Paranoid yoki tayyorlangan? Stolingizdagi josuslar

Menga odatda atrof-muhit yorug'lik sensorlari, noutbuk va telefonimda stiker borligi haqida savollar keladi. Ba'zilar men yorug'lik sensori bilan kamerani farqlay olmayman deb o'ylashadi va menga bu kamera emasligini tushuntirishga harakat qilishadi. Ular bilmaydigan narsa shundaki, atrof-muhit yorug'lik sensorlari mashina o'rganish usullari bilan ishlatilsa, ularni zaif kameralar kabi ma'lumotlarni olish mumkin.

Men odatda odamlardan eshitaman: “Lekin bizda yashirish uchun hech narsa yo'q!” Xo'sh, sizda o'ylaganchalik ko'p narsani yashirish mavjud, va sizning ma'lumotlaringiz boshqa joylardan to'plangan ma'lumotlar bilan birlashtirilishi mumkin, bu esa siz tasavvur qila olmaydigan darajada razvedka hosil qilishga imkon beradi. Va ma'lumotlarni to'playotganlar har doim ham to'g'ri niyatga ega bo'lmagan odamlar bo'lishi mumkin. Sizning ma'lumotlaringiz turli tahdid sub'ektlari tomonidan to'planishi, sun'iy intellekt yordamida tahlil qilinishi va turli maqsadlar va niyatlar uchun ishlatilishi mumkin.

Kiberxavfsizlik sohasida, biz qabul qilamizki, agar hujum turi mumkin bo'lsa va hujumni amalga oshirish imkoniyati bo'lsa, unda bu hujumlarni amalga oshirish uchun motiv bo'lishi mumkin. We do not assume that those who can collect the data always have legitimate cause to collect that data. We also do not assume only a single party or entity exploit a vulnerability to collects that data.

Below is a list of other things that can be used to spy on you that you probably don’t know have such capabilities.

Your TV speaker can listen to you

I am one of those who usually choose a TV model without a microphone or camera before I need to physically remove those devices. I also have a home firewall and a secured internal network, but I have learned throughout the years not to only rely on logical controls. Ammo, based on a WikiLeaks release in 2017 and documents from 2014, the CIA (in cooperation with MI5) turned speakers in certain TV models into microphones to collect data. Ular hatto suhbatlarni yig'ishda televizor o'chirilganini ko'rsatish uchun soxta o'chirilish rejimini yaratdilar. Agar sizning televizoringiz suhbatlaringizni eshitishi mumkin deb o'ylasangiz, undan foydalanilmayotganda o'chirib qo'yishingiz yaxshiroq. Bu sizga energiyani tejashga ham yordam beradi, chunki ulanmagan holda ham qurilmalar biroz elektr energiyasini iste'mol qilishi mumkin.

Sizning planshetingiz yoki noutbukingizning yorug'lik sensori qo'lingizni yoki tasviringizni ushlashi mumkin

Men ekran yorug'ligini har doim qo'lda sozlayman, va menimcha buni qilishimga yaxshi sababim bor.

Atrof-muhit yorug'lik sensori yorug'lik miqdorini o'lchash va ekran yorqinligini sozlash uchun ishlatiladi. Atrof-muhit yorug'lik sensorlaridan tasvir yoki klavisha bosishini ushlash, parollar va ma'lumotlarni o'g'irlash uchun foydalanish mumkin. Bir guruh MIT tadqiqotchilari yaqinda Android planshetning atrof-muhit yorug'lik sensori tomonidan yozib olingan qo'l ishoralaridan foydalanib, sensorli o'zaro ta'sirlarni ushlash uchun konsept isboti yaratildi.

Sichqonchangiz suhbatingizni tinglashi mumkin

Bu juda g'alati! Sichqonchada mikrofon yoki hatto karnay ham yo'q, uni mikrofonga aylantirish uchun hech narsa eshitish mumkin emas. Ammo, yon kanal hujumi bor “Mic-E-Mouse” hujumchiga sichqoncha orqali suhbatlaringizni tinglash imkonini beradi.

Yuqori samarali o'yin sichqoni (yuqori DPI) optik sensori tomonidan o'g'irlanishi mumkin, shuning uchun gapirganda, ovoz tebranishlari ushbu sensorlar yordamida o'lchanadi. mashina o'rganish algoritmlari va sichqoncha sensorlaridan olingan ma'lumotlar yordamida, xavfsizlik tadqiqotchilari tebranishlardan tushunarli nutqni aniqlay oladi.

Side channel attacks are a type of physical attack that measures changes in device output while a device performs an action. This type of attack is usually more sophisticated and targets certain assets like encryption keys. Ammo, if an attack method is developed for certain types of devices, it won’t be very difficult to expand it to other similar devices and even automate it.

Motion sensors (gyroscope) can be used to record your voice

Now that we learned your mouse can be used to record your talking, it’s good to know that motion sensors can also be used for the same purpose. This is important as almost all modern smart devices like phones and tablets have a gyroscope or motion sensor. The sensor acts as a vibrating device, making it perfect for side-channel attacks and to capture voice, as sound waves can produce tiny vibrations.

Your hard disk drive (HDD) noise can be captured to steal sensitive data

Now that we’ve learned about side channel attacks, there is a type of attack called DiskFiltration developed by a group of Israeli researchers that can capture sensitive data from the sound of a hard disk drive working. This type of attack is sophisticated and aims at devices with an air gap. With air gapped devices, a device is not connected to any network like the internet and is usually kept at sensitive facilities. Air gapped devices are not necessarily immune to cyber attacks. A classical example of these attacks is Stuxnet which targeted Iranian nuclear systems that were all air gapped.

Bu turdagi hujumda, hujumchi qurilmani ishlashini o'zgartiradigan zararli dastur bilan yuqtiradi. Zararli dastur tizimga intruder yoki boshqa usullar orqali kiritilishi mumkin. Qurilma havo uzatma bilan ajratilgan, shuning uchun zararli dastur tashqariga hech narsa yubora olmaydi. Ammo, bu qurilmani ma'lum bir tarzda ishlashiga sabab bo'ladi, shunda disk bosh arm mos naqshlarda harakat qiladi. Yaqindagi smartfon yoki havo uzatilmagan boshqa qurilma qattiq disk tovushini yozilayotganda yoki o'qilayotganda ma'lumotga aylantirish uchun ishlatilishi mumkin, bu havo uzatilishini amalda bekor qiladi.

Kompyuteringiz fanasi ma'lumotlaringizga xavf tug'dirishi mumkin

Tizimingizda SSD mavjud va arzon va shovqinli HDD ishlatmaysiz. Shunday qilib, qurilmangiz havo uzatilgan bo'lsa, maxfiy ma'lumotlarni chiqarib olib bo'lmaydi. Xo'sh! Another group of Israeli researchers invented a method for you. Although your SSD doesn’t have an arm to rotate to make noise like with an HDD, your computer fan can be used to capture sound to compromise sensitive data from your air gapped computer. Bu turdagi hujumda, malware first infects the air gapped system (perhaps by an intruder to a secured facility), then the speed of the cooling fan will be changed in certain patterns. The sound can transmit the data to a nearby listening device.

WiFi signals can see through your walls

WiFi signals bounce off humans in a room. Researchers can see through walls to know how many people are in the room and identify individuals by movement and posture without needing any camera.