[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"project-6404":3},{"id":4,"name":5,"fullName":6,"owner":7,"repo":5,"description":8,"homepage":9,"htmlUrl":10,"language":11,"languages":10,"totalLinesOfCode":10,"stars":12,"forks":13,"watchers":14,"openIssues":15,"contributorsCount":16,"subscribersCount":16,"size":16,"stars1d":16,"stars7d":17,"stars30d":18,"stars90d":16,"forks30d":16,"starsTrendScore":16,"compositeScore":19,"rankGlobal":10,"rankLanguage":10,"license":20,"archived":21,"fork":21,"defaultBranch":22,"hasWiki":21,"hasPages":23,"topics":24,"createdAt":10,"pushedAt":10,"updatedAt":40,"readmeContent":41,"aiSummary":42,"trendingCount":16,"starSnapshotCount":16,"syncStatus":15,"lastSyncTime":43,"discoverSource":44},6404,"system-bus-radio","fulldecent\u002Fsystem-bus-radio","fulldecent","Transmits AM radio on computers without radio transmitting hardware.","https:\u002F\u002Ffulldecent.github.io\u002Fsystem-bus-radio\u002F",null,"C",6679,400,155,2,0,1,8,65.11,"MIT License",false,"main",true,[25,26,27,28,29,30,31,32,33,34,35,36,37,38,39],"airgap","communication","communication-protocol","electrical-engineering","engineering","equipment","exfiltration","low-level","microprocessor","radiation","radio","security","software-defined-radio","transmission","transmitter","2026-06-12 04:00:28","# System Bus Radio\n\nThis program transmits radio on computers \u002F phones without radio transmitting hardware.\n\n## Thank you to our sponsors\n\n\u003Cimg src=\"https:\u002F\u002Fradiostay.com\u002Fimages\u002Flogo.svg\" width=200>\n\nListen to online radio - \u003Chttps:\u002F\u002Fradiostay.com\u002F>\n\n## Why?\n\nSome computers are intentionally disconnected from the rest of the world. This includes having their internet, wireless, bluetooth, USB, external file storage and audio capabilities removed. This is called \"air gapping\". Even in such a situation, this program can transmit radio.\n\nPublicly available documents already discuss exfiltration from secured systems using various electromagnetic radiations. This is documented in the TEMPEST guidelines published by the US National Security Agency and the US Department of Defense. This project simply adds to that discussion.\n\n## How to use it\n\n**NEW:** Try it in your browser, click here: \u003Chttp:\u002F\u002Ffulldecent.github.io\u002Fsystem-bus-radio\u002F>\n\nEnter the implementations folder, select any of them and compile using `make`.\n\n```sh\nmake\n```\n\nRun this using a 2015 model MacBook Air. Then use a Sony STR-K670P radio receiver with the included antenna and tune it to 1580 kHz on AM.\n\nRun it and reference the a tune file or make your own!\n\n```sh\n.\u002Fmain ..\u002F..\u002Ftunes\u002Fmary_had_a_little_lamb.tune\n```\n\nYou should hear the \"Mary Had a Little Lamb\" tune playing repeatedly. Other equipment and tuning may work as well. On the equipment above, the author has achieved clear transmission over two meters of open air or one meter through drywall. Different results will be achievable with different equipment.\n\nAre you using an antenna? At the beginning, the author placed the antenna directly on top of the number 4 key and that worked best (on any AM frequency). It was a round antenna. Then once they knew it worked they moved the antenna back. Moving it back reduced the number of frequencies that it worked on, and eventually only that one (1580 kHz) worked. Different hardware will certainly have different frequency response. Here are some results that have been sent in by readers. Please mail \u003Cgithub.com@phor.net> with your results (including makes and models of all equipment involved) or [edit this file directly](https:\u002F\u002Fgithub.com\u002Ffulldecent\u002Fsystem-bus-radio\u002Fedit\u002Fmaster\u002FTEST-DATA.tsv) and create a pull request.\n\n**WANTED:** Please post your test results using Raspberry Pi and other embedded systems. This may be particularly good targets because of less shielding\u002Fhardening of their hardware.\n\n**NEW:** See our [basic RTL SDR guide] to receive system bus signals using another computer with RTL SDR hardware.\n\n## Technical explanation\n\nThis program runs instructions on the computer that cause electromagnetic radiation. The emissions are of a broad frequency range. To be accepted by the radio, those frequencies must:\n\n* Be emitted by the computer processor and other subsystems\n* Escape the computer shielding\n* Pass through the air or other obstructions\n* Be accepted by the antenna\n* Be selected by the receiver\n\nBy trial and error, the above frequency was found to be ideal for that equipment.\n\nThe actual emissions are caused by the `_mm_stream_si128` instruction that writes through to a memory address. Inspiration for using this instruction was provided in:\n\n> Guri, M., Kachlon, A., Hasson, O., Kedma, G., Mirsky, Y. and Elovici, Y., 2015. GSMem: data exfiltration from air-gapped computers over GSM frequencies. In 24th USENIX Security Symposium (USENIX Security 15) (pp. 849-864).\n>\n> \u003Chttps:\u002F\u002Fwww.usenix.org\u002Fnode\u002F190937>\n\nPlease note that replacing `_mm_stream_si128` with a simple `x++;` will work too. The author's experience has been that  `_mm_stream_si128` produces a stronger signal. There may be other ideas that work even better, and it would be nice to improve this method to be more portable (not require SSE extensions).\n\nThe program uses square wave modulation, which is depicted below:\n\n```\n|\u003C--------------------TIME-------------------->|\n|                                              |\n|‾|_|‾|_|‾|_____________|‾|_|‾|_|‾|_____________\n|                       |   |   |\n|\u003C------SIGNAL--------->|   |   |\n                            |   |\n                            |\u003C->| CARRIER\n```\n\nNotes on high precision time APIs:\n\n* Get current time\n  * mach_absolute_time() gives time in int64_t of nanoseconds\n    * Converting to nanoseconds \u003Chttps:\u002F\u002Fdeveloper.apple.com\u002Flibrary\u002Fmac\u002Fqa\u002Fqa1398\u002F_index.html>\n    * Declared \u003Chttps:\u002F\u002Fopensource.apple.com\u002Fsource\u002Fxnu\u002Fxnu-1456.1.26\u002Fosfmk\u002Fmach\u002Fmach_time.h>\n    * Definition \u003Chttps:\u002F\u002Fopensource.apple.com\u002Fsource\u002FLibc\u002FLibc-320\u002Fi386\u002Fmach\u002Fmach_absolute_time.c>\n  * clock_get_time() gives a mach_timespec_t time\n    * Called from mach_absolute_time()\n  * mach_timespec_t\n    * Type documentation \u003Chttps:\u002F\u002Fdeveloper.apple.com\u002Flibrary\u002Fmac\u002Fdocumentation\u002FDarwin\u002FConceptual\u002FKernelProgramming\u002Fservices\u002Fservices.html>\n    * Declaration \u003Chttps:\u002F\u002Fopensource.apple.com\u002Fsource\u002Fxnu\u002Fxnu-1456.1.26\u002Fosfmk\u002Fmach\u002Fclock_types.h>\n  * \u003Chttp:\u002F\u002Fstackoverflow.com\u002Fa\u002F21352348\u002F300224>\n  * \u003Chttps:\u002F\u002Fstackoverflow.com\u002Fquestions\u002F5167269\u002Fclock-gettime-alternative-in-mac-os-x>\n* Sleep\n  * mach_wait_until()\n    * Notes \u003Chttps:\u002F\u002Fdeveloper.apple.com\u002Flibrary\u002Fios\u002Ftechnotes\u002Ftn2169\u002F_index.html>\n  * nanosleep()\n    * Apple doc \u003Chttps:\u002F\u002Fdeveloper.apple.com\u002Flibrary\u002Fmac\u002Fdocumentation\u002FDarwin\u002FReference\u002FManPages\u002Fman2\u002Fnanosleep.2.html>\n    * Definition \u003Chttps:\u002F\u002Fopensource.apple.com\u002Fsource\u002FLibc\u002FLibc-320.1.3\u002Fgen\u002Fnanosleep.c?txt>\n  * clock_sleep_trap()\n    * Used from nanosleep()\n    * Declared \u003Chttps:\u002F\u002Fopensource.apple.com\u002Fsource\u002Fxnu\u002Fxnu-1456.1.26\u002Fosfmk\u002Fmach\u002Fmach_traps.h>\n    * Definition \u003Chttp:\u002F\u002Funix.superglobalmegacorp.com\u002Fxnu\u002Fnewsrc\u002Fosfmk\u002Fkern\u002Fclock.c.html>\n    * Uses clock_sleep_internal()\n    * Uses ADD_MACH_TIMESPEC\n  * clock type constants \u003Chttps:\u002F\u002Fopensource.apple.com\u002Fsource\u002Fxnu\u002Fxnu-1456.1.26\u002Fosfmk\u002Fmach\u002Fclock_types.h?txt>\n    * TIME_ABSOLUTE\n    * TIME_RELATIVE\n    * Defines ADD_MACH_TIMESPEC(t1, t2) \u002F\u002F t1  += t2\n    * Defines CMP_MACH_TIMESPEC(t1, t2) \u002F\u002F t1 \u003C=> t2, also (t1 - t2) in nsec with max of +- 1 sec\n  * msleep() \u003Chttps:\u002F\u002Fdeveloper.apple.com\u002Flibrary\u002Fmac\u002Fdocumentation\u002FDarwin\u002FConceptual\u002FKernelProgramming\u002Fservices\u002Fservices.html>\n    * time\u002Ftimer.c \u002F  \u003Chttp:\u002F\u002Flxr.free-electrons.com\u002Fsource\u002Fkernel\u002Ftime\u002Ftimer.c#L1673>\n  * kern\u002Fclock.h \u003Chttps:\u002F\u002Fopensource.apple.com\u002Fsource\u002Fxnu\u002Fxnu-1456.1.26\u002Fosfmk\u002Fkern\u002Fclock.h>\n\n## Press coverage\n\n* \u003Chttps:\u002F\u002Fhardware.slashdot.org\u002Fstory\u002F16\u002F03\u002F01\u002F1727226\u002Fmicrocasting-color-tv-by-abusing-a-wi-fi-chip>\n* \u003Chttps:\u002F\u002Fnews.softpedia.com\u002Fnews\u002Femitting-radio-waves-from-a-computer-with-no-radio-transmitting-hardware-501260.shtml>\n* \u003Chttps:\u002F\u002Ftenwatts.blogspot.com\u002F2018\u002F01\u002Fsystem-bus-radio.html>","该项目通过无无线电发射硬件的计算机或手机传输AM无线电。其核心功能是利用计算机系统总线产生的电磁辐射来发送无线电波，适用于对安全性有高要求、已实施空气隔离（air gapping）措施但仍需进行数据外泄测试的场景。技术特点包括使用C语言编写，支持多种设备和频率，并且可以在没有网络连接的情况下运行。此项目不仅展示了软件定义无线电的可能性，还为研究电磁泄漏提供了一个实用工具。对于电气工程、信息安全以及无线电通信领域的研究人员和爱好者来说，这是一个非常有价值的资源。","2026-06-11 03:06:49","top_language"]