Zero-days in Cisco Discovery Protocol

Re:Zero-days in Cisco Discovery Protocol by eitland on Thursday February 06, 2020 @02:52PM (#22259633)

> attacks that can work across airgaps using high frequency sounds,

Has any real ones been found and confirmed?

I remember one being mentioned a couple of years ago or so by one researcher but last I can remember it was not confirmed and IIRC other researchers were voicing their doubt about it.

[ Parent | on HN ]

Re:Zero-days in Cisco Discovery Protocol by user5994461 on Thursday February 06, 2020 @02:58PM (#22259689)

On Cisco, not sure, but otherwise the most amazing is probably this one. Reading PGP keys with a microphone up to few meters away from the laptop, from the sound of the power supply. It's more noise when it's busy.

https://m.tau.ac.il/~tromer/acoustic/

[ Parent | on HN ]

Re:Zero-days in Cisco Discovery Protocol by eitland on Friday February 07, 2020 @12:20AM (#22263441)

Thanks. Yes, this looks more familiar.

For some reason my head was shortcutting "attack" to mean "infect".

Thorrez in sibling comment mentions BadBIOS which is probably the one I thought about.

[ Parent | on HN ]

Re:Zero-days in Cisco Discovery Protocol by Thorrez on Thursday February 06, 2020 @10:36PM (#22263011)

The one you remember was BadBIOS, and yes it was bunk.

[ Parent | on HN ]

Re:Zero-days in Cisco Discovery Protocol by eitland on Friday February 07, 2020 @12:22AM (#22263446)

Thanks!

(Also, I realize that my brain thinks 2013 is "a couple of years ago". On a personal level that is possibly even more scary :-/ )

[ Parent | on HN ]