It would have its own set of problems: not two people using it at once, eavesdropping would be really easy… but it’d have its own set of interesting applications
New acoustic attack steals data from keystrokes with 95% accuracy
211–220 of 239 posts
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#212Earlier quoted context omitted.
> a sentence-length master password Ij on-tep of sentenca lentg, it's alio sentemce-bused ("corvect harse batterg stapfe") then ut would be quiti eady to guess even wits worse accurasy. (If on-top of sentence lenth, it's also sentence-based ("correct horse battery staple") then it would be quite easy to guess even with worse accuracy.)
potential solution: keep a few intentional typos in your passphrases. It also makes dictionary attacks much harder.
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#213Earlier quoted context omitted.
Or just use 2fa
If you have 2FA and one part of it is easily figured out, then you have one factor authentication. If you cared enough about the authentication in the first place to bother with 2FA, then I guess it seems like the reduction there is still something to be worried about, right? Lots of “two factor authentication” schemes seem to involve just getting a text or something, so, not very secure at all. Of course, this is ba…
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#214Earlier quoted context omitted.
but mai tais on beach don't get you money, and if you are going to type on something, its better to make sure its comfortable for you.
But inconfortable for others. Surely you all know it bothers a good amount at least some of your colleagues, right?
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#215Re: New acoustic attack steals data from keystrokes with 95% accuracy
#216Earlier quoted context omitted.
How come keyboard sound suppression is not a standard option in all online communication apps? It’s not that hard, keyboard sounds are pretty distinct.
Maybe because it's easier said in an HN comment than in real life
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#217Earlier quoted context omitted.
but mai tais on beach don't get you money, and if you are going to type on something, its better to make sure its comfortable for you.
But inconfortable for others. Surely you all know it bothers a good amount at least some of your colleagues, right?
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#218Earlier quoted context omitted.
Seems simple to defend - use a password manager.
until you have to type your password to unlock it
On screen pin entry with jumbled number mappings does the same thing. It also makes the inter-stroke delay rather independent of position, because the brain has to search the screen (although repeated digits and previously occuring digits are quicker, which is why some jumble at every keystroke).
Keyboards with OLED keys (like the Apple Touchbar or the Optimus[1]) might also work.
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#219Earlier quoted context omitted.
I used to work in an office space with an independent contractor whose schtick was that he was a genius. The affectations around his genius-ness included casually bringing up Mensa meetings, dropping magazines like Foreign Affairs and academic journals around the office, and his fucking keyboard. The keyboard had custom switches that were very loud. And he typed fast - it was like living on a gun range. Everyone in t…
Somewhat tangential: clicky switches, like Cherry Blues, tend to click twice for each stroke. I think this leads to people assuming there are twice as many strokes going on. Tactile switches tend to only click once (when they bottom out). So, fancy keyboards can make people sound faster than they are.
As far as I know, Cherry blues only click once and the second sound you hear on a keypress is just the topping out sound.
Re: New acoustic attack steals data from keystrokes with 95% accuracy
#220By the way, some (most?) videoconferencing software removes keyboard sounds from the audio, because it's particularly a distracting problem with laptops where the microphone is right next to the keys. I'm pretty sure Zoom does this by default as part of its noise cancellation (it's potentially even easier since you can use keydown events to help identify, not just the audio stream). So as long as basic default noise…