AOH :: ISNQ6836.HTM
How an ancient printer can spill your most intimate secrets
|
How an ancient printer can spill your most intimate secrets
How an ancient printer can spill your most intimate secrets
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
--1457021584-426612415-1281506005=:14695
Content-Type: TEXT/PLAIN; CHARSET=UTF-8
Content-Transfer-Encoding: QUOTED-PRINTABLE
Content-ID:
http://www.theregister.co.uk/2010/08/10/side_channel_printer_attack/
By Dan Goodin in San Francisco
The Register
10th August 2010
Researchers have devised a novel way to recover confidential messages
processed in doctors' offices and elsewhere by analyzing the sounds made
when documents are reproduced on dot-matrix printers.
This so-called side-channel attack works by recording the =E2=80=9Cacoustic
emanations=E2=80=9D of a confidential document being printed, and then
processing it with software that translates the sounds into words. The
method recovers as much as 95 per cent of the printed words when an
attacker has contextual knowledge about the text being printed, such as
the words included in a medical prescription or a living-will
declaration. Up to 72 per cent of the text can be recovered when no
context is known.
The attack, which so far works only on English text, was carried out
under what the researchers described as =E2=80=9Crealistic -- and arguably even
pessimistic --- circumstances,=E2=80=9D in which there was no shielding from
ambient noise such as that made by people chatting in a nearby waiting
room. Despite the wide availability of inkjet and laser printers, about
60 per cent of doctors in Germany continue to use dot-matrix devices.
About 30 per cent of banks in Germany do so as well, according to the
researchers.
Countries such as Germany, Switzerland, and Austria require
carbon-copy-capable dot-matrix printers to be used for printing
prescriptions for narcotics, they said.
[...]
--1457021584-426612415-1281506005=:14695
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--
Visit InfoSec News!
http://www.infosecnews.org/
--1457021584-426612415-1281506005=:14695--
Site design & layout copyright © 1986- CodeGods