Tuesday 21 October 2008

Keystroke eavesdropping

And you thought you were pretty clever; typing in your password quickly & making sure no one was watching. Well now they don't have to.
Remember the days when individual keys on ATMs emitted a unique sound when pressed, until someone realised how easy it was to figure out people's passwords... It took a while, but eventually each key sounded the same note as all the others on the keypad.
What has this got to do with your keyboard and password? Well if you've ever wondered how a keyboard works on a computer, you will no doubt have wondered how long it would be until someone could guess your password by standing next to you and recording those little electronic impulses sent by each keystroke.
Four guys from the Security and Cryptology Laboratory in Switzerland have figured out how to do it remotely; by measuring the electromagnetic waves each keystroke creates.
They found four different ways to fully or partially recover keystrokes from 11 different wired keyboards - but before you throw a "but" in my direction, read the article. You'll see that the keyboards were a range of models from different years and even a laptop keyboard was tested (Check out the sample videos).
So what does this mean?
A hell of a lot for information security in the future. It's not like every single PC-user out there has super-secret information, but there are many companies out there that are going to have consider methods to guard against this.
But how exactly do you counter this? While a couple of answers spring to mind, they're all methods that can be worked around...

No comments: