gr-tempest: Spying Video Interfaces Through Electromagnetic Emanations

on YouTube ↗25m

" summary

Implementation of electromagnetic TEMPEST for video using a GNU Radio flowgraph claims to reconstruct real VGA and HDMI screens from RF captures; it reimplements TempestSDR as gr-tempest GNU Radio module and runs with USRP or recorded I/Q. A live demo shows a simple dipole spying a VGA cable, recovering readable frames after fine sample synchronization and autocorrelation. Practical numbers: needs roughly 20–50 MS/s sampling, manual horizontal/vertical/refresh settings, high CPU, and produces clearer results using full complex IQ and post equalization.

AI-written summary · about

" chapters (7)

1. 0:00gr-tempest intro and demo
2. 1:25TEMPEST attack history
3. 6:01How video interfaces emit electromagnetic signals
4. 10:55Time sync for image reconstruction
5. 16:55Signal processing challenges
6. 21:50Future digital signal work
7. 24:17Conclusion and Q&A

" related talks

• 55mEtherify, sonify: soft tempest at home and on the farmJacek Lipkowski · Oh My H@ck 2020
• 53mHacking the Wireless World with Software Defined Radio - 2.0Balint Seeber · Black Hat USA 2014
• 01h 00mHacking the Wireless World with Software Defined Radio - 2.0Balint Seeber · Black Hat Asia 2015
• 41mReverse Engineering Satellite CommunicationLucas Teske · GambiConf EU 2022
• 01h 02mHacking the Wireless World with Software Defined Radio - 2.0Balint Seeber · Black Hat Europe 2014
• 45m Hacking satellites with Software Defined Radio (SDR)Gerard de Jong · BSides Cape Town 2019
• 26mSDR Analog Video Decoding AdventuresOona Räisänen · GRCon 2020
• 19mProgramming the Electromagnetic SpectrumTom Rondeau · Open Networking & Edge Executive Forum 2022