Through Glass Transfer (TGXf)

  The TGXf application demonstrates that:  • Any file that a user can read (use) can be downloaded (disclosure) via the screen, and;  • There are currently no technical controls to mitigate the proof-of-concept implementation.  Although technical vulnerability is constantly evolving (the proof-of-concept is defeatable), there is no foreseeable mitigation to the class of vulnerability described (storage based covert channels) and the general approach taken. This has the most impact when considering domestic enterprises that provide off-shore (overseas) partners with access to domestic data and processing infrastructure on-shore.In technical terms, TGXf encodes binary data into packets that can be displayed on the screen of one computer and then captured (via camera) on another, where they are decoded and the data is stored on disk. By doing this, TGXf turns any display surface into a binary data transfer interface and bypasses enterprise security strategies (including defence-in-depth strategies).  You can see a TGXf transfer in action here;    Android smart-phone in flight mode,....