Hacker News new | ask | show | jobs
Gairoscope: Injecting Data from Air-Gapped Computers to Nearby Gyroscopes (techcrunch.com)
20 points by Berazu 1395 days ago
3 comments

Pretty sure this is the same researcher that publishes a new way to theoretically exfiltrate data over every possible signal medium every 3-6mo.
Mordechai Guri: https://cyber.bgu.ac.il/advanced-cyber/airgap

This one looks more "plausible" than some of his others. The MEMS gyroscope is considered a "safe" device on iOS and Android and can be accessed with Javascript.

Ok, but how do you get the data broadcasting code onto the airgapped computer?

If this was handed to me by our internal info sec team, I’d have to downgrade it to “non-urgent”.

According to the research paper it is assumed that malware is on the airgapped system and now needs to exfiltrate the sensitive information:

"Our malware generates ultrasonic tones in the resonance frequencies of the MEMS gyroscope."

https://arxiv.org/pdf/2208.09764.pdf

I get that young male PhD students find spying on people fascinating. I used to be fascinated by it also, until I became a sys admin and learned that people are immeasurably boring. But why is this research being encouraged? Do we really need more ways to attack computers and data? It's already obvious they will never be secure.
Things end up being useful in unexpected ways in the future.
This isn't relevant to spying on regular people. Regular people don't have air-gapped computers.
I'm not sure this guy's sex and age are relevant.