安全与隐私cryptomuseum.com
枪手行动：苏联如何窃听 IBM 打字机（2015）
Operation Gunman – how the Soviets bugged IBM typewriters (2015)
2015 — 2022，它一次次回到首页
黑点是上首页（≥ 50 分）的那次投稿，空心点是没冲上去的投稿，点越大分数越高。
导读
密码博物馆的专题页讲述冷战时期苏联针对 IBM Selectric 打字机的窃听行动“Operation Gunman”：窃听装置被藏进键盘下方的空心支架，常规检查难以发现，往往要靠 X 光等手段才能识别。页面结合装置照片与调查背景，呈现这场硬件间谍战的技术细节。
为什么经久不衰：它把冷战间谍技术的工程巧思与调查细节讲得具体可查，也让读者反观今天无处不在的电子监控。
HN 评论精选
惊叹 1970 年代就能做出如此隐蔽且能反检测的硬件窃听装置。
这个窃听器相当大，由当时最先进的集成电路和单比特磁芯存储器组成。它完全藏在键盘机构底部一个空心的支撑支架里，肉眼看不见，当时的检测设备也发现不了。只有 X 光扫描才能暴露它的存在，下图展示的就是该装置。它还含有特殊元件，甚至能躲过非线性结检测器（NLJD）。
themodelplumber查看英文原文
> The bug was fairly large and consisted of state-of-the-art integrated circuits and single-bit core memory. It was completely hidden inside a hollow support bracket at the bottom of the keyboard mechanism, and was invisible to the naked eye, but also to the detection equipment of the era. Only an X-ray scan could reveal the presence of the device, which is shown in the image below. It contains special components to hide its presence even from non-linear junction detectors (NLJD). Holy cow. I wouldn't have thought this was possible in the mid-1970s. Also the article says that the NSA didn't trust the CIA or State Department to handle the investigation properly, which was very interesting to read. Had the NSA already been established as a "we do tech better" agency?
1987 年大众科普中已有人准确描述其原理，说明这个故事早有公开线索。
Selectric 窃听器的存在曾在 1987 年的一期《Popular Science》中被提到。文章中，一位纽约的打字机销售员准确描述了该窃听器的工作原理，尽管当时其确切原理尚未公开。文中提到了六根金属条和磁开关。见第 87 页底部的“Low-Tech bugging”段落以及第 88 页随后的“The cold (bugging) war”段落。
LaputanMachine查看英文原文
The existence of the Selectric bug was mentioned in an issue of Popular Science from 1987 [1]. In the article, a typewriter salesman from New York correctly describes the working principle of the bug, even though the exact working principle of the bug was not publicly known at the time. The six metal bars as well as magnetic switches are mentioned. See the paragraph "Low-Tech bugging" at the bottom of page 87, as well as the subsequent paragraph "The cold (bugging) war" on page 88. [1]: https://books.google.com/books?id=mgAAAAAAMBAJ&pg=PA87#v=onepage&q&f=false
苏联还使用过特雷门发明的激光麦克风进行窃听。
另见激光麦克风（Laser microphone），由列昂·“特雷门”·特雷门为苏联间谍活动发明。
leoc查看英文原文
See also the https://en.wikipedia.org/wiki/Laser_microphone , invented by Léon "Theremin" Theremin for Soviet espionage.
现代监控已由用户自愿携带的设备完成，比冷战硬件植入更彻底。
当年，各国会走到极端：给电子打字机加装间谍设备，并秘密放进敌人办公室，以监视敌人。如今不必如此大费周章，因为每个人随时随地都带着一台带摄像头和麦克风的超级计算机，24/7，还乐意把海量信息安装并分享给各种随机应用！
cs702查看英文原文
So, back then, countries were going to extremes like retrofitting electronic typewriters with spying devices, and secretly placing them inside the offices of their enemies, so they could spy on their enemies. Nowadays, there's no need to do anything so extreme, because everyone everywhere is already carrying a supercomputer with a camera and a microphone, 24x7, and willingly agreeing to install and share a ridiculous amount of information with random apps!
历次讨论
同类还值得读
非法素数
Illegal prime
维基百科条目，介绍“非法素数”：某些素数之所以被称为“非法”，是因为它们经特定编码后，恰好对应一段被法律禁止传播的数据——最著名的是 DVD 解密程序 DeCSS 的代码，有人把…
安全与隐私上首页 5 次 · 2010–2021en.wikipedia.org编辑精选关于 /dev/urandom 的常见误区
Myths about /dev/urandom
（Thomas Hühn 撰写，2014 年首发并持续更新）逐条反驳关于 /dev/urandom 的常见误解：它与 /dev/random 使用的是同一个 CSPRNG，一旦完…
安全与隐私上首页 5 次 · 2014–20202uo.de编辑精选AES 高级加密标准火柴人图解
A Stick Figure Guide to the Advanced Encryption Standard (AES)
一篇用火柴人漫画形式讲解 AES（高级加密标准）算法的经典科普文章。
安全与隐私上首页 5 次 · 2009–2022moserware.com编辑精选指纹是用户名，不是密码
Fingerprints are Usernames, not Passwords
作者（eCryptfs 维护者、Ubuntu 安全工程师）认为指纹等生物特征是公开、不可更改的标识，应视作用户名而非密码，不能当作秘密凭据用于认证。
安全与隐私上首页 4 次 · 2013–2017blog.dustinkirkland.comHTTPS 连接的最初几毫秒（2009）
The First Few Milliseconds of an HTTPS Connection (2009)
逐毫秒拆解一次 HTTPS 连接建立时发生了什么，重点讲 TLS 握手、证书验证、RSA 签名与密钥协商等机制，面向不熟悉该领域的读者。
安全与隐私上首页 4 次 · 2009–2020moserware.com编辑精选