Etherify, sonify: soft tempest at home and on the farm
summary
Demonstrates two covert exfiltration channels: a radio-channel called soft tempest that toggles a Raspberry Pi 4 Ethernet link speed (10/100/1000 Mbps) to modulate clock harmonics around 125 MHz, received with a $10 DVB‑T SDR over tens of metres; and an ultrasonic channel that emits near‑inaudible 20–24 kHz tones from a laptop audio output to carry Morse at about 10–30 m. Both are implemented as cheap proof‑of‑concept demos with range and reliability depending on device quirks, shielding and interference.
AI-written summary · about
chapters (10)
- 0:00Introduction to Soft Tempest
- 1:27Tempest history and basics
- 7:11What is Soft Tempest?
- 13:15SDR radios and receivers
- 21:48Ethernet as emission channel
- 30:50Ultrasound data transmission
- 37:00Real-world use cases
- 41:18Further tests and discoveries
- 46:26Laptop implementation
- 55:00Summary and Q&A
related talks
12mExploring the invisible: adventures in the electromagnetic spectrum!!
01h 00mHacking the Wireless World with Software Defined Radio - 2.0
41mListening to the Radio with Rust
45m Hacking satellites with Software Defined Radio (SDR)
45mRaspberry Pi SDR
53mHacking the Wireless World with Software Defined Radio - 2.0
25mgr-tempest: Spying Video Interfaces Through Electromagnetic Emanations
55mReliable and Secure Embedded Systems