this post was submitted on 02 Dec 2023
439 points (95.6% liked)

Technology

59421 readers
5045 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

Researchers in the UK claim to have translated the sound of laptop keystrokes into their corresponding letters with 95 percent accuracy in some cases.

That 95 percent figure was achieved with nothing but a nearby iPhone. Remote methods are just as dangerous: over Zoom, the accuracy of recorded keystrokes only dropped to 93 percent, while Skype calls were still 91.7 percent accurate.

In other words, this is a side channel attack with considerable accuracy, minimal technical requirements, and a ubiquitous data exfiltration point: Microphones, which are everywhere from our laptops, to our wrists, to the very rooms we work in.

(page 2) 50 comments
sorted by: hot top controversial new old
[–] [email protected] 9 points 11 months ago* (last edited 11 months ago)

Is it ignorance, indemnity, or conspiracy that this News Media Corporation didn't give the primary mitigation?

A white noise generator.

[–] [email protected] 8 points 11 months ago (4 children)

Isn't boffin a derogatory term like "nerd"?

What a dogshit headline.

[–] [email protected] 6 points 11 months ago (2 children)

It can be. Being a boffin, I'm not offended. Up to the individual if they choose to be offended.

load more comments (2 replies)
[–] [email protected] 6 points 11 months ago

It’s The Register - think the Financial Times for IT but in the style of The Sun/any other British tabloid. They do it for the lulz, if you will - don’t get too hung up on the headlines as the content is top quality.

load more comments (2 replies)
[–] [email protected] 7 points 11 months ago

Might have to spend some time getting Easy Effects/Noise Torch set up on my systems again just to reduce the vectors again.

There is a good comment on this post on physical mitigation that seems helpful as well: https://www.reddit.com/r/Fedora/comments/uerp9z/comment/i6p0jqa/?utm_source=share&utm_medium=mweb3x&utm_name=mweb3xcss&utm_term=1&utm_content=share_button

[–] [email protected] 5 points 11 months ago (2 children)

This is old news. This article was published on 7 Aug 2023.

load more comments (2 replies)
[–] [email protected] 5 points 11 months ago (4 children)

Another advantage to the split keyboard

load more comments (4 replies)
[–] [email protected] 3 points 11 months ago

This is the best summary I could come up with:


In other words, this is a side channel attack with considerable accuracy, minimal technical requirements, and a ubiquitous data exfiltration point: Microphones, which are everywhere from our laptops, to our wrists, to the very rooms we work in.

To make matters worse, the trio said in their paper that they've achieved what they claim is an accuracy record for acoustic side-channel attacks (ASCA) without relying on a language model.

Luckily in this case it's not power usage, CPU frequencies, blinking lights or RAM buses leaking data unavoidably, but a good old-fashioned problem occurring between the computer and chair that can actually be mitigated somewhat easily.

The researchers note that skilled users able to rely on touch typing are harder to detect accurately, with single-key recognition dropping from 64 to 40 percent at the higher speeds enabled by the technique.

Working among the clacking of phantom keyboards would surely annoy everyone, which is why the researchers suggest only adding the sounds to Skype and Zoom transmissions after they've been recording instead of subjecting employees to real-time noisemakers.

Followup research is now going on into using new sources for recordings, like smart speakers, better keystroke isolation techniques and the addition of a language model to make their acoustic snooping even more effective.


The original article contains 656 words, the summary contains 210 words. Saved 68%. I'm a bot and I'm open source!

load more comments
view more: ‹ prev next ›