Global articles on espionage, spying, bugs, and other interesting topics.

Any PC Can Be Used to Eavesdrop!

The audio chipsets in many modern PCs allow audio jacks to be flipped from lineout to line-in, says team from Israel’s Ben-Gurion University.

Researchers at Israel’s Ben-Gurion University of the Negev have devised a way to turn any computer into an eavesdropping device by surreptitiously getting connected headphones or earphones to function like microphones.

In a paper titled “SPEAKE(a)R: Turn Speakers to Microphones for Fun and Profit,” the researchers this week described malware they have developed for reconfiguring a headphone jack from a line-out configuration to a line-in jack, thereby enabling connected headphones to work as microphones.

The exploit works with most off-the-shelf headphones and even when the computer doesn’t have a connected microphone or has a microphone that has been disabled, according to the researchers.

The malware takes advantage of the manner in which some audio chipsets in modern motherboards and soundcards work. In a typical computer chassis, the audio jacks that are built into the front or rear panel are used either as line-in or input jacks or line-out jacks for audio output.

The chipsets in such cards support a little-used jack re-mapping or a jack re-tasking option for changing the function of the audio ports from line-in to line-out via software.

Audio chipsets from Realtek Semiconductor, for instance support this capability, though it is not documented in any technical specifications for the product, the researchers from Ben-Gurion University noted. Realtek codecs are the most widely used in PCs but other codec manufacturers allow jack repurposing as well, the researchers said.

In addition, researchers have for some time known that speakers can, with a little tweaking, be made to function like a microphone, they said. “Loudspeakers convert electric signals into a sound waveform, while microphones transform sounds into electric signals,” their paper noted.

In a speaker, electrical signals are used to create a changing magnetic field that moves a diaphragm in order to produce sounds. In a microphone, a diaphragm moves through a magnetic field to induce an electrical signal. “This bidirectional mechanism facilitates the use of simple headphones as a feasible microphone, simply by plugging them into the PC microphone jack,” the research paper said.

This capability, coupled with the fact that audio jacks can be programmatically altered to switch from output only to input jacks, creates a vulnerability that attackers can use to turn any computer into an eavesdropping device, according to the BGU researchers.

Tests to evaluate the quality of audio signals generated by off-the-shelf headphones plugged into jacks that had been modified by SPEAKE(a)R showed it is possible to acquire intelligible audio from several meters away.

Continue reading – http://www.darkreading.com/attacks-breaches/researchers-demo-method-for-turning-a-pc-into-an-eavesdropping-device-/d/d-id/1327567