow I dont think this will threaten air-gapped secure networks. Those are going to have steady cold air coming in the front, and exhausting out the back; if theyre dumping significant heat through the side of the cases you're doing it wrong.

    4. Re:goddamnit!!! by wonkey_monkey · · Score: 4, Insightful

      If anything, then, I'd say they've hacked the air gap, not the computers.

      --
      systemd is Roko's Basilisk.
  3. Sure, great, new comms channel by OzPeter · · Score: 4, Interesting

    But how did the malware get on BOTH of the computers in the first place? TFA totally avoids that question.

    --
    I am Slashdot. Are you Slashdot as well?
    1. Re:Sure, great, new comms channel by Thanshin · · Score: 5, Funny

      The time it took them to increase the heat and transmit a 1 varied between three and 20 minute

      So, somewhere between Comcast's Standard and High Speed plans.

    2. Re:Sure, great, new comms channel by fuzzyfuzzyfungus · · Score: 4, Funny

      Not quite; you can transfer at full speed for the whole month without being throttled or paying overage fees...

  4. Nothing new here by Anonymous Coward · · Score: 3, Funny

    Governments and business have been doing this for centuries, communicating by nothing more than hot air.

  5. Finally, malware that gives computers a fever. by Ihlosi · · Score: 5, Funny

    Now all those viruses can finally give your computer proper disease symptoms.

  6. Re:The larger problem is by gstoddart · · Score: 4, Insightful

    And how did Stuxnet spread?

    In some cases, by exploiting removable media.

    If you think there's no precedent for getting the infection onto the machine, you're horribly mistaken.

    --
    Lost at C:>. Found at C.