Fu: Computer power draw from wall sockets leaks web browsing activity
Kevin Fu · Kevin Fu · Jul 28, 2017 · at 15:47
Kevin Fu, professor and security researcher, highlights a power side-channel attack where browser activity is inferred directly from electrical outlet power draw.
0:00 / 0:06exact quote · 6.9s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“One of my students discovered that ah, he could actually tell what website I'm browsing by looking at my power consumption from the power outlet.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Kevin Fu
Fu: Wireless signals could trigger fatal heart rhythms in cardiac defibrillators
“We discovered we could actually generate our own wireless signals that would trigger this, what is effectively a debugging command to wirelessly induce fatal heart rhythms.”
Fu: Hospital medical device malware is mostly decade-old, automated malware
“There's, it's nothing too sophisticated. We're not talking about nation state adversaries or even the kid in the basement trying to hack into things. This is garden variety malware automated, sometimes 10 or 15 years old getting in.”
Fu: Pacemakers can be tricked into shutting down via RF interference
“A fun little trick you can do is if you send a particular pulse at a rate that looks like a normal cardiac rhythm in this case one hertz, so 60 beats per minute we've been able to trick pacemakers into effectively turning off because they say, oh, the heart is…”
Fu: Wireless connectivity is added to devices for marketing, not safety
“But the interesting thing about wireless is that, you know, it was used for a specific reason, to address the clinical risk, but now I often see it used sort of willy-nilly on devices, more for the marketing side, less for actually addressing a safety risk, bu…”