Do you think your data is safe because your computer isn’t connected to the internet or a network? Wrong. As security researchers recently demonstrated, the sounds of your computer’s hard drive can be used to transmit data from an air-gapped and seemingly well-protected machine.
The DiskFiltration hack, demonstrated in this video by security researcher Mordechai Guri of Israel’s Ben-Gurion University, works by controlling the actuator in a hard drive which moves back and forth across the drive’s platters to read and write data. Think of it as the arm on a record player, but constantly moving back and forth at tremendous speeds.
As the actuator jumps around, it produces subtle sounds. You know that cacophony of sounds when you first boot up a desktop computer? Part of that noise is coming from the machine’s hard drive, and with the correct malware installed, those sounds can actually leak sensitive data to a nearby air-gapped device, like a smartphone, that knows what to listen for.
The DiskFiltration has a working range of about six feet, but it’s limited to a slow data rate of about 180 bits per minute. That’s enough to capture a complex encryption key, like from the 4,096-bit RSA algorithm, in about 25 minutes. For larger files the method is mostly impractical, and it requires an insider to actually get the malware onto the protected machine. It also doesn’t work with SSD drives which don’t have moving parts. But still, it’s a crazy hack.
It was an experience I don’t wish to go through again. Panic, sweats, tears and fear!
I called a few companies and R3 was the only one who showed some ‘human’ understanding of what is was like to loose all your data. I’m not computer minded & found the straight talk such a relief after all the ‘tech jargon’ which just made me feel more stupid. The profesional and human touch is so rare to find in businesses these days.
All my data was recovered in less than 24hrs, it was so easy and I felt safe and in expert care the whole time. I also felt that I wasn’t being taken for a ride due to my ignorance, which is an impression I got from phoning around other companies. The 5* review can’t do justice here, it was unbelievable service and an experience that restores faith in ethical business with real humans!!!
R3 Data Recovery is rated (4.6) by 294 customer reviews on Reviews.co.uk