The London office where swinging pendulums keep cyber threats at bay

https://www.ianvisits.co.uk/articles/inside-the-london-office-where-swinging-pendulums-keep-cyber-threats-at-bay-71054/

by mellosouls • 2 years ago

83 58 2 years ago

ianvisits.co.uk

As a layman how does this physical random generation help with security. Can any hacker ever chase any random enough number generated by some algorithm? To me it looks like if there was 0.001 percent chance of guessing a random this technique just reduces that chance in theory. A long enough password is already considered secure, how does this thing make it any more secure in practice?

yyykk• 2 years ago

It doesn't, it's really just an art piece.

The same could be achieved electronically with a simple circuit inside their servers, but it wouldn't look quite as good.

xLaszlo2• 2 years ago

Until it turns out that the NSA was involved writing said RNG and explicitly weekend it with a backdoor...

Legend24402• 2 years ago

It's really just for the purpose of looking cool. Modern CPUs include hardware random number generators that work just fine.

hbossy• 2 years ago

According to their producers. Do you trust them?

JoachimS4• 2 years ago

Things can be more than one thing. Of course it is a PR piece.

But it is also a source of entropy that is hard to manipulate (if we ignore the cameras, image generation etc). And it is a good source, initiator for discussions about entropy, random numbers and why we need them to secure things. This thread on HN shows that it is so. And for 'normal' people probably even more.

I'm sure they have a lot of non-geeky visitors that look at the installation, read the sign and start asking questions. And if it was me, starting to jump in front of the installation, waving my arms - to provide my bit of entropy to the pool.

acatton• 2 years ago

Random numbers are used to generate your TLS certificate key or your SSH key. If one can predict how a TLS or SSH key was generated they could impersonate the key holder.

Here is an explanation of what was possible when a Debian packager mistakenly introduced a patch which reduced the SSL certificate keyspace in 2008: https://jblevins.org/log/ssh-vulnkey

The possibilities of keys which were generated by this random number generator was so small, that a brute-force attack on keys was feasible.

That being said, for years, random number generators have been using random signals coming to your computer (key strokes, network packets, ...) and feeding them into a sponge function. You don't need lava lamps or pendulums to generate random numbers, it's just for the press.

https://www.2uo.de/myths-about-urandom/

tetha2• 2 years ago

Speedrunners abuse this in a fun way on older consoles, RNG manipulation [1]. For example the SNES had no actual source of random numbers, so games had to use the inputs as the most unpredictable random source. However, if you do that, people figure out how you can scroll through a menu to force an item to drop or an attack to become great[2]

If implemented in full tool assisted speedruns, this can become entirely ridiculous. That rare thing you need to grind hours to find? nope. just press these 18 buttons starting at the right frame and it'll drop first try.

1: https://www.youtube.com/watch?v=MNQaZFwu57E

2: https://www.youtube.com/watch?v=-sfE8qLCnQY

defrost• 2 years ago

A single random password simply isn't enough - Cloudflare deals in millions (actually many many more) of secure handshakes per second.

Each has to be secure with a unique unpredictable element.

One way (of many) is to use complex PRNG's - Psuedo Random Number Generators, but these can (theorectically) be sequence guessed and then are predictable (or least have a greatly reduced "guess space").

A hybrid way is to regularly reseed a PRNG with a "truly random" starting point, milk that for a few hundred values, and then kick it again with a new random seed.

These particular pendulums have "simple" mechanics that are similar to the dynamic systems represented by Lorenz's Butterfly [1] (not exactly but with similar properties) and thus move in chaotic unpredicable ways (such as the timing between the last crossbar changing directions) - these can be "driven" (the base rocked | vibrated) by a small motor) so they continuusly move and yet the path through phase space is still unpredictable.

So, without knowing for certain whether this is what Cloudflare is doing here, that is one way in which many many truly random numbers can be generated to feed into secure handshakes; using unpredictable seeds to feed into twisted PRNGs.

[1] https://en.wikipedia.org/wiki/Lorenz_system

zelphirkalt• 2 years ago

Seemingly chaotic does not equal random. But unless someone figures out a way to make the chaotic seem no longer chaotic, it will be good enough for our purposes.

GuB-42• 2 years ago

There are many algorithms where instead of transferring data using a computationally expensive (usually public key, like RSA) algorithm, the data is encrypted with a much faster (usually symmetrical, like AES) algorithm using a random key and then the key is transferred using the expensive algorithm.

If you can guess how the random key is generated, then you can decrypt the message without breaking either encryption algorithm. That's why it is important to have really unpredictable random data, and physical randomness is the best for that.

In practice, that wall of pendulums is unlikely to make a difference compared to the more mundane techniques used in most computers these days, that rely on some CSPRNG combined with various hard to predict system events (ex: interrupt timing), but it looks way cooler.

moritonal2• 2 years ago

Fun fact, Hackernews itself was "hacked" by a user doing exactly this. A user realised they could successfully guess the key-space the server used to encrypt it's user cookies. Had it had a greater source of random it wouldn't have been possible.

https://news.ycombinator.com/item?id=639976

jgrahamc3• 2 years ago

Amusingly, I had pointed out that HN was vulnerable to such an attack about a month before that user did it. And I was also involved into setting up Cloudflare's Lava Lamps.

https://news.ycombinator.com/item?id=640213

astura• 2 years ago

Here's an (old) example of poor random number generation leading to an exploit - https://www.developer.com/guides/how-we-learned-to-cheat-at-...

bell-cot2• 2 years ago

I smell security theater, and a red herring for dim adversaries.

OTOH...if I ran Cloudflare's PR Dept., and was responsible for keeping the internet's millions of self-styled experts (who generally know just enough to be really annoying) feeling both informed, and sure of Cloudflare's security virtues - then I'd probably be pushing for more of these setups. And for-sure one of 'em in any Cloudflare office where I or my people might be stuck giving interviews to journalists. Every second of an X-minute interview that was "wasted" by the reporter staring at the Sock Puppets of Randomness would be one happier second in the lives of me and my people...

/s?

Karellen• 2 years ago

ObTomScott: The Lava Lamps That Help Keep The Internet Secure

https://www.youtube.com/watch?v=1cUUfMeOijg

(Mention of the London pendulums at 2:39)

mikerg87• 2 years ago

The patent that drives this :

Method for seeding a pseudo-random number generator with a cryptographic hash of a digitization of a chaotic system

https://patents.google.com/patent/US5732138A/en

resource_waste• 2 years ago

I liked lava lamps better. Fluids are less predictable.

jgrahamc3• 2 years ago

We use lots of things: https://blog.cloudflare.com/harnessing-office-chaos/

garyiskidding2• 2 years ago

Australian National University hosts a random number generator based on quantum fluctuations in the vacuum : https://qrng.anu.edu.au/

Question : With respect to breaking cryptography, today's cryptographically secure pseudo random number generators (CSPRNGs) seem capable. What threat scenarios would require true (or near-true) random generators?

djcannabiz• 2 years ago

CSPRNGs still need to be seeded with random numbers.

JoachimS4• 2 years ago

And very importantly, a TRNG is often not cryptographically safe and should never be directly used for security related use cases. Basically only be used to (re)seed a good CSPRNG (DRBG in NIST parlance).

Another benefit of a CSPRNG is vastly higher performance than most TRNGs can achieve. A TRNG often provide kbps birate. A CSPRNG can easily deliver Many MBps, even GBps.

ot2• 2 years ago

I wish articles like this described the technique for what it is, that is a fun gimmick, or maybe even an art installation, rather than misleading the reader into thinking that this is produces better randomness than any other common entropy source (there is no indication of that). It is misinformation that does not make the reading any more entertaining or informative.

"critical to the security of the global internet"? Really?

yellow_lead2• 2 years ago

Since they mix it with other entropy sources, it really doesn't matter. At best, you have a cool marketing gimmick. At worst, the extra complexity from this art installation introduces some vulnerability in the future.

moritonal2• 2 years ago

For all the people saying this is security theatre, no, it's one layer of an immense level of paranoia that makes CloudFlare great at what they do.

Fun fact, HN itself was "hacked" due to bad random once (https://news.ycombinator.com/item?id=639976).

jgrahamc3• 2 years ago

Random numbers have always worried me. Hence the Lava Lamps etc. at Cloudflare and the fact that I predicted that attack on HN about a month before it happened: https://news.ycombinator.com/item?id=640213

ot2• 2 years ago

But in the case of HN the RNG was seeded by millisecond-granularity timestamps. This was universally considered bad already in 2009 (it would have been even in 1999). The Debian SSL key scandal happened in 2008.

It is quite a leap to say "timestamp-based seeds are insecure, let's upgrade to lava lamps".

WirelessGigabit• 2 years ago

I'm reading that post, and while fascinating, I don't understand the entropy calculation.

The digit chance is easy:

For a single digit to appear one needs 1/3 * 1/10 = 1/30.

For a single letter to appear one needs 1/3 * 1/26 = 1/78.

But the bits of entropy throw me off. 26 + 26 + 10 = 62, which is 2^5.954. But that is for a uniform distribution. The writer states that it actually is 2^5.826, or 1/~56.7. I don't get how they to that number.

yellow_lead2• 2 years ago

It is security theater and a marketing stunt. Why not just use a hardware-backed random number generator?

For example this has passed NIST SP800-22 and SP800-90B [1].

As far as I can tell, cloudflares DIY lamps/pendulums are not NIST certified.

[1] https://www.idquantique.com/random-number-generation/product...

JoachimS4• 2 years ago

An NIST certification is a requirement for being secure? Like an RNG with Dual_EC_DRBG - which you could get a certification for.

Some would claim that CMVP, FIPS 140-3, Common Criteria stickers on a black box (HSM) is security theater.

beejiu• 2 years ago

Why not just use a hardware-backed random number generator?

They do, don't they? I think the Lavalamps, etc, are just _extra_ entropy. The more entropy you add (even if it's _not_ a certified or perfect random source) only improves the random number generator.

josefx• 2 years ago

As far as I can tell, cloudflares DIY lamps/pendulums are not NIST certified.

That makes them by definition worse than the OpenSSL version that leaked user keys on request. /s

brianmcc• 2 years ago

I think the term "theatre" implies "is meant to achieve X but fails to", rather than "achieves X in a slightly flamboyant manner".

Like all the COVID-prevention theatre: sitting in restaurants and only masking when you visit the toilet. Hand-washing often whilst in unventilated areas with no masks. That's all "COVID theatre" IMO, as it fails to actually prevent the thing ostensibly being tackled.

My favourite one FWIW was wiping down the seat padding in the gym where nobody was masked - I mean who came up with that??

A creative hardware source of legit randomness is not the same as security theatre, and arguably has some useful educational aspect - it's certainly a talking point!

jarvist• 2 years ago

But it is theatre. A single £0.01 Zener diode can generate vastly more guaranteed (by quantum mechanics!) randomness, without all the possibility of failure, entropy leaking etc.

JoachimS4• 2 years ago

Please define what you mean with theatre.

Yes it is much more cool to look at than a zener diode, but it is still a source of physical entropy. And one could argue that a whole bunch of chaotic pendulums are more resilient to failure than a single diode.

bell-cot2• 2 years ago

Simple argument for "security theatre": Even if Cloudflare happens to use this technology (chaotic pendulums) as an RNG, they'd still put the instance of it that is their on-line RNG somewhere out of sight and seriously secure. The instance that is publicly viewable - and probably has plenty of wanna-be hostiles thinking "how could I use that to..." - would only be connected to their intrusion-detection systems.

thih9• 2 years ago

also the shadows behind them. The alcove is lit by daylight, so the shadows cast by the swinging double-pendulums will change depending on how sunny it is or, more usually in London, how gloomy it is.

Wouldn't that result in time based patterns matching the daytime/nighttime cycle? Then again, I guess this would only happen during continuous use over a number of days and perhaps that's not the use case.

H8crilA• 2 years ago

It still adds entropy. You're thinking of uniform entropy vs just entropy, but the former is easy-ish to produce from the latter, for example by using hash functions.

Also, it's obviously a stunt - you are probably much better off measuring decay of trace amounts of natural radioactive isotopes. But it is not without merit.

sgarland• 2 years ago

measuring decay of trace amounts of natural radioactive isotopes

Which is precisely what CF does in their Singapore office.

Miraltar• 2 years ago

Yes there is a day/night cycle but it also depends too much on the weather on a ridiculously tiny scale to be realisticly predictable. And even if it was indeed predictable, it woud still add complexity to the prediction

quantified• 2 years ago

Capturing street-level headlights would add in more randomness at nighttime (so long as car and bus headlights remain a thing).

ggm• 2 years ago

Funny story I've told on hn before. Post office bond draws were using "ernie" which did randomness from thermionic valves. My dad helped build "icce" at imperial college in the 50s (something like the 5th public computer in the UK, noting many fine secret ones) and wanted to test their RNG. The post office refused to cooperate with a feed from Ernie, concerned imperial would detect non-randomness and undermine the integrity (or PR) of the premium bond draw.

tromp• 2 years ago

Unfortunately, I couldn't find any video of the cloudflare pendulums in action, but this other one [1] gives some idea, despite being human powered rather than battery powered.

Btw, I imagine a camera pointed at a busy intersection with lots of pedestrian traffic (e.g. Times Square) to generate much more entropy.

[1] https://www.youtube.com/watch?v=J85gpcjvqzs

ano-ther• 2 years ago

Cool. I only knew about the lava lamps.

How random are the pendulums and how are they powered? Pendulums are usually quite predictable. Or are these double pendulums?

They add randomness by adding daylight. Could you use this for an attack (say, shining light from the outside during the night)?

luxcem• 2 years ago

These are double pendulums, it's a famous chaotic system. Even with a video frame it would be impossible to predict more than a few seconds of the system.

throw0101b• 2 years ago

There's a (expired) patent on this:

A method for generating a pseudo-random numbers Initially, the state of a chaotic system is digitized to form a binary string. This binary string is then hashed to produce a second binary string. It is this second binary string which is used to seed a pseudo-random number generator. The output from the pseudo-random number generator may be used in forming a password or cryptographic key for use in a security system.

* https://patents.google.com/patent/US5732138A/en

Originally filed by SGI in 1996.

The London office where swinging pendulums keep cyber threats at bay

Related Stories