Avi Rubin: All your devices can be hacked

Translator: Joseph Geni Reviewer: Morton Bast

Translator: Anders Finn Jørgensen Reviewer:

I'm a computer science professor,

Jeg er professor i datalogi,

and my area of expertise is

og er ekspert indenfor

computer and information security.

computer- og informationssikkerhed.

When I was in graduate school,

Da jeg læste på universitet

I had the opportunity to overhear my grandmother

overhørte jeg hvordan min bedstemor

describing to one of her fellow senior citizens

beskrev overfor en af hendes ældre venner

what I did for a living.

hvad jeg arbejde med.

Apparently, I was in charge of making sure that

Tilsyneladende, havde jeg ansvaret for at

no one stole the computers from the university. (Laughter)

ingen stjal computere fra universitetet. (latter)

And, you know, that's a perfectly reasonable thing

Og, som I ved, det er en ganske fornuftig ting

for her to think, because I told her I was working

for hende at tro, fordi jeg havde fortalt hende at jeg

in computer security,

arbejde med computersikkerhed,

and it was interesting to get her perspective.

og det var interessant at se det fra hendes perspektiv.

But that's not the most ridiculous thing I've ever heard

Men det er ikke det mest morsomme jeg har hørt

anyone say about my work.

nogen sige om mit arbejde.

The most ridiculous thing I ever heard is,

Det mest latterlige jeg endnu har hørt var -

I was at a dinner party, and a woman heard

Jeg var til en selskab og en kvinde hørte

that I work in computer security,

at jeg arbejde med computersikkerhed

and she asked me if -- she said her computer had been

og hun spurgte mig -- hun sagde at hendes computer var blevet

infected by a virus, and she was very concerned that she

smittet med en virus, og hun var meget bekymret for

might get sick from it, that she could get this virus. (Laughter)

hun kunne blive syg af den virus. (Latter)

And I'm not a doctor, but I reassured her

Jeg er ikke en læge, men jeg forsikrede hende om

that it was very, very unlikely that this would happen,

at det var meget meget usandsynligt at det ville ske,

but if she felt more comfortable, she could be free to use

men hvis hun følte sig mere sikker kunne hun bruge

latex gloves when she was on the computer,

gummihandsker når hun brugte sin computer

and there would be no harm whatsoever in that.

og der ville ikke være noget farligt i det.

I'm going to get back to this notion of being able to get

Jeg vil vende tilbage til den opfattelse at det er muligt

a virus from your computer, in a serious way.

at få en virus fra sin computer, i en alvorligt sag.

What I'm going to talk to you about today

Hvad jeg vil tale med jer om i dag

are some hacks, some real world cyberattacks that people

er nogle hacks, nogle virkelige cyber-angreb som folk

in my community, the academic research community,

i mit samfund, det videnskabelige forskningssamfund,

have performed, which I don't think

har udført og som jeg ikke tror

most people know about,

at mange mennesker har hørt om.

and I think they're very interesting and scary,

og jeg syntes de er meget interessante og skræmmende

and this talk is kind of a greatest hits

og denne tale er en slags greatest hits

of the academic security community's hacks.

af hacks indenfor det akademiske samfund.

None of the work is my work. It's all work

Intet af dette arbejde er mit arbejde, det er alt sammen

that my colleagues have done, and I actually asked them

udført af mine kollegaer og jeg har bedt dem

for their slides and incorporated them into this talk.

om nogen af deres slides og lagt dem ind i denne tale.

So the first one I'm going to talk about

Så, det første jeg vil tale om

are implanted medical devices.

er indopererede medicotekniske apparater.

Now medical devices have come a long way technologically.

Nu er medicotekniske apparater kommet langt teknologisk.

You can see in 1926 the first pacemaker was invented.

Dette er den første opfindelse af en pacemaker fra 1926.

1960, the first internal pacemaker was implanted,

i 1960 den første indre pacemaker var indopereret,

hopefully a little smaller than that one that you see there,

forhåbentligt en smule mindre end den I ser her,

and the technology has continued to move forward.

og teknologien har forsat bevæget sig fremad

In 2006, we hit an important milestone from the perspective

I 2006, ramte vi en vigtig milesten set ud fra

of computer security.

computersikkerhed.

And why do I say that?

Og hvorfor siger jeg dette?

Because that's when implanted devices inside of people

Fordi det var dengang man begyndte at indoperere

started to have networking capabilities.

apparater med netværksadgang.

One thing that brings us close to home is we look

En ting som er bekendt vi kan kigge

at Dick Cheney's device, he had a device that

på er Dick Cheney's apparat, han har et apparat

pumped blood from an aorta to another part of the heart,

som pumper blod fra aorta til en anden del af hjertet,

and as you can see at the bottom there,

og som I kan se nede i bunden her

it was controlled by a computer controller,

var det kontrolleret af en computer

and if you ever thought that software liability

og hvis I nogensinde har tænkt at software troværdighed

was very important, get one of these inside of you.

var meget vigtigt, så prøv at få en af disse ind i dig.

Now what a research team did was they got their hands

Hvad et forskningshold gjorde var at de fik fat på

on what's called an ICD.

hvad der kaldes en ICD.

This is a defibrillator, and this is a device

Det er en defibrillator, og det er et apparat

that goes into a person to control their heart rhythm,

som placeres inde i personer for at kontrollere deres hjerterytme

and these have saved many lives.

og disse har reddet mange liv.

Well, in order to not have to open up the person

Okay, for ikke at åbne op ind i personen

every time you want to reprogram their device

hver gang vi ønsker at reprogrammere apparatet

or do some diagnostics on it, they made the thing be able

eller lave noget diagnostik, de har gjort dimsen i stand til

to communicate wirelessly, and what this research team did

at kommunikere trådløst, og hvad dette forskningsteam gjorde

is they reverse engineered the wireless protocol,

var at reverse engineere den trådløse protokol

and they built the device you see pictured here,

og bygge dette apparat I ser her,

with a little antenna, that could talk the protocol

med en lille antenne, som kunne tale med

to the device, and thus control it.

apparatet og derved kontrollere det.

In order to make their experience real -- they were unable

For at gøre deres eksperiment naturtro -- de kunne ikke

to find any volunteers, and so they went

nogen frivillige, så de tog noget

and they got some ground beef and some bacon

kød og noget bacon

and they wrapped it all up to about the size

og om bandt det sammen

of a human being's area where the device would go,

så det svarede til en menneskekrop

and they stuck the device inside it

og de placerede apparatet inde i det

to perform their experiment somewhat realistically.

for at udføre deres eksperiment nogenlunde realistisk.

They launched many, many successful attacks.

De gennemførte mange succesfulde angreb.

One that I'll highlight here is changing the patient's name.

En som jeg vil fremhæve her er at ændre patientens navn.

I don't know why you would want to do that,

Jeg ved ikke hvorfor du skulle ønske at gøre det,

but I sure wouldn't want that done to me.

men jeg er sikker på at jeg ikke ønskede at det skete for mig.

And they were able to change therapies,

Og de kunne ændre på behandlinger,

including disabling the device -- and this is with a real,

herunder at slå apparatet fra -- og dette med ægte,

commercial, off-the-shelf device --

kommercielle, apparater i handlen --

simply by performing reverse engineering and sending

kun ved at lave reverse engineering og sende

wireless signals to it.

trådløse signaler til det.

There was a piece on NPR that some of these ICDs

Der var en udsendelse på NPR, at nogle af disse ICD'er

could actually have their performance disrupted

kan få deres funktion forstyrret

simply by holding a pair of headphones onto them.

ved bare at holde et par hovedtelefoner hen til dem.

Now, wireless and the Internet

Okay, trådløst netværk og internettet

can improve health care greatly.

kan forbedre sundhedspleje enormt.

There's several examples up on the screen

Der er adskillelige eksempler på skærmen

of situations where doctors are looking to implant devices

med situationer hvor læger kan kigge på implanterede apparater

inside of people, and all of these devices now,

inde i folk, og alle disse apparater kan som

it's standard that they communicate wirelessly,

standard kommunikere trådløst,

and I think this is great,

og jeg syntes det er fantastisk,

but without a full understanding of trustworthy computing,

men uden fuld forståelse for sikre computere,

and without understanding what attackers can do

og uden forståelse for hvad hackere kan gøre

and the security risks from the beginning,

og sikkerhedsrisici fra begyndelsen,

there's a lot of danger in this.

så er der mange farer ved det.

Okay, let me shift gears and show you another target.

Okay, lad mig skifte gear og vise jer et andet mål.

I'm going to show you a few different targets like this,

Jeg vil vise jer nogle andre typer mål som dette,

and that's my talk. So we'll look at automobiles.

og det er min tale. Så vi vil kigge på biler.

This is a car, and it has a lot of components,

Dette er en bil og den har en masse komponenter,

a lot of electronics in it today.

en masse elektronik i den i dag.

In fact, it's got many, many different computers inside of it,

Faktisk indeholder den en masse computere,

more Pentiums than my lab did when I was in college,

flere pentiumer end mit laboratorium havde da jeg gik i college,

and they're connected by a wired network.

og de er forbundne med et kablet netværk.

There's also a wireless network in the car,

Der er også et trådløst netværk i bilen,

which can be reached from many different ways.

som man kan tilgå på en række forskellige måder.

So there's Bluetooth, there's the FM and XM radio,

Der er Bluetooth, der er FM og der er XM radio,

there's actually wi-fi, there's sensors in the wheels

der er faktisk Wifi, der er sensorer i hjulene

that wirelessly communicate the tire pressure

som trådløst kan kommunikere dæktrykket

to a controller on board.

til et kontrolpanel.

The modern car is a sophisticated multi-computer device.

Den moderne bil er et sofistikeret multicomputerapparat.

And what happens if somebody wanted to attack this?

Og hvad sker der hvis nogen prøver at angribe det?

Well, that's what the researchers

Well, det var hvad forskerne gjorde.

that I'm going to talk about today did.

det vil jeg fortælle om i dag.

They basically stuck an attacker on the wired network

Basalt set koblede en angriber sig på netværket både det kablede

and on the wireless network.

og det trådløse netværk.

Now, they have two areas they can attack.

Så, de havde to områder hvor de kunne angribe.

One is short-range wireless, where you can actually

Et var det kortrækkende trådløse, hvor du faktisk kan kommunikere

communicate with the device from nearby,

med apparatet på tæt hold,

either through Bluetooth or wi-fi,

enten gennem Bluetooth eller wi-fi,

and the other is long-range, where you can communicate

og det andet var langtrækkende hvor du kan kommunikere

with the car through the cellular network,

med bilen vha. mobilnettet,

or through one of the radio stations.

eller gennem en af radiostationerne.

Think about it. When a car receives a radio signal,

Tænk på det. Når bilen modtager et radiosignal,

it's processed by software.

bliver det behandlet af software.

That software has to receive and decode the radio signal,

Denne software skal modtage og afkode radiosignalet,

and then figure out what to do with it,

for derefter at beslutte hvad den skal gøre med det,

even if it's just music that it needs to play on the radio,

selvom det bare er musik der skal spilles i radioen,

and that software that does that decoding,

og den software som udfører afkodningen,

if it has any bugs in it, could create a vulnerability

hvis der er en fejl i den, kan føre til en sårbarhed der kan

for somebody to hack the car.

udnyttes af nogen til at hacke bilen.

The way that the researchers did this work is,

Måden forskerne gjorde dette var at

they read the software in the computer chips

de læste softwaren i de computerchips

that were in the car, and then they used sophisticated

der var i bilen og de brugte sofistikerede

reverse engineering tools

reverse engineering værktøjer

to figure out what that software did,

for at finde ud af hvordan softwaren fungerede,

and then they found vulnerabilities in that software,

og de fandt sårbarheder i denne software,

and then they built exploits to exploit those.

og de byggede exploits for at udnytte disse.

They actually carried out their attack in real life.

De udførte faktisk deres angreb i virkeligheden.

They bought two cars, and I guess

De købte to biler, og jeg tror

they have better budgets than I do.

de har bedre budgetter end jeg.

The first threat model was to see what someone could do

Den første trusselsmodel var at se om hvad en angriber kunne gøre

if an attacker actually got access

hvis han faktisk fik adgang

to the internal network on the car.

til bilens interne netværk.

Okay, so think of that as, someone gets to go to your car,

Okay, forstil dig at nogle kommer hen til din bil,

they get to mess around with it, and then they leave,

de piler ved den og går igen,

and now, what kind of trouble are you in?

og hvilke problemer er du så i?

The other threat model is that they contact you

Den anden trusselsmodel er at de kontakter dig

in real time over one of the wireless networks

direkte over et trådløse netværk

like the cellular, or something like that,

f.eks. mobilnettet eller noget tilsvarende,

never having actually gotten physical access to your car.

og faktisk aldrig har haft fysisk adgang til bilen.

This is what their setup looks like for the first model,

Dette er hvordan deres setup så ud i den første model,

where you get to have access to the car.

hvor de har adgang til bilen.

They put a laptop, and they connected to the diagnostic unit

De tog en laptop og forbandt den til vedligeholdelsesenheden

on the in-car network, and they did all kinds of silly things,

i bilene netværk, og de gjorde en masse underlige ting,

like here's a picture of the speedometer

som her et billede af speedometeret

showing 140 miles an hour when the car's in park.

som viser 225 km/t mens bilen står parkeret.

Once you have control of the car's computers,

Ligeså snart du har kontrol over bilens computere,

you can do anything.

kan du gøre hvad som helst.

Now you might say, "Okay, that's silly."

Nu kan du sige at det er underligt

Well, what if you make the car always say

Men, hvad hvis du fik speedometeret til altid at sige

it's going 20 miles an hour slower than it's actually going?

at farten er 30 km/t langsommere end den faktisk er?

You might produce a lot of speeding tickets.

Du vil modtage en masse fartbøder.

Then they went out to an abandoned airstrip with two cars,

Så tog de til en nedlagt lufthavn med to biler,

the target victim car and the chase car,

bilen der var mål og en forfølger,

and they launched a bunch of other attacks.

og de udførte en række andre angreb.

One of the things they were able to do from the chase car

En ting de var istand til fra forfølgerbilen

is apply the brakes on the other car,

var at styre bremserne i den anden bil,

simply by hacking the computer.

ved at hacke dens computer.

They were able to disable the brakes.

De var istand til at slå bremserne fra.

They also were able to install malware that wouldn't kick in

De var også istand til at installere malware som ikke

and wouldn't trigger until the car was doing something like

ville udføre noget før bilen gjorde noget som at

going over 20 miles an hour, or something like that.

køre over 30 km/t eller noget tilsvarende.

The results are astonishing, and when they gave this talk,

Resultaterne var forbløffende og da de præsenterede dem,

even though they gave this talk at a conference

selvom de gjorde det til en konference

to a bunch of computer security researchers,

til en samling computersikkerhedsforskere,

everybody was gasping.

gispede alle.

They were able to take over a bunch of critical computers

De var istand til at overtage en håndfuld kritiske computere

inside the car: the brakes computer, the lighting computer,

inde i bilen: Bremsernes computer, lysenes computer,

the engine, the dash, the radio, etc.,

motoren, instrumentbrættet, radioen, osv.,

and they were able to perform these on real commercial

og de var istand til at gøre det med en rigtig bil

cars that they purchased using the radio network.

som de overtog ved at bruge radioen.

They were able to compromise every single one of the

De var istand til at bryde ind i hver enkelt

pieces of software that controlled every single one

stykke software som kontrollerede hver enkelt

of the wireless capabilities of the car.

af de trådløse muligheder i bilen.

All of these were implemented successfully.

Alt dette var succesfuldt udført.

How would you steal a car in this model?

Hvordan vil du stjæle en bil af denne model?

Well, you compromise the car by a buffer overflow

Well, du angriber med en buffer overflow

of vulnerability in the software, something like that.

sårbarhed i softwaren eller tilsvarende.

You use the GPS in the car to locate it.

Du bruger GPS'en til at finde den.

You remotely unlock the doors through the computer

Du åbner døren ved at fjernbetjene dem gennem computeren

that controls that, start the engine, bypass anti-theft,

som kontrollere dem, starter motoren og forbigår tyverikontrollen

and you've got yourself a car.

og du har fået dig en bil.

Surveillance was really interesting.

Overvågning er virkeligt interessant.

The authors of the study have a video where they show

Forfatterne til studiet viste en video hvor

themselves taking over a car and then turning on

havde taget kontrol over bilen og tændt for

the microphone in the car, and listening in on the car

mikrofonen i bilen og lyttede til hvad de blev sagt

while tracking it via GPS on a map,

samtidigt med at bilen blev fulgt vha GPS på et kort,

and so that's something that the drivers of the car

og det kunne sket uden at bilens fører

would never know was happening.

fandt ud af det skete.

Am I scaring you yet?

Har jeg fået skræmt jer?

I've got a few more of these interesting ones.

Jeg har nogle flere spændende eksempler.

These are ones where I went to a conference,

Der er en fra en konference jeg deltog i,

and my mind was just blown, and I said,

og min hjerne bare skreg og jeg sagde,

"I have to share this with other people."

"Jeg må fortælle andre om dette"

This was Fabian Monrose's lab

Dette er fra Fabian Monrose's lab

at the University of North Carolina, and what they did was

på University of North Carolina, og hvad de gjorde var

something intuitive once you see it,

noget meget intuitiv når I har set det

but kind of surprising.

men noget overraskende.

They videotaped people on a bus,

De videofilmede folk i en bus,

and then they post-processed the video.

og de efterbehandlede videoen.

What you see here in number one is a

Hvad I ser her er de numre der

reflection in somebody's glasses of the smartphone

reflekteres i ens briller fra en smartphone

that they're typing in.

som de taster ind.

They wrote software to stabilize --

De skrev noget software til at stabilisere --

even though they were on a bus

og selvom de var med en bus

and maybe someone's holding their phone at an angle --

og at nogle hold deres telefon i en vinkel --

to stabilize the phone, process it, and

til at stabilisere telefonen, behandle det

you may know on your smartphone, when you type

og som I ved på jeres smartphone, når i taster

a password, the keys pop out a little bit, and they were able

et password, talene vises et kort sekund, og de var i stand

to use that to reconstruct what the person was typing,

til at bruge dette til at rekonstruere hvad personen tastede,

and had a language model for detecting typing.

og havde en sprogmodel til at opfatte indtastningen.

What was interesting is, by videotaping on a bus,

Det interessante er at ved at videofilme i en bus

they were able to produce exactly what people

er man i stand til at reproducere præcist hvad folk

on their smartphones were typing,

skrev på deres smartphones,

and then they had a surprising result, which is that

og deres overraskende resultat, som er at

their software had not only done it for their target,

deres software ikke kun angreb deres mål,

but other people who accidentally happened

men også andre folk som tilfældigvis

to be in the picture, they were able to produce

var i billedet, de kunne genskabe

what those people had been typing, and that was kind of

hvad disse folk havde tastet, og det var en slags

an accidental artifact of what their software was doing.

tilfældig egenskab ved hvad deres software gjorde.

I'll show you two more. One is P25 radios.

Jeg vil vise jer to eksempler mere. Den første er P25 radioer.

P25 radios are used by law enforcement

P25 radioer bruges af politiet

and all kinds of government agencies

og en række statslige tjenester

and people in combat to communicate,

og soldater til at kommunikere,

and there's an encryption option on these phones.

og der er en krypteringsmulighed på disse telefoner.

This is what the phone looks like. It's not really a phone.

Her kan I se hvordan telefonen ser ud. Det er ikke en rigtig telefon.

It's more of a two-way radio.

Det er mere en tovejs radio.

Motorola makes the most widely used one, and you can see

Motorola laver den mest udbredte, og som I kan se

that they're used by Secret Service, they're used in combat,

er de brugt af Secret Service, de er brugt i kamp,

it's a very, very common standard in the U.S. and elsewhere.

det er en meget, meget udbredt standard i USA og andre steder.

So one question the researchers asked themselves is,

Så en af de ting forskerne spurgte sig selv om var:

could you block this thing, right?

Kan man blokere sådan en ting?

Could you run a denial-of-service,

Kan man udføre et denial-of-service angreb,

because these are first responders?

fordi den bruges på stedet?

So, would a terrorist organization want to black out the

Så, kunne en terroristorganisation forsøge at mørkelægge

ability of police and fire to communicate at an emergency?

muligheden for at politi og brandvæsen kan kommunikere i en ulykke?

They found that there's this GirlTech device used for texting

De fandt denne GirlTech dims brugt til SMS

that happens to operate at the same exact frequency

som viste sig at bruge de eksakt samme frekvenser

as the P25, and they built what they called

som P25'eren, og de byggede hvad de kaldte

My First Jammer. (Laughter)

"Min første Jammer". (Latter)

If you look closely at this device,

Hvis du kigger grundigt på apparatet,

it's got a switch for encryption or cleartext.

har det en vælger for kryptering eller klartekst.

Let me advance the slide, and now I'll go back.

Lad mig skifte slide og nu gå tilbage.

You see the difference?

Kan I se forskellen?

This is plain text. This is encrypted.

Dette er klartekst. Dette er krypteret.

There's one little dot that shows up on the screen,

Der er en lille prik som bliver vist på skærmen,

and one little tiny turn of the switch.

og et lille drej på kontakten.

And so the researchers asked themselves, "I wonder how

Og forskerne spurgte dem selv; "Gad vide hvor

many times very secure, important, sensitive conversations

mange gange meget hemmelige, vigtige og følsomme samtaler

are happening on these two-way radios where they forget

foregår med disse tovejsradioer, hvor de har glemt

to encrypt and they don't notice that they didn't encrypt?"

at kryptere og de ikke har opdaget at de ikke kryptere?"

So they bought a scanner. These are perfectly legal

Så de købte en skanner, hvilket er fuldstændigt lovligt

and they run at the frequency of the P25,

og kørte den på samme de frekvenser som P25,

and what they did is they hopped around frequencies

og hvad de gjorde var at hoppe rundt mellem disse frekvenser

and they wrote software to listen in.

og de skrev software for at lytte til med.

If they found encrypted communication, they stayed

Hvis de fandt krypteret kommunikation, de blev

on that channel and they wrote down, that's a channel

på kanalen og noterede at på den kanal

that these people communicate in,

var de folk som brugte den

these law enforcement agencies,

politiet

and they went to 20 metropolitan areas and listened in

og de var i 20 storbyområder og lyttede med

on conversations that were happening at those frequencies.

på de samtaler som foregik på disse frekvenser.

They found that in every metropolitan area,

De fandt at i hvert storbyområde,

they would capture over 20 minutes a day

kunne de opfange over 20 minutters daglig

of cleartext communication.

ukrypteret kommunikation.

And what kind of things were people talking about?

Og hvad var det for ting folk talte om?

Well, they found the names and information

Well, de fandt navne og information om

about confidential informants. They found information

om hemmelige meddelere. De fandt information

that was being recorded in wiretaps,

som var blevet optaget af aflytningsudstyr,

a bunch of crimes that were being discussed,

en flok kriminelle der diskuterede,

sensitive information.

følsomme oplysninger.

It was mostly law enforcement and criminal.

Det var mest politi og kriminelle.

They went and reported this to the law enforcement

De rapporterede det til politiet

agencies, after anonymizing it,

efter at have anonymiseret det,

and the vulnerability here is simply the user interface

og sårbarheden her er simpelthen at brugergrænsefladen

wasn't good enough. If you're talking

ikke er god nok. Hvis du taler om noget

about something really secure and sensitive, it should

som er virkeligt hemmeligt og følsomt, så skal det være helt klart

be really clear to you that this conversation is encrypted.

for dig at samtalen er krypteret.

That one's pretty easy to fix.

Den er forholdsvis enkelt af ordne.

The last one I thought was really, really cool,

Den sidste er rigtig, rigtig cool,

and I just had to show it to you, it's probably not something

og jeg vil vise den til jer, det er ikke noget

that you're going to lose sleep over

der vil holde jer søvnløse om natten

like the cars or the defibrillators,

som bilerne eller defibrillatorene,

but it's stealing keystrokes.

men det er at stjæle tastetryk.

Now, we've all looked at smartphones upside down.

Vi kender smartphones oppefra og ned.

Every security expert wants to hack a smartphone,

Hver eneste sikkerhedsekspert ønsker at hacke en smartphone,

and we tend to look at the USB port, the GPS for tracking,

og vi kiggede på USB porten, GPS'en for tracking,

the camera, the microphone, but no one up till this point

kameraet, mikrofonen, men ingen har hidtil

had looked at the accelerometer.

kigget på accelerometerne.

The accelerometer is the thing that determines

Et accelerometer er den ting som måler den

the vertical orientation of the smartphone.

den lodrette orientering af smartphonen.

And so they had a simple setup.

De havde et simpelt setup.

They put a smartphone next to a keyboard,

De placerede en smartphone ved siden af keyboardet,

and they had people type, and then their goal was

og de havde folk til at taste og deres mål var

to use the vibrations that were created by typing

at bruge vibrationerne som var skabt ved at taste

to measure the change in the accelerometer reading

til at måle ændringer i accelerometeret

to determine what the person had been typing.

for at bestemme hvad person skrev.

Now, when they tried this on an iPhone 3GS,

Da de prøvede det med en iPhone 3GS,

this is a graph of the perturbations that were created

er dette en graf over rystelserne som blev skabt

by the typing, and you can see that it's very difficult

af tastningerne. Og som I kan se er det meget vanskeligt

to tell when somebody was typing or what they were typing,

at afgøre om nogen taster eller hvad de taster,

but the iPhone 4 greatly improved the accelerometer,

men iPhone 4 har et meget forbedret accelerometer,

and so the same measurement

og den samme måling

produced this graph.

skabte denne graf.

Now that gave you a lot of information while someone

Dette gav dem en masse information mens nogen

was typing, and what they did then is used advanced

tastede, og hvad de gjorde var at anvende en avanceret

artificial intelligence techniques called machine learning

kunstig intelligensteknik kaldet maskinlæring

to have a training phase,

til at have en træningsfase,

and so they got most likely grad students

hvor de havde en masse studerende

to type in a whole lot of things, and to learn,

til at taste en masse ind, og de satte

to have the system use the machine learning tools that

systemet til at bruge dette maskinlæringsværktøj

were available to learn what it is that the people were typing

som var istand til at lære hvad folkene tastede,

and to match that up

og de sammenlignede dette med

with the measurements in the accelerometer.

målingerne fra accelerometeret.

And then there's the attack phase, where you get

Og der er en angrebsfase, hvor du får nogen

somebody to type something in, you don't know what it was,

til at taste noget ind, som du ikke ved hvad er,

but you use your model that you created

men du bruger den model du har skabt

in the training phase to figure out what they were typing.

i træningsfasen til at regne ud hvad de taster.

They had pretty good success. This is an article from the USA Today.

De havde temmelig god succes. Dette er en artikel fra USA Today.

They typed in, "The Illinois Supreme Court has ruled

De tastede følgende: "The Illinois Supreme Court has ruled

that Rahm Emanuel is eligible to run for Mayor of Chicago"

that Rahm Emanuel is eligible to run for Mayor of Chicago"

— see, I tied it in to the last talk —

— se, jeg forbinder den med den forrige taler —

"and ordered him to stay on the ballot."

"and ordered him to stay on the ballot."

Now, the system is interesting, because it produced

Se! systemet er interessant, fordi det producerede

"Illinois Supreme" and then it wasn't sure.

"Illinois Supreme" og så var det usikkert.

The model produced a bunch of options,

Modellen producerede en række muligheder,

and this is the beauty of some of the A.I. techniques,

og skønheden ved mange kunstig intelligensteknikker,

is that computers are good at some things,

er at computere er gode til nogle ting,

humans are good at other things,

mennesker er gode til andre.

take the best of both and let the humans solve this one.

Tag det bedste fra begge og lad mennesker løse denne.

Don't waste computer cycles.

Spil ikke compterkraft på det.

A human's not going to think it's the Supreme might.

Et menneske vil ikke tænke at det er "Supreme might".

It's the Supreme Court, right?

Det er "Supreme Court", ikke sandt?

And so, together we're able to reproduce typing

og videre, vi er istand til at rekonstruere hvad der blev tastet

simply by measuring the accelerometer.

simpelthen ved at måle med accelerometeret.

Why does this matter? Well, in the Android platform,

Hvorfor er dette vigtigt? Fordi, på Android platformen,

for example, the developers have a manifest

for eksempel, har udviklerne et manifest

where every device on there, the microphone, etc.,

hvor hvert apparat der, mikrofonen, osv,

has to register if you're going to use it

skal vi at at du er i gang med at bruge det

so that hackers can't take over it,

så hackere ikke kan overtage det,

but nobody controls the accelerometer.

men ingen kontrollerer accelerometeret.

So what's the point? You can leave your iPhone next to

Så hvad er pointen? Du kan lægge din iPhone ved siden af

someone's keyboard, and just leave the room,

en eller andens keyboard og forlade rummet

and then later recover what they did,

og senere genskabe hvad de gjorde,

even without using the microphone.

endda uden at bruge mikrofonen.

If someone is able to put malware on your iPhone,

Hvis nogen kan installere malware på din iPhone,

they could then maybe get the typing that you do

kunne de muligvis se hvad du skriver

whenever you put your iPhone next to your keyboard.

hver gang du lægger din iPhone ved siden af dit keyboard.

There's several other notable attacks that unfortunately

Der er flere andre nævneværdige angreb som jeg desværre

I don't have time to go into, but the one that I wanted

ikke har tid til at komme ind på, men en som jeg ønsker at

to point out was a group from the University of Michigan

fremhæve er lavet af en gruppe fra University of Michigan

which was able to take voting machines,

som var istand til at tage en stemmemaskine,

the Sequoia AVC Edge DREs that

Sequoia AVC Edge DRE, som skal

were going to be used in New Jersey in the election

bruges i New Jersey til afstemningen

that were left in a hallway, and put Pac-Man on it.

som var efterladt i en gang, og installerede Pac-Man på den.

So they ran the Pac-Man game.

Hvorefter de spillede Pac-Man.

What does this all mean?

Hvad betyder alt dette?

Well, I think that society tends to adopt technology

Well, jeg tror at samfundet har en tendens til at tage teknologien til sig

really quickly. I love the next coolest gadget.

meget hurtigt. Jeg elsker de nyeste cool gadgets.

But it's very important, and these researchers are showing,

Men det er meget vigtigt, og disse forskere viser

that the developers of these things

at udviklerne af disse ting

need to take security into account from the very beginning,

skal tænke sikkerhed ind fra begyndelsen,

and need to realize that they may have a threat model,

og de må indse at de skal have en trusselsmodel,

but the attackers may not be nice enough

og at angriberne næppe er så venlige

to limit themselves to that threat model,

til at begrænse sig til den trusselsmodel,

and so you need to think outside of the box.

og at at man skal kunne tænke ud af boksen.

What we can do is be aware

Hvad vi kan gøre er at være opmærksomme på

that devices can be compromised,

at apparater kan blive kompromitteret,

and anything that has software in it

og at alt hvad der har software i sig

is going to be vulnerable. It's going to have bugs.

vil være sårbart. Det vil have fejl.

Thank you very much. (Applause)

Mange tak for jeres opmærksomhed. (Bifald)