Note to self - don’t add flashing LEDs to any security devices

From a tech perspective, insanely clever to use modern phones rolling shutter mode to sample significantly more data points.

From a “is this going to cause problems for the average person” perspective - not even close. Requires 65 minutes of recorded, stable footage. The camera must be < 6 feet away if the lights are on, and the cryptography algorithm must be running during that magic hour of recording…

It does enable remote attacks, but only if all very specific requirements are met, and it requires you have access to a camera for a long period of time that is perfectly positioned.

Reminds me of LEDs used to extract data out of airgapped networks: https://threatpost.com/blinking-router-leds-leak-data-from-air-gapped-networks/126199/ but different because that one requires software within the airgapped network to exfiltrate.

Didn’t there used to be network equipment that was vulnerable to data exfil from data status lights, or did I dream that up? Most data LEDs now just consistently blink.

Perhaps not the most practical of attacks, but still an impressive feat.

Yikes! I wonder how isolated the led has to be to the CPU power supply to prevent this sort of attack!