3 ms·
>5. Make sure nobody's filming your fingers when you type your password. Many moons ago I read the table of contents of Silence on the Wire.[0] One chapter tha
by unimpressive 15y ago
>5. Make sure nobody's filming your fingers when you type your password.
Many moons ago I read the table of contents of Silence on the Wire.[0] One chapter that particularly caught my eye was "I can hear you type.". (Which for some reason was stored in my memory as "I can hear your keystrokes." Which sounds more stalkerish IMO.) Just because of how creepy it sounded. Later I was talking to someone I knew over the phone when they stopped for a moment to enter a username and password for $WEBSITE.
All of a sudden an amusing side channel attack popped into my head:
"I wonder if it's possible to reproduce someones password by hearing their keystrokes?" I figured it would actually be a useful skill if someone were trained to recognize the sound of keystrokes from the most common keyboard phenotypes.
[0] http://nostarch.com/silence.htm http://nostarch.com/silence.htm (
I haven't actually read it so I don't know if that is or isn't in the book. All I know about it is the Table of Contents.)
- trentmb 15y agoWe're already there: "Three students at UC-Berkley used a 10 minute recording of a keyboard to recover 96% of the characters typed during the session." https://freedom-to-tinker.com/blog/felten/acoustic-snooping-typed-information/ https://freedom-to-tinker.com/blog/felten/acoustic-snooping-...
- chronomex 15y agoIt's been done already! http://www.berkeley.edu/news/media/releases/2005/09/14_key.shtml http://www.berkeley.edu/news/media/releases/2005/09/14_key.s...