Security News

Cybersecurity news aggregator

⚔️
MEDIUM Attacks Reddit r/netsec

We combined DRAM timing attacks, electrical grid frequency detection, and gyroscope fusion into a single bot detection stack and I think we need to talk about it

  • What: New bot detection method using hardware and sensor data
  • Impact: Potential threat to online security
Read Full Article →

So @/svrnsec/pulse already does the unhinged stuff. It listens for your power grid's electrical hum through the microphone to fingerprint your physical location. It times DRAM rowhammer patterns to detect VMs. It uses SharedArrayBuffer timer drift to catch sandboxed environments. Normal security package stuff. But we kept asking ourselves: what if the bot PASSES all of that. What if it's running on real hardware, real grid, real DRAM. How do you catch it then? You check if it makes physical sense. That's what @/svrnsec/nerve does. It fuses the device's actual sensors (accelerometer, gyro, barometer, ambient light, proximity) and asks questions like: is this person sitting still? Are they paying attention? Does their arousal signal suggest any kind of biological presence whatsoever? A bot on real hardware still has no body. And bodies leave traces. The two packages work together now. Pulse handles the physics layer, Nerve handles the context layer. Between them there's not a lot of room left for something that isn't actually a person. Both on npm under @/svrnsec. Rip it apart, I can take it. submitted by /u/AyRon2026 [link] [comments]

Share this article