Tuesday, October 21, 2008

"Radio Waves Are Up, Dude. Toss Your Board."

Computer keyboards are often used to transmit sensitive information such as username/password (e.g. to log into computers, to do e-banking money transfer, etc.). A vulnerability on these devices will definitely kill the security of any computer or ATM.

Wired keyboards emit electromagnetic waves, because they contain electronic components. These electromagnetic radiation could reveal sensitive information such as keystrokes...

We conclude that wired computer keyboards sold in the stores generate compromising emanations
(mainly because of the cost pressures in the design). Hence they are not safe to transmit sensitive information. No doubt that our attacks can be significantly improved, since we used relatively inexpensive equipment.


More information on these attacks will be published soon, the paper is currently in a peer review process for a conference. (more with two videos)