Founders
The Silent Frequency of Mordechai Guri
A new exploit from Ben-Gurion University proves that air-gapped computers can be forced to broadcast their secrets using nothing but their own internal memory.
Numerous Times Founders Desk
The first ten years, in the founder's voice
Mordechai Guri does not believe in the absolute safety of a disconnected wire. For years, the head of the Cyber Security Research Center at Ben-Gurion University of the Negev has operated in a space most IT departments consider a paranoid fantasy: the air gap. The theory is simple. If a computer is not connected to the internet, or any other network, it is unreachable. It is a digital island. But Guri and his team of researchers have spent a decade proving that islands still have shores, and shores can be breached.
His latest development, a technique dubbed RAMBO, is a masterpiece of unintended physics. The method allows an attacker to exfiltrate data from a strictly isolated computer by manipulating the radio frequency emissions of its internal RAM. It requires no specialized hardware or modifications to the machine. By running a specific piece of malware on the target system, Guri can compel the device to generate radio signals by toggling the electrical signals within the memory buses. These signals, essentially a form of Morse code for the digital age, can be picked up by a simple software-defined radio receiver located several meters away.
To understand why this matters, one must look at the builders who safeguard our most sensitive infrastructure. In nuclear facilities, defense labs, and high-stakes financial vaults, air-gapping is the final line of defense. The operators in these rooms operate under the assumption that physical isolation is a binary state. Guri’s work destroys that certainty. He is not just a researcher; he is a provocateur for the hardware industry, showing that the very components designed to move data internally can be coerced into acting as miniature radio transmitters.
This is the discipline of the "side-channel" attack. It is not about cracking a password; it is about listening to the heat, the sound, or in this case, the electromagnetic pulse of a machine’s heartbeat. While the data transfer rates are slow—measured in bits or kilobits rather than megabytes—they are sufficient to leak cryptographic keys, keystrokes, or sensitive documents over time. The significance lies in the democratization of the breach; you no longer need a sophisticated laboratory to listen to a computer’s thoughts.
As we look ahead, the industry must decide if hardware-level shielding is the next mandatory frontier. Watch for how motherboard manufacturers respond to these findings, specifically whether future architectures will include electromagnetic interference dampening as a standard security feature. Guri’s team has effectively signaled the end of the quiet room. In the modern era, even a silent computer is talking to anyone who knows how to listen.
One essay. Every Friday. From operators who actually run things.
Join thousands of founders, partners, and operating leaders. No filler. Unsubscribe anytime.
Reader notes
0 NotesSign in to comment. Comments are signed and public.
Sign in →