4 ms·

Obvious attack target: Bluetooth keyboards for keylogging.

koolba 7y ago
Obvious solution: never use wireless input devices. Has the added benefit of never having to deal with charging batteries or charging.
- dangus 7y ago
  Well you can avoid all software vulnerabilities by not using computers at all, right? Maybe I should use an Ethernet cable on my iPhone instead of LTE, that should be convenient.
  - throwamay1241 7y ago
    As soon as people stop treating the physical layer as a security control, the better. Encrypt your damn comms.
- xnyan 7y ago
  Obvious solution, don't use anything that emits electromagnetic radiation: https://en.m.wikipedia.org/wiki/Van_Eck_phreaking https://en.m.wikipedia.org/wiki/Van_Eck_phreaking
  - wincy 7y ago
    Well, time to go back to typing everything on a typewriter.
    - vardump 7y ago
      Your data will leak regardless because of typewriter keystroke acoustics [0]. So you better have a soundproof room for that purpose. Keep any electronics out of the room that might have a microphone. Like phones, laptops, or running mechanical hard drives [1]. [0]: https://arxiv.org/abs/1609.09359 https://arxiv.org/abs/1609.09359 [1]: https://spqr.eecs.umich.edu/papers/Kwong-HDDphone-IEEE-SP-2019.pdf https://spqr.eecs.umich.edu/papers/Kwong-HDDphone-IEEE-SP-20...
      - loeg 7y ago
        https://www.youtube.com/watch?v=DJdT7vsJtxw https://www.youtube.com/watch?v=DJdT7vsJtxw
jwtorres 7y ago
Only keyboards that use BR/EDR are affected. BLE keyboards are unaffected.
- SwaraLink 7y ago
  Sadly, many BLE keyboards on the market today are still not using the LE Secure Connections feature during pairing. The LE legacy pairing algorithm does not use Elliptic Curve Diffie-Hellman Key Exchange, and is easily susceptible to having the encryption cracked via passive eavesdropping.
  - etqwzutewzu 7y ago
    Do you know one keyboard on the market today that has LE Secure Connections feature enabled?
    - SwaraLink 7y ago
      I don't know of any because I haven't tested too many, but LE Secure Connections has been around since the Bluetooth 4.2 spec, which was adopted in 2014. The feature is supported by most single-mode BLE chipsets / stacks that have been released since then. I'd be surprised if there were none that supported it, though I don't know for sure.
fortran77 7y ago
Wireless mice that use their own little receivers and not bluetooth are also very susceptible to monitoring. See: https://www.theverge.com/2019/7/14/20692471/logitech-mousejack-wireless-usb-receiver-vulnerable-hack-hijack https://www.theverge.com/2019/7/14/20692471/logitech-mouseja... I use a wired keyboard, but I also use a wireless mouse! I've been careful at DEFCON not to.
acd 7y ago
Never trusted wireless keyboards always uses cable connected devices. Although those could still be tapped by a usb sniffer but it’s more safe than wireless. The Bluetooth attack seems similar to car keyfob attacks. Block and replay. A directional antenna could do the Bluetooth attack from distance. Counter measures to key logging use one time passwords otp. A password strength also depends on password age.

Obvious solution: never use wireless input devices. Has the added benefit of never having to deal with charging batteries or charging.

dangus 7y ago
Well you can avoid all software vulnerabilities by not using computers at all, right? Maybe I should use an Ethernet cable on my iPhone instead of LTE, that should be convenient.
- throwamay1241 7y ago
  As soon as people stop treating the physical layer as a security control, the better. Encrypt your damn comms.
xnyan 7y ago
Obvious solution, don't use anything that emits electromagnetic radiation: https://en.m.wikipedia.org/wiki/Van_Eck_phreaking https://en.m.wikipedia.org/wiki/Van_Eck_phreaking
- wincy 7y ago
  Well, time to go back to typing everything on a typewriter.
  - vardump 7y ago
    Your data will leak regardless because of typewriter keystroke acoustics [0]. So you better have a soundproof room for that purpose. Keep any electronics out of the room that might have a microphone. Like phones, laptops, or running mechanical hard drives [1]. [0]: https://arxiv.org/abs/1609.09359 https://arxiv.org/abs/1609.09359 [1]: https://spqr.eecs.umich.edu/papers/Kwong-HDDphone-IEEE-SP-2019.pdf https://spqr.eecs.umich.edu/papers/Kwong-HDDphone-IEEE-SP-20...
    - loeg 7y ago
      https://www.youtube.com/watch?v=DJdT7vsJtxw https://www.youtube.com/watch?v=DJdT7vsJtxw

jwtorres 7y ago

Only keyboards that use BR/EDR are affected. BLE keyboards are unaffected.

SwaraLink 7y ago
Sadly, many BLE keyboards on the market today are still not using the LE Secure Connections feature during pairing. The LE legacy pairing algorithm does not use Elliptic Curve Diffie-Hellman Key Exchange, and is easily susceptible to having the encryption cracked via passive eavesdropping.
- etqwzutewzu 7y ago
  Do you know one keyboard on the market today that has LE Secure Connections feature enabled?
  - SwaraLink 7y ago
    I don't know of any because I haven't tested too many, but LE Secure Connections has been around since the Bluetooth 4.2 spec, which was adopted in 2014. The feature is supported by most single-mode BLE chipsets / stacks that have been released since then. I'd be surprised if there were none that supported it, though I don't know for sure.

fortran77 7y ago

Wireless mice that use their own little receivers and not bluetooth are also very susceptible to monitoring. See: https://www.theverge.com/2019/7/14/20692471/logitech-mousejack-wireless-usb-receiver-vulnerable-hack-hijack https://www.theverge.com/2019/7/14/20692471/logitech-mouseja... I use a wired keyboard, but I also use a wireless mouse! I've been careful at DEFCON not to.

acd 7y ago

Never trusted wireless keyboards always uses cable connected devices. Although those could still be tapped by a usb sniffer but it’s more safe than wireless. The Bluetooth attack seems similar to car keyfob attacks. Block and replay. A directional antenna could do the Bluetooth attack from distance. Counter measures to key logging use one time passwords otp. A password strength also depends on password age.