Do you think your data is safe because your computer isn’t connected to the internet or a network? Wrong. As security researchers recently demonstrated, the sounds of your computer’s hard drive can be used to transmit data from an air-gapped and seemingly well-protected machine.
The DiskFiltration hack, demonstrated in this video by security researcher Mordechai Guri of Israel’s Ben-Gurion University, works by controlling the actuator in a hard drive which moves back and forth across the drive’s platters to read and write data. Think of it as the arm on a record player, but constantly moving back and forth at tremendous speeds.
As the actuator jumps around, it produces subtle sounds. You know that cacophony of sounds when you first boot up a desktop computer? Part of that noise is coming from the machine’s hard drive, and with the correct malware installed, those sounds can actually leak sensitive data to a nearby air-gapped device, like a smartphone, that knows what to listen for.
The DiskFiltration has a working range of about six feet, but it’s limited to a slow data rate of about 180 bits per minute. That’s enough to capture a complex encryption key, like from the 4,096-bit RSA algorithm, in about 25 minutes. For larger files the method is mostly impractical, and it requires an insider to actually get the malware onto the protected machine. It also doesn’t work with SSD drives which don’t have moving parts. But still, it’s a crazy hack.
I have been wanting to write this review for some time as I’ve been nothing but grateful for the work Andy, Martin and all the team completed for me. I was in a real pickle when a (seemingly innocuous) spillage on my laptop threatened to destroy several month’s music production work, vital to my career.
Andy’s calm and reassuring manner, coupled with the timely and professional operation carried out by R3 meant that nearly all my data was retrievable (to within an hour or so of the spillage). The team kept me apprised all the way through the process; collected and returned the hard disk to me with a minimum of fuss and suggested alternative means of backing up (I backup on a daily basis now to external hard drives and the cloud!!)
A 10/10 service, I’ll definitely be recommending R3 to any colleagues similarly finding themselves up a certain creek without a certain paddle!!
R3 Data Recovery is rated (4.6) by 294 customer reviews on Reviews.co.uk
If your hard drive happens to fail, contact our team of experts. Our skilled professionals will be able to reliably recover data on your hard drive and provide industry-leading turnaround times which give you the confidence that's necessary to develop a solid, effective recovery plan.
Call us today at 0800 999 3282 or fill out our FREE, no-obligation diagnostics form for immediate help!