3 ms·
In this case 2FA is useful if someone sniffs your password (key logger) and uses it later to try and fail to log in without your presence. Many wireless keyboar
by orangepurple 4y ago
In this case 2FA is useful if someone sniffs your password (key logger) and uses it later to try and fail to log in without your presence. Many wireless keyboards don't use encrypted comms. Keyboards can be bugged easily. There is tech to observe to thermals of keys after they are pressed from a distance. And listen to key strokes. Or capture wirelessly transmitted keystrokes with a parabolic dish pointed at you from across the street if you are far away and an SDR or ASIC. Or a compact omni antenna in a backpack sitting next to you if you are in a public area. The possibilities are endless!
- qwezxcrty 4y agoI see, maybe it serves as kind of defense in depth. I'll be surprised about most Bluetooth keyboards don't use encryption. And I feel like it's too panorid for me to worry about someone probing to your keyboard with an USRP or a HT-301.
- orangepurple 4y agoCVE-2019-13054 CVE-2019-13055 CVE-2018-8117 CVE-2010-1184
- pabs3 4y agoThese are all CVEs of security issues in the proprietary firmware of wireless input devices, that lead to either eavesdropping or input injection or both.