News for hackers. Stuff that matters.
Re:An Implementation of Tempest in GNU Radio by portmanteaufu on Wednesday May 13, 2020 @02:54PM (#23170342)
> TEMPEST [1] (or Van Eck Phreaking) is a technique to eavesdrop video monitors by receiving the electromagnetic signal emitted by the VGA/HDMI cable and connectors

> GNU Radio [2] is a Free & Open-Source Toolkit for Software Radio

[1] https://en.wikipedia.org/wiki/Tempest_(codename) [2] https://gnuradio.org

Re:An Implementation of Tempest in GNU Radio by ardy42 on Wednesday May 13, 2020 @04:19PM (#23171356)
>> TEMPEST [1] (or Van Eck Phreaking) is a technique to eavesdrop video monitors by receiving the electromagnetic signal emitted by the VGA/HDMI cable and connectors

IIRC, I think it originally used the analog signals generated by controlling the electron gun in a CRT.

Re:An Implementation of Tempest in GNU Radio by JackRabbitSlim on Wednesday May 13, 2020 @07:58PM (#23173357)
Yes, but no.

https://www.cl.cam.ac.uk/~mgk25/pet2004-fpd.pdf

tl;dr The signal from a DVI cable can be detected but at much more reduced ranges. See also; RAGEMASTER (Snowden leak) a range extending implant for video cables.

Re:An Implementation of Tempest in GNU Radio by sandworm101 on Wednesday May 13, 2020 @08:03PM (#23173403)
TEMPEST was also the codename of the NSA project for leveraging emissions. And it has become code for machines modified to protect against such things. So a "tempest computer" (if you ever see one) is a computer hardened against emissions.
Re:An Implementation of Tempest in GNU Radio by na85 on Wednesday May 13, 2020 @08:19PM (#23173538)
They're stupid expensive, those machines. A lot of places are finding that it's less expensive to maintain an EMSEC zone and run COTS equipment.
Re:An Implementation of Tempest in GNU Radio by sandworm101 on Wednesday May 13, 2020 @08:52PM (#23173839)
I've heard about them being used for an opposite reason. Rather than for security, they are used in places where you don't want to risk them interfering with other equipment, like a room with radar equipment that might be sensitive.
Re:An Implementation of Tempest in GNU Radio by boredgamer2 on Wednesday May 13, 2020 @03:11PM (#23170564)
> TEMPEST [1] (or Van Eck Phreaking) is a technique to eavesdrop video monitors by receiving the electromagnetic signal emitted by the VGA/HDMI cable and connectors

I've always thought of TEMPEST as magic and incredibly cool. I get how this works for video, but why is it that infosec recommends for EM shielding of a datacenter? Wouldn't there be so much EM noise from a DC that the data you could pull off be .. noisy? lossy?

Re:An Implementation of Tempest in GNU Radio by pjc50 on Wednesday May 13, 2020 @05:12PM (#23171900)
It's difficult, but it gets a lot easier if you can send requests in. If you can force some kind of deterministic (not salted) crypto calculation to happen with a particular piece of key material, over and over again, you can use the same correlation technique that works for extracting GPS signals from hundreds of dB below the noise floor.

People have also done this with analysis of the power consumption of crypto hardware. I believe this was used against Trezor devices.

Re:An Implementation of Tempest in GNU Radio by ohazi on Wednesday May 13, 2020 @05:43PM (#23172170)
> GPS signals from hundreds of dB below the noise floor

Nitpick: GPS is more like 20 dB below the noise floor

[1] https://sdrgps.blogspot.com/2016/02/find-signal-in-noise.htm...

But yeah, theoretically you can cook up as much process gain as you need, it just might take a while.

Re:An Implementation of Tempest in GNU Radio by madengr on Wednesday May 13, 2020 @05:53PM (#23172271)
My old boss always said "There isn't 200 dB in the entire universe". Of course if you compare the diameter of the universe to a quark, it's 10,453 dBmeters, so I guess there is.
Re:An Implementation of Tempest in GNU Radio by jandrese on Wednesday May 13, 2020 @09:01PM (#23173908)
200dB is the one way freespace path loss to Geo orbit.

Back when I learned this I was shocked that satellite communications work at all.

I can only imagine how much loss you have trying to hear communications from the Voyager probes now.

Re:An Implementation of Tempest in GNU Radio by drmpeg on Thursday May 14, 2020 @02:51AM (#23176252)
318 dB for Voyager 1 at X-band.
Re:An Implementation of Tempest in GNU Radio by boredgamer2 on Thursday May 14, 2020 @08:48AM (#23178789)
> Back when I learned this I was shocked

Care to explain? I'm not following..

Re:An Implementation of Tempest in GNU Radio by jandrese on Thursday May 14, 2020 @11:30AM (#23180721)
Every 3dB is roughly a halving of the power level. It's hard to wrap a human brain around the orders of magnitude difference, the numbers are so far outside of anything we can encounter in the human scale.

Still, I will try to make an analogy. Start with the smallest transistor we make today, (7nm) and scale it up by the equivalent of 200dB and it would be 258 million km across, or about the same as the diameter of the Earth's orbit around the sun.

Re:An Implementation of Tempest in GNU Radio by ohazi on Wednesday May 13, 2020 @08:40PM (#23173744)
That's a pretty good rule of thumb until you get into some really weird stuff.

The link budget for bouncing radio signals off the moon (EME) is something like 260 dB. A while ago I had a chance to see the ground station at NASA Goldstone where they manage the radio links to Mars and the outer planets. There was a terminal open with ~single digit bits / second coming in from one of the Voyager probes. Having a 70 meter dish and a cryogenic receiver helps, but the link budget there has got to be truly staggering...

Re:An Implementation of Tempest in GNU Radio by appleflaxen on Thursday May 14, 2020 @04:38AM (#23177012)
what does that mean? can you dumb it down at all for a non-signals person?
Re:An Implementation of Tempest in GNU Radio by madengr on Thursday May 14, 2020 @09:06AM (#23178980)
My old boss worked on the Apollo mission comms, specifically the large dish antennas on the ship. It was just his way of joking about large numbers.

10 dB (deci-Bells) is an order of magnitude ratio; 10 dB = 10Log(10). For non ratios you tack on units, such as 30 dBHz = 10 Log(1 kHz). It just a way of expressing large values in engineering, and you can add the dB instead of multiplying in linear domain. You begin to think in dB after doing it for years.

The path losses stated in the replies are good examples when the rule is broken. The path loss is 22 dB + 20*Log(distance/wavelength). My universe/quark is just a joke of the most extreme ratio I can think of; I’m sure there are others larger.

The national debt ought to be in dB$.