Topic
Techniques that extract secrets from a system's observable behaviour—timing, cache state, power draw, electromagnetic emissions—rather than algorithmic flaws.
Researchers from two Hong Kong universities intercepted headphone audio from as far as six meters with a radio transmitter, Kaspersky reports. The signal is taken after decoding, so call encryption does not apply, but the attacker has to be close and tune to each device.
Reality
Graz University of Technology researchers used file-change alerts to catch 95.7% of another Windows user's Firefox site visits from an unprivileged account. On shared hosts and on servers that run services under their own accounts, separation between users is weaker than the account model suggests.
Reality
ETSI's TR 104 171 says quantum random number generators can pass statistical randomness tests while still giving attackers clues about future output. Its answer for high-security buyers is entropy zero trust, with checks from quantum source to application.
Reality
Graz University researchers showed unprivileged apps can infer keystroke timing and browsing from file-change notifications on Linux, Android and Windows. The fixes shipped so far are partial, and the keystroke and KDE clickjacking flaws are still present.
Reality
Graz University of Technology researchers used OS file-change alerts to identify sites another Windows user visited with 97.8% accuracy in Firefox. Every attack needs code already running on the device; on Android, an app that asks for no permissions is enough.
Reality
A University of British Columbia team showed that three selection functions in Soatok's constant-time-js leak their condition through V8's cache behaviour. He shipped version 0.5.0 and requested a CVE.
Reality