Hackaday
LoRA, With No Radio
A LoRa project has traditionally required a dedicated radio module, because it’s a commercially licenced protocol. But as the way it works ha...
This hack is pretty wild and @SeedSigner is affected as far as I can see. Or does it not enable a previously impossible Evil Maid Attack:
Eve only needs access to the device for seconds to binary-patch the firmware on it. The compromised firmware would send out the seed, encrypted for Eve's receiver that she's hiding anywhere inside the house, while functioning normally else.
Now, when Alice loads her wallet on the compromised SS, it blasts out the keys and the receiver catches it.
Prior to this hack, a companion app could detect exfiltration but now, any companion app is side-stepped completely.
As a fan of @SeedSigner's approach, I wish there was a simple mitigation but maybe there is. Maybe incorporating tinfoil in the casing fixes this. Of a full metal casing so the maid can't just remove the tinfoil.
Login to reply
Replies (1)
“Honest officer this isn’t jamming it’s just accidental interference. How was I supposed to know my maid had put a device in my house that was using this frequency range.”
If the “interfering emissions” are weak enough to disrupt LoRa inside the house and within your property but not impede anyone else’s use, then I think it’s kind of a non issue even if techno illegal. Alternatively There are all kinds of retail equipment, (LED lightbulbs, battery chargers, electric motors, etc) that create interference and may even not meet the fcc requirements they are supposed to.