32

cnet.com says:

Even in Snowden's room, the group took precautions not to be overheard. Greenwald and Poitras would remove the batteries from their mobile phones and put them in refrigerator of Snowden's minibar (...)

Is there any security reason they would do that?

d33tah
  • 6,524
  • 8
  • 38
  • 60
  • 11
    I'm starting to think they've all become one with the tinfoil. – Mark Buffalo Feb 05 '16 at 14:53
  • 17
    On Snowden-scale, this amount of paranoia might actually make sense. The question is whether it was for security at all. – d33tah Feb 05 '16 at 14:54
  • 18
    They put the batteries or the phones in the fridge? The batteries does not make any sense at all. Putting the phones would help if they were still powered up, as the fridge would act as an Faraday cage. But I agree they had become one with the tinfoil... – ThoriumBR Feb 05 '16 at 14:56
  • 16
    Mordern phones have so little spare space in them that integrating a bug with built-in power is extremely difficult. So I'd guess the batteries are primary targets for bug housing. Also, batteries can be swapped in a short period of time, but difficult to make a bugged phone to replicate the exact dents and scratches and data in the original! – billc.cn Feb 05 '16 at 14:57
  • 3
    @ThoriumBR People who used to work for the government themselves have [mentioned quite a few things you can do in that regard](http://money.cnn.com/2014/06/06/technology/security/nsa-turn-on-phone/) so a bit premature of you to get the tinfoil out.. particularly if you're the very likely target for targeted attacks. – Voo Feb 05 '16 at 20:00
  • 38
    This is an English language issue: "put them" is ambiguous and could be either "the batteries", "mobile phones" or both. The intended meaning is that [they put the mobile phones in the refrigerator](https://books.google.ca/books?id=6ze6BwAAQBAJ&pg=PA52&lpg=PA52&dq=poitras+greenwald+refrigerator&source=bl&ots=g9I3qxduBo&sig=MqncoJlnhtMu8-izhiyUk0Wb5wY&hl=en&sa=X&redir_esc=y), _not_ the batteries. – isanae Feb 05 '16 at 22:06
  • 2
    In "Nowhere to Hide," Greenwald wrote that his phone did not have a removable battery. Thus, putting it in the fridge is an additional precaution against attacks where the phone only appears to be turned off. – Austin Hartzheim Feb 07 '16 at 02:45
  • Might not be related, but I noticed my samsung android device is always connected with my home ᴡɪ‑ꜰi access point *(I saw it in the ᴀᴅꜱʟ router logs)*. Even when turned off. So by design it seems the normal behaviour of smart phones is to stay connected *(security or not)*. – user2284570 Feb 10 '16 at 15:02

6 Answers6

68

With its insulated walls and rubber door seals, a refrigerator is the most soundproof box commonly found in ordinary living spaces. If it's running, even better, it provides white noise. If one was worried about listening devices, then a fridge would be a reasonable and available place to stash them. And Snowden has alleged the NSA can do lots of things even with a phone that's turned off.

Minor update: Out of curiosity, I put my phone in the fridge, and later in the freezer, with batteries still inserted. In both cases I was able to call it quite easily - the refrigerator did not act as a Faraday cage - but the ringtone volume was noticeably subdued. So I do think the fridge in the quoted story was a soundproofing issue, not a Faraday Cage as has been suggested.

I know it's just an experiment of one, but it was a fun experiment :)

Even more minor update: I was curious and checked... my microwave, which is a Faraday Cage, doesn't block cell signals either (good explanation here).

gowenfawr
  • 71,975
  • 17
  • 161
  • 198
  • 14
    I often leave my phone in the freezer... its either that or leave the food behind.. 2 hand problems. – TheHidden Feb 05 '16 at 16:40
  • See [NYTimes article](http://thelede.blogs.nytimes.com/2013/06/25/why-snowdens-visitors-put-their-phones-in-the-fridge/?smid=fb-share&_r=1). Seems to say that Snowden's fridge was a Faraday cage. – Neil Smithline Feb 05 '16 at 16:49
  • 9
    "`Snowden has alleged the NSA can do lots of things even with a phone that's turned off.`" It's only a *trick* to assume the phone is off. It's really on, and just listening. It just doesn't let you know it's on. Security through obscurity. :] – Mark Buffalo Feb 05 '16 at 16:50
  • 6
    @NeilSmithline, the article _postulates_ that Snowden's fridge _could_ act as a Faraday cage. But for a cell phone you need the [cage to mesh around 1/4"](http://forums.anandtech.com/showthread.php?t=1832492) - and on any fridge I've ever used, the rubber seal around the door easily exceeds that. Also there are holes in the metal for the vent ducting... I'm really not optimistic about the reality of the average fridge blocking cell signals. – gowenfawr Feb 05 '16 at 17:34
  • 2
    @gowenfawr continuing down the tinfoil hat rabbit hole, is it possible that a fridge would be the least suspicious place in a home to have modified to actually be a proper Faraday cage? Unless your day job is RF antenna design consulting, it would be somewhat suspicious to own a cage, and beefing up the door seals to also have a conductive liner (and "fixing" any other non-conductive openings) sounds like it would be easy if you are willing to take a small fridge apart. Hmm. Is there a market there selling into paranoia for bar-fridges that are cages? – RBerteig Feb 05 '16 at 22:42
  • 2
    @RBerteig I think the Microwave, which is *exactly* a Faraday cage, is the least suspicious way... but even my microwave isn't tight enough to block cell phone signals. – gowenfawr Feb 05 '16 at 23:16
  • 2
    @gowenfawr Well a microwave is really only designed to shield you against frequencies around 2.4 GHz. Since blocking lower frequencies generally requires [thicker shielding](http://physics.stackexchange.com/questions/89077/does-a-faraday-cage-block-all-magnetic-field-frequencies-lower-than-x) which would increase cost I doubt microwaves block cell phone frequencies (at least the 900 MHz ones) particularly well - or only as well as required for their indented use. – Voo Feb 06 '16 at 12:37
  • 1
    I tried my freezer also and interesting thing happend, after calling it and hanging up, my cellphone continued ringing ~5-10 seconds after I pulled it out from the freezer and hanged up. I wrapped it up in aluminium foil and that worked, so I think the best option is to wrapped it up in alufolium and put it in the freezer :D – Davidenko Feb 07 '16 at 11:51
  • 1
    @gowenfawr - you have to look at the longest dimension of the opening. The seal all the way around the door is very long even though the gap is narrow, so it won't effectively block anything. I'm sure there will be some reduction, but not enough to "block" it. You need the *maximum* dimension of any hole to be less than the dimension you're talking about. As Davidenko said, try wrapping it in foil. – Scott Whitlock Feb 07 '16 at 15:40
  • 2
    You did it wrong; to block calls to a phone in the microwave, you just have to run it for a minute or two... – PlasmaHH Feb 08 '16 at 11:11
  • I put my phone in the fridge recording audio. It didn't muffle it very well. You could still hear what was said pretty clearly. – Nateowami Dec 22 '19 at 00:50
38

I suspect that the passage is intended to say that they took the battery out of their phone, and then put both the battery and the phone in the fridge.

Assuming that's right, most likely there are two threats this is defending against:

  1. Taking the battery out of the phone ensures that the phone is powered off. This defends against a malicious application or malicious code in the phone's firmware. (The concern is that someone might have attacked the software running on the phone and then installed malicious software or a malicious application that runs in the background and uses the microphone to record conversations. Taking the battery out of the phone powers off the phone's processor and prevents any such malicious code from running.)

  2. Putting the items in the fridge provides soundproofing. This defends against a bug that was surreptitiously added to the phone. (The concern here is that an attacker might have, at some point in the past, planted a bug inside their phone. Such a bug might have its own battery and its own circuitry and its own microphone, and be recording their conversations. Taking the battery out of the phone will not stop such a bug. However, putting the components into the fridge will provide sound isolation, because the fridge is relatively soundproofed and also because the fan in the fridge provides a bit of additional noise.)

In other words, the first is about malicious software; the second is about malicious hardware. If you were only concerned about malicious software, it would be enough to take the battery out of the phone without putting it into the fridge -- but putting both of them into the fridge covers both bases. In their setting, this kind of paranoia makes sense.

Note that it wouldn't be enough to just put the battery into the fridge, but not the phone. The problem with that is that it wouldn't stop a bug that was surreptitiously planted inside their phone. That's why I suspect the quote meant to say that they took the battery out of their phone and then put both the battery and the phone into their fridge. As it stands, the wording of the quote is a bit ambiguous, so I realize I'm making a particular interpretation of the quote -- but given the two kinds of threats, I think my interpretation makes sense.

D.W.
  • 98,420
  • 30
  • 267
  • 572
  • 2
    fans do not make _white_ noise. but it's still might be more that enough to bury other sounds, of course. – Display Name Feb 06 '16 at 09:50
  • I think the worry on part 2 is not so much electronics being tampered with through home invasions but rather in transit as they were shipped when bought; this practice by the NSA has been documented (see e.g. [here](https://www.youtube.com/watch?v=dy3-QZLTpbQ)) from the Snowden cache, so he'd have been aware of it, and at least it's a powerful competing method to the home invasion. – E.P. Feb 06 '16 at 15:04
5

Because they thought the refrigerator would act as a Faraday cage. Completely powering off their phones and placing them in a thick metal box gave them the peace of mind that those devices were not transmitting anything they were saying, either through the stock phone, or a bug placed by a government agency on the battery pack or the phone.

Stainless steel is quite effective at blocking cell tower signals, and many other frequencies used to transmit data across distances. Heather Murphy writes:

It is the materials that make up refrigerator walls that could potentially turn them into anti-eavesdropping devices...Refrigerators made from metal with thick insulation could potentially [block noise and cell transmissions].

Source: http://thelede.blogs.nytimes.com/2013/06/25/why-snowdens-visitors-put-their-phones-in-the-fridge/?smid=fb-share&_r=2

On a less serious note: Placing your battery in the fridge helps it retain a charge better because it reduces the chemical reactions that cause passive drain. Could they have been environmentally minded? :-)

Ohnana
  • 4,737
  • 2
  • 23
  • 39
  • 2
    Most refrigerators are plastic and not metal. Only a few made would block any signal these days. – GdD Feb 05 '16 at 15:06
  • I think the [referenced NYTimes article](http://thelede.blogs.nytimes.com/2013/06/25/why-snowdens-visitors-put-their-phones-in-the-fridge/?smid=fb-share&_r=1) is a better link. You may want to add a quote from that to your answer so it gets more attention. – Neil Smithline Feb 05 '16 at 16:47
  • What about the door? Are fridge doors metal on metal against the rest of the fridge? – user1886419 Feb 05 '16 at 22:04
  • 2
    Blocking the radio signals with a Faraday cage doesn't seem that useful, anyway. You'd think any sanely designed listening device, if it couldn't connect to its remote server to transmit its data, would simply store it and transmit later. So assuming you are eventually going to take the device out of the Faraday cage, that in itself doesn't gain you anything except a little bit of time. – Nate Eldredge Feb 06 '16 at 16:47
  • A faraday cage is only as good as the longest dimension of any hole penetrating it. In this case, the door rubbers (rubber/plastic is as good as air there!) form a very long hole, significantly longer than what would be needed (a fraction of the wavelength of the signal you want to stop escaping). – rackandboneman Feb 06 '16 at 17:38
3

Its not just malware. It has been claimed that mobile telephones are subject to an attack in which they can be remotely activated from the cell tower to relay audio back to the tower but does not ring or change the appearance of the phone.

Reference: https://web.archive.org/web/20140112133850/https://www.schneier.com/blog/archives/2006/12/remotely_eavesd_1.html

stiabhan
  • 286
  • 1
  • 3
2

Their concern was that their phones may have been infected with malware which would record sound and/or video of their conversations. Fridges are insulated and have ambient noise from the machinery running, so would effectively block sound from conversations being recorded.

GdD
  • 17,291
  • 2
  • 41
  • 63
  • 2
    But the phones were still outside the fridge, it was just the batteries that were put in the fridge. Allegedly – RoraΖ Feb 05 '16 at 14:58
  • 7
    @RoraZ from that quote there, it's ambiguous whether "put them" refers to the batteries or the cell phones. It could mean the batteries, the cell phones, or the pile of batteries and (disconnected) cell phones. I strongly suspect the cell phones ended up in the fridge. – gowenfawr Feb 05 '16 at 14:59
  • 2
    They put both the phones and the batteries in the fridge, not the batteries alone. – GdD Feb 05 '16 at 15:00
1

I can't think of anything security-related with using fridge as battery storage, however, I do this myself. The reason for this is that Li-ion batteries live longer when they are kept reasonably cold:

Table 3: Estimated recoverable capacity when storing Li-ion for one year at various temperatures
Temperature    40% charge    100% charge
  0°C            98%           94%
  25°C           96%           80%
  40°C           85%           65%
  60°C           75%           60% (after 3 months)

Of course, this only makes sense if the battery is unused for a long period of time (a month or more), storing the battery in the fridge overnight only to use it again in the morning will do more harm than good due to moisture.

Dmitry Grigoryev
  • 10,072
  • 1
  • 26
  • 56