Research

Radware Bot Manager Captcha » iopscience.iop.org | iopscience.iop.org

Somos la revista sobre tecnología más antigua del mundo y la autoridad global en el futuro de la tecnología en internet. » MIT Technology Review en español - Somos la revista sobre tecnología más antigua del mundo y la autoridad global en el futuro de la tecnología en internet. | technologyreview.es

Aparecen en pantalla tres Audrey Hepburn casi perfectas: cantan, hablan y su expresión es tan real que ya nada volverá a ser lo mismo » ludd.es | ludd.es

Los avances tecnológicos tal y como los conocemos no serían posible sin un debido proceso de investigación. A ello se le conoce como el método científico. » Equipo Supercurioso | supercurioso.com

El trabajo de fin de grado supone un desafío final para la obtención del título, y para muchos estudiantes una labor ardua y no deseada. Planteamos una manera de mejorar el proceso y los resultados. » Lía de Luxán Hernández | theconversation.com

Existen muchas técnicas para hacer UX research. En este post hablamos de 5 procesos poco conocidos, que nos pueden ayudar en nuestra investigación UX. » Blog - UX Torresburriel Estudio | torresburriel.com

Acceder a Core Folleto CORE es el recopilador de documentos de acceso abierto más completo de repositorios institucionales, temáticos y de preprints, así como revistas de acces… » Universo Abierto | universoabierto.org

We demonstrate the extraction of secret decryption keys from laptop computers, by nonintrusively measuring electromagnetic emanations for a few seconds from a distance of 50 cm. The attack can be executed using cheap and readily-available equipment: a consumer-grade radio receiver or a Software Defined Radio USB dongle. The setup is compact and can operate untethered; it can be easily concealed, e.g., inside pita bread. Common laptops, and popular implementations of RSA and ElGamal encryptions, are vulnerable to this attack, including those that implement the decryption using modern exponentiation algorithms such as sliding-window, or even its side-channel resistant variant, fixed-window (m-ary) exponentiation. We successfully extracted keys from laptops of various models running GnuPG (popular open source encryption software, implementing the OpenPGP standard), within a few seconds. The attack sends a few carefully-crafted ciphertexts, and when these are decrypted by the target computer, they trigger the occurrence of specially-structured values inside the decryption software. These special values cause observable fluctuations in the electromagnetic field surrounding the laptop, in a way that depends on the pattern of key bits (specifically, the key-bits window in the exponentiation routine). The secret key can be deduced from these fluctuations, through signal processing and cryptanalysis. ...

Security researchers at Ben Gurion University in Israel have found a way to retrieve data from an air-gapped computer using only heat emissions and a computer’s built-in thermal sensors. The method would allow attackers to surreptitiously siphon passwords or security keys from a protected system and transmit the data to an internet-connected system that’s in close proximity and that the attackers control. They could also use the internet-connected system to send malicious commands to the air-gapped system using the same heat and sensor technique. The proof-of-concept attack requires both systems to first be compromised with malware. And currently, the attack allows for just eight bits of data to be reliably transmitted over an hour—a rate that is sufficient for an attacker to transmit brief commands or siphon a password or secret key but not large amounts of data. It also works only if the air-gapped system is within 40 centimeters (about 15 inches) from the other computer the attackers control. But the researchers, at Ben Gurion’s Cyber Security Labs, note that this latter scenario is not uncommon, because air-gapped systems often sit on desktops alongside Internet-connected ones so that workers can easily access both. ...

El sistema truca las ondas electromagnéticas del monitor. De esta forma se puede transmitir información desde la pantalla a un teléfono que esté a menos de siete metros, con un ancho de banda de hasta 60 bytes por segundo, suficientes para obtener una contraseña en ocho segundos, según aseguran los investigadores. » Sergio Ferrer | elconfidencial.com