New acoustic attack steals data from keystrokes with 95% accuracy
bleepingcomputer.com
New acoustic attack steals data from keystrokes with 95% accuracy
1–10 of 239 posts
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#2But what passwords are you typing while on zoom and why aren't you on mute?
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#3Very interesting that this is even possible. But seems somewhat dangerous, making an audio recording is very easy.
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#4But what passwords are you typing while on zoom and why aren't you on mute?
I can imagine many, many situations where you might do this. But maybe another thing to be worried about are scammees being able to know the Password of people they are calling.
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#5But what passwords are you typing while on zoom and why aren't you on mute?
When calling my cellular/internet/medical/financial provider, it might be interesting to "see" what they are typing. (Or if they're randomly surfing the internet.)
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#6So they generated training data from one laptop and microphone then generated test data with the exact same laptop and microphone in the same setup, possibly one person pressing the keys too. For the Zoom model they trained a new model with data gathered from Zoom. They call it a practical side channel attack but they didnt do anything to see if this approach could generalize at all
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#7I don't use the qwerty layout, I use colemak. Likely this mitigates this for myself.
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#8I don't use the qwerty layout, I use colemak. Likely this mitigates this for myself.
I'm pretty confident that statistical analysis would give away your layout (assuming there's enough data), I wouldn't be so sure.
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#9But what passwords are you typing while on zoom and why aren't you on mute?
When calling my cellular/internet/medical/financial provider, it might be interesting to "see" what they are typing. (Or if they're randomly surfing the internet.)
Call support, get the URLs and logins for all their internal apps. Ouch!
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#10I don't use the qwerty layout, I use colemak. Likely this mitigates this for myself.
This is just security through obscurity. For real security, you need a cryptographically rolling keyboard layout.