Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Wednesday August 29 2018, @11:17PM   Printer-friendly
from the bright-idea dept.

Researchers have determined that some light bulbs are suitable for covert data exfiltration from personal devices, and can leak multimedia preferences by recording their luminance patterns from afar. The adversary does not need to attack the internal network of the victim to extract the information. They only need a direct connection between the target device and the lights, and line-of-sight with bulbs during the exfiltration process>

[...] Anindya Maiti and Murtuza Jadliwala from the University of Texas at San Antonio studied how LIFX and Philips Hue bulbs receive their commands for playing visualizations into a room and developed a model to interpret brightness and color modulations occurring when listening to music or watching a video.

During audio-visualization, the brightness level reflects the source sound, while in the case of video visualizations, the modifications reflect the dominant color and brightness level in the current video frame. The associated mobile app controls the oscillations by sending specially formatted packets to the light bulbs. The model created by the two researchers requires the adversary to create a database of light patterns, like a dictionary for songs and videos, they can use as a reference for the profile captured from the target. Extracting information from a personal device is possible under certain conditions. The simple observation of the light pattern is not sufficient in this case.

Light bulbs need to support infrared lighting and should not require authorization for controlling them over the local network. Moreover, the adversary needs to plant malware that encodes private data from the target device and sends it to the smart light bulbs.

The researchers used two observation points to capture the data: indoor and outdoor. Predictable enough, indoor observation recorded the most accurate results and longer exposure yielded a better outcome.

From a sample set of 100, "51 songs were correctly predicted in the top rank, while genres of 82 songs were correct in the same prediction," the researchers reveal about audio inference results.

Data exfiltration was possible through transmission techniques like such as amplitude and/or wavelength shift keying, using both the visible and the infrared spectrum of the smart bulbs (LIFX) were used.

[...] Defending against these attack methods is just a matter of making the light less visible to the outside. A curtain can do the trick. Choosing window glass that has low transmittance is also an adequate defense.

For additional technical details you can check the original paper titled "Light Ears: Information Leakage via Smart Lights," available here.


Original Submission #1Original Submission #2

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Thursday August 30 2018, @02:10AM

    by Anonymous Coward on Thursday August 30 2018, @02:10AM (#728107)

    https://en.wikipedia.org/wiki/Li-Fi [wikipedia.org]

    Li-Fi (/ˈlaɪfaɪ/; short for light fidelity) is a technology for wireless communication between devices using light to transmit data and position. In its present state only LED lamps can be used for the transmission of visible light. The term was first introduced by Harald Haas during a 2011 TEDGlobal talk in Edinburgh. In technical terms, Li-Fi is a visible light communications system that is capable of transmitting data at high speeds over the visible light spectrum, ultraviolet and infrared radiation.

    In terms of its end use the technology is similar to Wi-Fi. The key technical difference is that Wi-Fi uses radio frequency to transmit data. Using light to transmit data allows Li-Fi to offer several advantages like working across higher bandwidth[citation needed], working in areas susceptible to electromagnetic interference (e.g. aircraft cabins, hospitals) and offering higher transmission speeds. The technology is actively being developed by several organizations across the globe.