Keyboard sound clicks while typing can be hacked just by recording them with cheap microphone...

frankgomez75

Platinum Member
Mar 23, 2004
2,215
1
81
Didn't see this posted.

Buy a cheap microphone, record a person typing and then run the recording back through a software program to decipher what they typed including PASSWORDS! Wow....

Some quotes:
The technique worked when music or cell phone ringing jangled in the background--and even on so-called quiet keyboards with off-the-shelf recording equipment.

"Passwords are a mechanism for authentication that really need to be rethought," he said. "This is not an esoteric attack. It requires some knowledge of computer science, but it can be done using many components that are freely available...We used $10 microphones."

Story Here
 

Viper GTS

Lifer
Oct 13, 1999
38,107
433
136
It's actually not that unfeasible.

Look at how long the recordings were, with that kind of sample you could tabulate each identical keystroke & compare it to distributions of characters in language.

My dad used to impress us when were kids by having us make up a letter substitution code & write him a letter. He would then break it.

A 10 minute recording would give a MUCH larger sample size, & with the aid of a PC the potential is even greater.

Viper GTS
 

Bootprint

Diamond Member
Jan 11, 2002
9,847
0
0
I just imagine the CIA or some other 3 letter goverment agency, saying "That's so '60s"
 

frankgomez75

Platinum Member
Mar 23, 2004
2,215
1
81
Originally posted by: Viper GTS
It's actually not that unfeasible.

Look at how long the recordings were, with that kind of sample you could tabulate each identical keystroke & compare it to distributions of characters in language.

My dad used to impress us when were kids by having us make up a letter substitution code & write him a letter. He would then break it.

A 10 minute recording would give a MUCH larger sample size, & with the aid of a PC the potential is even greater.

Viper GTS


Exactly.... combine this sample with specialized software and typing anything can give everything out like:

Passwords
Memos
Bank Accounts
Personal info

 

oogabooga

Diamond Member
Jan 14, 2003
7,806
3
81
Originally posted by: Bootprint
I just imagine the CIA or some other 3 letter goverment agency, saying "That's so '60s"

62 to be exact.

whoops, ignore this post

:p
 

mobobuff

Lifer
Apr 5, 2004
11,099
1
81
Originally posted by: Viper GTS
It's actually not that unfeasible.

Look at how long the recordings were, with that kind of sample you could tabulate each identical keystroke & compare it to distributions of characters in language.

My dad used to impress us when were kids by having us make up a letter substitution code & write him a letter. He would then break it.

A 10 minute recording would give a MUCH larger sample size, & with the aid of a PC the potential is even greater.

Viper GTS

Yeah but who takes 10 minutes to type a password? The ability for this program to correctly identify a password is slim, especially if that password isn't an actual word, and uses numbers. The program would need a primer, it would need to be knowledgable about the person typing, and that is very unlikely if the microphone is "planted".

Also figuring that not everyone types the same, and the sound made by a key would probably vary depending on with what finger it was hit and what direction it was hit from. I'm wondering if they used a group of people to make the samples and not just one person. I'm assuming the program also monitors the time in milliseconds between keystrokes to pick up patterns that way, but again many people type differently. I'm wondering how accurate the program would be if the person typing was using "Hunt-and-Peck". Also, if the microphone is indeed planted, it would've been much easier for the planter to install an on-wire keylogger, which is MUCH MUCH more accurate.