• Zer0_F0x@lemmy.world
    link
    fedilink
    English
    arrow-up
    25
    ·
    edit-2
    19 days ago

    Damn. This must be one of the most terrifying cyber attacks of all time. Like, Mr. Robot level of breach and execution.

    In that show they rig the UPS batteries of server buildings to blow up, this is basically the same idea on a smaller scale.

    Either that, or they compromised the manufacturer of the pagers and put small explosive devices in there. Truly legendary and insane.

    • Badabinski@kbin.earth
      link
      fedilink
      arrow-up
      10
      ·
      18 days ago

      Yeah, I’ve been wondering how the fuck they pulled this off. If it turns out that the only pagers that exploded belonged to Hezbollah members, then that would signal to me that this was done entirely digitally.

      I’ve heard that batteries (can’t remember if it was laptop or phone batteries) contain the energy of a small grenade, but getting it to release that energy all at once without physical access is absolutely fucking wild and has serious fucking implications for device security.

      • Echo Dot@feddit.uk
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        18 days ago

        Getting batteries to release energy isn’t very difficult, even getting them to release it quickly isn’t very difficult. What’s difficult is getting them to release it over the course of a few milliseconds. Which is what you would need for an explosion.

        If the battery simply dumped all its power over the course of 30 seconds that’s basically just a fire that you can run away from.

        Also I wouldn’t have thought a pager had that much charge, I wouldn’t have thought this sort of thing would be possible as they would tend to just go off with a loud bang, assuming you could even get them to release all the energy at once l, which again I wouldn’t have thought was possible.

        For fairly obvious reasons I don’t think we’re ever going to find out how this was done.

    • Doorbook@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      18 days ago

      I am surprised the name of the manufacture is not out. This basically raise privacy concern.

  • umami_wasabi@lemmy.ml
    link
    fedilink
    English
    arrow-up
    8
    ·
    18 days ago

    Is this a cyberattack, or pre-planted explosives?

    My dad used to have one and it runs on single AA bsttery. It will burn if exploded but I doubt will that make “man fell on the groud bleeding.” Newer models might use recharable batteries, yet the BMC (logically thinking) should be sperated from the communication part as charging have nothing to do with it. How are you going to use SMS to hack a part of the system which isn’t connected?

    If it is pre-planted explosives, that’s just wet work and nothing to talk about it.

    Of course, the attacker can do a supply chain attack (by threating/hacking the manufacture, excluding explosives) as a stage to make the cyberattack possible.

    • dhork@lemmy.world
      link
      fedilink
      English
      arrow-up
      13
      ·
      edit-2
      18 days ago

      NYT has a link up which it claims has been verified. It is a video of someone at a market who had one of these in their messenger bag. The video shows a decent size explosion, which blew a big hole in the bag and knocked the guy to the ground.

      https://www.nytimes.com/live/2024/09/17/world/israel-hamas-war-news/44771255-fd1d-5028-8228-aff0ca5b8139

      I doubt you could make an explosion that big with a AA battery. They must have planted the stuff in some massive supply chain hack.

      • alvvayson@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        11
        ·
        18 days ago

        Yep, all the electrical engineers who have chimed in say it looks more like explosives.

        A battery would get hot and start a fire. It wouldn’t instantly explode like this.

    • Echo Dot@feddit.uk
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      18 days ago

      Yeah this is what I’m confused about. In a lot of simpler devices like this the BMS is actually a daughter board and has no physical connectivity to the main circuits at all. And even if it had access you generally do not have the capacity to rewrite its code, because again code updating is not something that was ever expected.

  • SocialMediaRefugee@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    2
    ·
    18 days ago

    I’m no fan of Hezbollah but how is this different than spreading land mines? Even if you kill civilians in an air strike at least you can claim there were enemy combatants there. Here it is just “Eh, we’ll just kill people at random and see what happens.”

  • CrimeDad@lemmy.crimedad.work
    link
    fedilink
    English
    arrow-up
    2
    ·
    18 days ago

    I wonder how they did it. Was the firmware hacked to make the batteries ignite or were separate explosives implanted in each pager?