Re:Air-Gapped Computers Can Be Compromised Using EM Side-Cha...
by schoen on Friday January 30, 2015 @06:30PM
(#8975175)
Cf. https://spqr.eecs.umich.edu/emi/
It would be very important to know if a digital equivalent is possible.
One interesting extension beyond the classical 1960s TEMPEST/Van Eck stuff is: If you can run malware on the target computer, you can obviously increase the effective gain through a variety of techniques.
What I'd be super interested in would be active RF attacks -- similar to the NSA toolkit with the passive external-RF-powered transmitter for implants, but ideally without modifications. Either causing specific errors or something else. Forcing resets might be enough. It'd be sort of a crossover between EMP and TEMPEST. Knowing, for instance, that the target security system controller is the only device connected to an 18.2m long wire within a facility might make it profitable to do a targeted attack on a certain frequency.