Archive for the ‘Cryptography’ Category.

We know what you typed last summer

keyboard

Do you use something akin to the above? Isn’t the lack of wires so convenient? I thought so, at least until I read this report from remote-exploit.org, which highlights the pathetic ‘encryption’ which these systems usually employ.

Apart from some early models, which used infrared ports, the vast majority of today’s wireless keyboards runs over RF signals at various frequencies, (as well as bluetooth in some cases). It’s fast, it’s cheap, and it’s reasonably reliable, but the problem is that, like any wireless signal, it’s inherently insecure. Apparently, most wireless keyboards use very basic 8-bit encryption, and (surprise surprise) on Microsoft models, theoretically there are only 256 possible keys.

So, when you get back from PC World with your keyboard with its impressive 20-foot range, beware. Really, all that stands between your keystrokes and an attacker recording them is some sort of packet sniffer, a bit of brute force, and patience.