Networking & Communications Blog

Networking & Communications

The Networking & Communications Blog is the place for conversation and discussion about power & apps, wireless technology, voice & internet, and network security as they relate to networking and communications fields. Here, you'll find everything from application ideas, to news and industry trends, to hot topics and cutting edge innovations.

Previous in Blog: Who's Spying on Your Cell Phone?   Next in Blog: What Happens When The Internet Gets Nuked?
Close
Close
Close
10 comments
Rate Comments: Nested

Will RF Hacking Get Worse Before Better?

Posted October 07, 2014 12:00 AM by Hannes

I'd wager that, here in America, most individuals assume they're being surveilled or potentially hacked at any given moment. If it's not the NSA, it's the suspiciously bearded guy at the table next to you at Starbucks, furiously typing away in order to drain your life savings as you pay your trash bill online.

Cell phone surveillance and government monitoring of internet search behavior have become assumptions, but the general public is now becoming increasingly aware of, and concerned about, radio frequency (RF) surveillance and hacking. Let me explain in this latest edition of CR4's Ditch-Your-Devices-And-Hide-In-A-Cave series.

RF surveillance is not a new concept. The US government was concerned enough about leaking unintended emissions to implement their partially classified TEMPEST shielding standards in the early 1980's. In 1985, Wim van Eck (of the eponymous "van Eck phreaking") eavesdropped on a distant computer monitor and recorded system usage data using a basic VHF antenna and a TV set.

RF hacking registers detected activity as spikes on an RF spectrum, so unlike data hacking it's extremely difficult to discern the contents of a transmitted message or operation. In this context, it seems to be a relatively benign security threat, but a host of recent events and research have shown otherwise.

There are two main issues that have thrust RF eavesdropping into minds of the paranoid populace. The first is that a very large portion of electronic devices emit unintended RF, and I don't need to remind you that these devices-laptops, tablets, smartphones, music players-are omnipresent in our society. Every time you press a key or open an app, your device spews an emanation on a relatively predictable frequency.

The second factor consists of only three letters: SDR. Software-defined radio has undergone amazing advances in the recent past, with equipment becoming cheap enough for widespread consumer operation. With a $20 SDR dongle and open source software, a savvy user can potentially monitor emissions over a huge range of the RF spectrum, from amateur and broadcast radio to 900 MHz walkie-talkies. With a little more equipment and knowledge, the same user could receive and transmit over an even wider spectrum.

Like most cool technologies, RF offers the maliciously minded a host of opportunities, such as listening in on and transmitting over hospital and emergency communications, trunked radio, and air traffic control. But as this embarrassingly slow presentation (eventually) points out, bad guys could triangulate you and your devices simply by monitoring emissions from an active screen, even if your networking functions are switched off. A whole host of RF-dependent devices in modern homes, from smart meters to automation systems and car fobs, can be and have been hacked.

But what can I, the humble CR4 blogger, do to keep my RF in check? I'll need a suitable Faraday cage, for starters. Application security researchers have recommended moving about with your devices in booster bags (less suspicious than coating them in aluminum foil, maybe) and even placing them in a closed microwave and running a shielded cable to your body. To the anticipated chorus of "Switch it off!", the same researchers retort that this isn't always good enough, and only removal of a battery or power supply (if possible) eliminates all emissions.

While it might be a chore to worry about data security AND network security AND RF monitoring, RF networking is likely to increase due to the predicted development of the Internet of Things (IoT) concept. Unfortunately, we might not see any effective preventive measures roll out until hacking becomes widespread, as in the development of Wifi's WPA and WPA2 protocols.

Image credits: Luke McKernan | CyberGibbons

Reply

Interested in this topic? By joining CR4 you can "subscribe" to
this discussion and receive notification when new comments are added.

"Almost" Good Answers:

Check out these comments that don't yet have enough votes to be "official" good answers and, if you agree with them, vote them!
Guru
Popular Science - Evolution - New Member Popular Science - Weaponology - New Member

Join Date: May 2006
Location: The 'Space Coast', USA
Posts: 11119
Good Answers: 918
#1

Re: Will RF Hacking Get Worse Before Better?

10/07/2014 7:42 AM

Well, you can shield your house, but if it really gets that bad maybe it's time to consider the alternative to electronic checking.

Once upon a time we paid our bills by dropping a check in a stamped envelop and putting that envelope in a metallic box along our roadside. I still pay most of my bills that way and much to everyone's surprise - it works!

Now, I can't control the entity's security that I am sending my check to, but this is a limit to my reach that I just have to accept.

As a society we did pretty well paying our bills and securing our earnings without RF signals. It's still possible to do that today, so any real threat is more of a threat to connivence and not so much to imminent personal bankruptcy.

The worst case scenario is identity theft. However, you can mitigate that with any number of agencies that offer to keep a watchful eye on your accounts at a small cost.

Credit card and bank fraud can be managed by watching your own accounts. Any suspicious activity is really the bank's responsibility, so if you do acquire a loss, the bank will fix it. The worst is waiting for a new card to arrive in that metal box by the road.

The point is, we can minimize our exposure by simply being mindful of where we keep our crown jewels. There are certain types of data that I simply do not keep on electronic devices.

Is it really necessary to carry all your life's critical data on your mobile phone where it is easily lost? That seems foolish and totally unnecessary to me.

We can either try to create an impregnable fortress around our whole lives or simply keep the valuables in a small safe. The latter scenario is by far the cheaper alternative at a small cost of convenience.

Reply
Guru
Hobbies - CNC - New Member Hobbies - DIY Welding - New Member Engineering Fields - Electromechanical Engineering - New Member

Join Date: Aug 2007
Posts: 23647
Good Answers: 420
#2
In reply to #1

Re: Will RF Hacking Get Worse Before Better?

10/07/2014 7:56 AM

the reasoning we will paying our bills online is a lot other of other forms.

Convenience and cost effective. We eliminate the personal effect that someone will actually open our bill and enter it.

**WARNING** This is going off topic.

What I don't understand is, ATM fees. this automation should save money where we don't have fees. Initially ATM didn't have fees. (Some establishments such as Kwik Trip (convenence Store/Gas Stations) and Community Credit Unions does not charge these fees, and will reimburse you for them.

__________________
“ When people get what they want, they are often surprised when they get what they deserve " - James Wood
Reply
Guru
Popular Science - Evolution - New Member Popular Science - Weaponology - New Member

Join Date: May 2006
Location: The 'Space Coast', USA
Posts: 11119
Good Answers: 918
#3
In reply to #2

Re: Will RF Hacking Get Worse Before Better?

10/07/2014 8:28 AM

ATMs cost money to buy and operate. You are always going to pay for this either at the ATM or as part of your banking services or both.

Part of those fees are simply because they can charge them and people accept it because it is "convenient".

I use ATMs about 4 times a year. However, I do most of my grocery shopping, gas, other local purchases using a bank card, which cost merchants money.

Ultimately, we still pay those merchant fees in the end product, but we don't see them as an itemized cost of doing business any more than we see merchants itemizing the cost of electricity to run their businesses.

I could go back to paying cash, but my biggest gripe is all the coin change that tends to accumulate in one's pockets. So, the convenience of bank cards trumps the risks of security, which is mostly mitigated by the banks. However, as you unwittingly pointed out, we still pay the cost of that operation as the end user.

Reply
Guru
Hobbies - CNC - New Member Hobbies - DIY Welding - New Member Engineering Fields - Electromechanical Engineering - New Member

Join Date: Aug 2007
Posts: 23647
Good Answers: 420
#4
In reply to #3

Re: Will RF Hacking Get Worse Before Better?

10/07/2014 8:41 AM

As far as ATM, the cost are still there, the difference is, such as Kwik Trip (Which is Regional being Upper Midwest), theirs are hidden, and the charges are passed on, yet, they are still competitive, if not cheaper that other national brand convenient store/Gas Stations. such as Shell, BP. I know they are very well run, Kwik Trip.)

I did notice that their competitors have notice and Shell is now has free (Cost are hidden, but passed on) ATM's.

When you say Bank Card, if you mean debit, I try to avoid that, just due to the security against being stolen or fraud. But I do use my Credit Card, because of the small percentage rebates. Which does add up to a nice some at the end of the year.

__________________
“ When people get what they want, they are often surprised when they get what they deserve " - James Wood
Reply
Guru

Join Date: Feb 2008
Location: Large hole formally occupied by furry woodland creature.
Posts: 3385
Good Answers: 97
#5

Re: Will RF Hacking Get Worse Before Better?

10/08/2014 4:43 PM

So is this to mean spread spectrum and other methods of making your individual transceiver signals personal are no longer effective? Next they will be picking off the string stretched between two cans.

__________________
CRTL-Z
Reply Score 1 for Good Answer
Guru
Popular Science - Evolution - New Member Popular Science - Weaponology - New Member

Join Date: May 2006
Location: The 'Space Coast', USA
Posts: 11119
Good Answers: 918
#6
In reply to #5

Re: Will RF Hacking Get Worse Before Better?

10/08/2014 5:21 PM

Short of quantum encryption, everything is subject to hacking and eavesdropping.

Reply
Guru

Join Date: Feb 2008
Location: Large hole formally occupied by furry woodland creature.
Posts: 3385
Good Answers: 97
#7
In reply to #6

Re: Will RF Hacking Get Worse Before Better?

10/08/2014 5:29 PM

Although amazing from a technical standpoint, it is depressing.

__________________
CRTL-Z
Reply
Guru
Popular Science - Evolution - New Member Popular Science - Weaponology - New Member

Join Date: May 2006
Location: The 'Space Coast', USA
Posts: 11119
Good Answers: 918
#8
In reply to #7

Re: Will RF Hacking Get Worse Before Better?

10/08/2014 6:28 PM

Welcome to the age old invention of the two-edged sword.

Reply
Power-User
Engineering Fields - Electrical Engineering - New Member Engineering Fields - Power Engineering - New Member

Join Date: Mar 2012
Location: the sandbox
Posts: 341
Good Answers: 6
#9

Re: Will RF Hacking Get Worse Before Better?

10/09/2014 9:27 AM

Unredundant is right, spread spectrum is (virtually) unhackable, and so is 256-bit encryption on top of linux or unix. Which is not to say totally unbreakable, but so difficult as to be not worth the computing power.....when there is easier targets.

__________________
BSEE but always learning
Reply
Guru

Join Date: Apr 2014
Posts: 1869
Good Answers: 67
#10
In reply to #9

Re: Will RF Hacking Get Worse Before Better?

10/11/2014 9:54 PM

Message content can be encrypted as much or as little as you like, but the communications protocols aren't (and can't be, for obvious reasons) and these can used by someone to weasel their way into your machine. Once there the intruder can commandeer various parts of the OS, which aren't encrypted either (again, for obvious reasons). *Nix operating systems have a much better track record on security issues than other popular OSes, but the recent OpenSSL debacle shows that Linux has its vulnerabilities, as well.

When you say 'spread spectrum', there are all kinds of ways of doing spread-spectrum communications, some more secure than others. The most secure forms of SSC are indistinguishable from background noise. The basic idea is that, if you don't know the signal is even there, chances are pretty good you're not going to hack it.

Reply
Reply to Blog Entry 10 comments

"Almost" Good Answers:

Check out these comments that don't yet have enough votes to be "official" good answers and, if you agree with them, vote them!
Copy to Clipboard

Users who posted comments:

1capybara (1); Anonymous Hero (4); europium mkII (1); phoenix911 (2); Unredundant (2)

Previous in Blog: Who's Spying on Your Cell Phone?   Next in Blog: What Happens When The Internet Gets Nuked?

Advertisement