- How to stream ROH Wrestling’s Honor For All Today 7:30 AM
- How to stream Steelers vs. Titans in NFL preseason action Today 7:00 AM
- How to stream ‘Good Eats: The Return’ online Today 7:00 AM
- How to stream ‘Power’ season 6 Today 6:00 AM
- Your best bets for finding discounted and refurbished Airpods Today 6:00 AM
- How to stream Barcelona vs. Real Betis Saturday 11:31 PM
- How to stream Tottenham Hotspur vs. Newcastle Saturday 11:21 PM
- All of the ‘Avengers: Endgame’ Easter eggs discovered by fans Saturday 6:52 PM
- Every big announcement made at D23 about Disney+ Saturday 6:33 PM
- The best haunted house movies to watch online in 2019 Saturday 4:13 PM
- Andy Ngo seen laughing as Patriot Prayer members plan an attack in newly emerged video Saturday 3:59 PM
- How to stream Manchester City vs. Bournemouth Saturday 3:25 PM
- Catholic priest allegedly spent church money on Grindr hookups Saturday 3:04 PM
- Nicolás Maduro’s English Twitter account was suspended with no public explanation Saturday 2:06 PM
- Man claims ex-girlfriend killed his dog after he broke up with her Saturday 1:02 PM
Remember a few month ago when we were all laughing at Harvard scientists for putting a GIF inside a strand of DNA? Now that bridge between technology and the substance that makes up every living organism has taken a much darker turn.
Researchers at the University of Washington took control of a machine using a malicious strand of DNA in what is being considered the first “DNA-based exploit of a computer system.” Malicious software was encoded into short strands of DNA that scientists purchased online. When analyzed, the infected DNA corrupted gene-sequencing software, allowing researchers to take “full control” of the underlying system.
Researchers believe the remarkable feat could one day become practical for illegal hacking as DNA sequencing becomes more popular and powerful. They warn that criminals could use blood or saliva samples to gain access to places they know will sequence them, like university computers, police forensics labs, or genetics laboratories. This could potentially give hackers access to sensitive information and enough control to tamper with DNA evidence.
“There are a lot of interesting—or threatening may be a better word—applications of this coming in the future,” Peter Ney, a researcher on the project, told Wired.
The malware was encoded into DNA using a buffer overflow, a cybersecurity anomaly that occurs when a command overwhelms an allocated block of memory and overflows onto adjacent memory, causing the execution of malicious code. All the data the researchers used for their virus needed to fit in just 176 DNA code units—the bases A, T, G, and C—so the strands would stay intact.
The synthetic strand went after the buffer overflow scientists intentionally put inside FASTQ, a program used to sequence DNA. The result of their work is a hack that can break out of the FASTQ program and into other blocks of memory contained within a computer running the DNA sequencing.
“We know that if an adversary has control over the data a computer is processing, it can potentially take over that computer,” Tadayoshi Kohno, University of Washington computer science professor, told Wired. “That means when you’re looking at the security of computational biology systems, you’re not only thinking about the network connectivity and the USB drive and the user at the keyboard but also the information stored in the DNA they’re sequencing. It’s about considering a different class of threat.”
As terrifying as this may sound, there is very little risk of your computer being hacked by DNA anytime soon. The researchers admit they rigged the experiment in their favor, disabling critical computer security systems and inserting their own flaw to allow the buffer overflow.
“This is interesting research about potential long-term risks. We agree with the premise of the study that this does not pose an imminent threat and is not a typical cyber security capability,” Jason Callahan, the chief information security officer at gene-sequencing equipment manufacturer Illumina, told Wired.
The DNA hack will be shown at the Usenix Security Symposium in Vancouver later this month. You can find the full research paper on the University of Washington website.
Phillip Tracy is a former technology staff writer at the Daily Dot. He's an expert on smartphones, social media trends, and gadgets. He previously reported on IoT and telecom for RCR Wireless News and contributed to NewBay Media magazine. He now writes for Laptop magazine.