458
submitted 11 months ago by kpw@kbin.social to c/technology@lemmy.world

Researchers in the UK claim to have translated the sound of laptop keystrokes into their corresponding letters with 95 percent accuracy in some cases.

That 95 percent figure was achieved with nothing but a nearby iPhone. Remote methods are just as dangerous: over Zoom, the accuracy of recorded keystrokes only dropped to 93 percent, while Skype calls were still 91.7 percent accurate.

In other words, this is a side channel attack with considerable accuracy, minimal technical requirements, and a ubiquitous data exfiltration point: Microphones, which are everywhere from our laptops, to our wrists, to the very rooms we work in.

you are viewing a single comment's thread
view the rest of the comments
[-] Bipta@kbin.social 12 points 11 months ago
[-] netchami@sh.itjust.works 19 points 11 months ago

You can use fingerprint or U2F to unlock your password manager and copy the password. That way you don't have to type it in.

[-] RGB3x3@lemmy.world 6 points 11 months ago

That does nothing for keylogging through this method.

[-] fruitycoder@sh.itjust.works 7 points 11 months ago

It would have to be combined with a secure (no microphones) area during setup, but it seems like swapped biometric plus token would defeat this attack (password gathering). It would however not defeat generic data collection.

[-] Earthwormjim91@lemmy.world 4 points 11 months ago

It would eliminate someone being able to get your username or password via this method though. Because you never have to type them in.

With my MacBook I can use either touchid or my watch to automatically unlock it, so I don’t even have to type my password in to get into my laptop. And then I use touchid and Keychain for all my passwords so I never have to type those in either.

this post was submitted on 02 Dec 2023
458 points (100.0% liked)

Technology

59379 readers
2585 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS