I still think LTE is the most likely attack vector, and there's a reason the attackers chose it. Even purpose-built "low-power" cellular IoT chips draw hundreds of milliamps during transmission, well ...
You wouldn’t be able to catch the power spikes if transmission was done using an alternative power source. Heck, the hacker could use some RFID bullshit and charge/communicate with the thing whenever you drive past a toll gate for all I know.
Assuming that power can be sourced from somewhere else, analyzing power consumption will not detect an implant.
Also the attacker would have detected your system was tripped during the development of the exploit and would be simply forced to take the next step.
Consider the leak path was unencrypted display communication through SPI, which also happened to have exposed test pads on the board… that is insane for a so called security device.
Encrypting the display communication, doing parts pairing like apple, would at least move the plain text data to somewhere more inconvenient for the attacker… and then you could do sensing of capacitance or load changes on the display lines. Could also go as far as doing some BS like “chip on glass” with fine, impossible to probe traces (without destruction).
Once again, the low tech solution of not making unencrypted data easily available through probing pins and epoxy bathing the critical elements has not failed humanity in all of these years of smart cards, nfc etc.
Also I don’t think apple can do breaking changes to the network ever since they have opened it to third parties and google joined.
Assuming that power can be sourced from somewhere else, analyzing power consumption will not detect an implant.
Also the attacker would have detected your system was tripped during the development of the exploit and would be simply forced to take the next step.
Consider the leak path was unencrypted display communication through SPI, which also happened to have exposed test pads on the board… that is insane for a so called security device.
Encrypting the display communication, doing parts pairing like apple, would at least move the plain text data to somewhere more inconvenient for the attacker… and then you could do sensing of capacitance or load changes on the display lines. Could also go as far as doing some BS like “chip on glass” with fine, impossible to probe traces (without destruction).
Once again, the low tech solution of not making unencrypted data easily available through probing pins and epoxy bathing the critical elements has not failed humanity in all of these years of smart cards, nfc etc.
Also I don’t think apple can do breaking changes to the network ever since they have opened it to third parties and google joined.
1