7 Jun
2016
7 Jun
'16
7:40 a.m.
On 07/06/16 12:22, Chris McCormick wrote:
But a public-facing server would regularly be "tweeting", no?
So you'd need physical access to a public-facing server in order to collect the acoustic signature.
https://www.tau.ac.il/~tromer/acoustic/
Here the same authors mention this attack:
"Send your server to a colocation facility, with a good microphone inside the box, and then acoustically extract keys from all nearby servers."
Cheers,
Chris.