Explicit attacks on passive side channels of the light source in the BB84 decoy state protocol