Wired Keyboards Not Safe for Sensitive Data

By Charlotte Cardingham
Published on 21 Oct 2008
AddThis Social Bookmark Button

Research reveals that criminals could detect the exact information you type into computer keyboard from up to 20 meters away.

New research has revealed a new threat to our personal data and online security – the wired computer keyboard.

Researchers from the Security and Cryptography Laboratory in Lausanne, Switzerland, have discovered that by using a simple radio antenna it is possible to remotely identify the key strokes entered into a wired computer keyboard from a distance of up to 20 meters away.

Martin Vuagnoux and Sylvain Pasini, doctoral students at EPFL, are the brains behind the research. They discovered that by analysing the electromagnetic waves produced by individual keystrokes it was possible to interpret exactly what was being typed in real time.

The duo tested 4 different attacks on 11 different makes and models of keyboard and found each one to be susceptible to at least one assault, with electromagnetic detection possible even through walls.

As a result, the team have now condemned the suitability of many of the wired keyboards currently available on the market for use in transmitting sensitive data, blaming the poor quality of the components used for their evident vulnerability.

"We conclude that wired computer keyboards sold in the stores generate compromising emanations (mainly because of the cost pressures in the design).

"Hence they are not safe to transmit sensitive information. No doubt that our attacks can be significantly improved, since we used relatively inexpensive equipments."

It is doubtless that this research has important implications for the security of any information we key in to our computers when we make payments or access account information online. However, more worryingly still, it also has a wider reach as it suggests that criminals could potentially use such electromagnetic tracking techniques to remotely steal sensitive information as it is keyed into ATMs, Chip and PIN machines and the like.

Full details of the study are not yet available; however Vuagnoux and Pasini have released a statement accompanied by sample videos of their experiment. It is expected that a comprehensive report will soon be published in a peer review journal.

Source

Money Saving Newsletter

Already registered? Login Here

Email:

We will NOT pass your details on to any third party.

See some of the recent tips you could have benefited from.

Your privacy:

Read our privacy policy.
We are registered with the Data Protection Act (1998): No. Z6245956
details
We are regulated by the Financial Services Authority: No. 415689
details



Add Your Comment

Name: 
Comment: 
You have 1000 characters left.

Comments (14)

Any opinions expressed below are solely those held by individual users and are not in any way endorsed by, or representative of those held by Money.co.uk. We accept no responsibility or liability for the accuracy or content of any material submitted and maintain the right to publish, remove or edit it as we see fit.
GMACD
21st Oct 2008 22:47
The heading should read "Research reveals that government criminals could detect the exact information you type into computer keyboard from up to 20,000 kilometres away".
asdf
21st Oct 2008 23:33
don't they mean wireless?
nottings
21st Oct 2008 23:34
This is nothing new... the NSA has been doing this since the 80's
MaXiMuS
22nd Oct 2008 01:09
but obviously wireless keyboards pose a bigger threat because they are DESIGNED to transmit, esp if all of them are follwing the same standards
aaron
22nd Oct 2008 01:23
similar things can be done to view exactly what is appearing on your screen at any time.
inotme
22nd Oct 2008 01:27
So what? Computers are now even less secure. I don't think we should panic because there is now one more security vulnerability. Better education is the key.
asdf
22nd Oct 2008 14:58
i doubt this could be done outside a lab... most areas are flooded with rf and keyboard signals would be lost or overpowered... then there's the problem of distinguishing keyboard A and keyboard B
Stuart
22nd Oct 2008 21:40
Thankfully I mistype stuff all the time.
Anon
24th Oct 2008 10:33
Okay so far 8 comments and nobody has gotten the point. they exploited WIRED keyboards. Not WIRELESS. they article clearly states that they pulled information through electromagnetic fields, not RF or blue tooth. Also, to my knowledge, there are no known ATMS that would use a wireles pinpad. Wireless connection, maybe, but not a wireless pin pad.
Mark
2nd Nov 2008 21:11
That's not new. It has been possible to pick up the radiation from PCs from a van parked outside a building with a few thousand dollars worth of equipment for at least 15 years if not longer.
maddog
3rd Nov 2008 15:44
I served in the Australian signals Corps in the early 90's, one unit I served in (127 sig sqn) had a 'Tempest' troop, which had an Isuzu van which used to do just this. They would travel around Defence installations and other government departments and see what they could pick up. If they got stuff they would then rectify the situation. Transient Electro-Magnetic Pulse Surveillance Technology?
Offiniavy
8th Nov 2008 11:48
Heh. Nice. Sometimes I can't help but show you my sensitive thesis A JOKE! ) What kind of shoes do snakes wear for swimming? Water mocassins.
ooopinionsss
4th Dec 2008 05:08
How you think when the economic crisis will end? I wish to make statistics of independent opinions!
ED
13th Jan 2009 04:38
Intelligence communities had protected against this threat by the early 1970,s.

Latest Protecting Your Identity Articles & News

Protecting Your Identity Articles

What is Phishing & How to Avoid Phishing Scams
What is Phishing & How to Avoid Phishing Scams

A simple, plain English guide to banking safely online.

Blackberry Mobile Phone
Man Discovers A-List Celebrity Phone Numbers On £16 Blackberry Bought On eBay

An eBay buyer was surprised to find a list of phone numbers on his newly purchased blackberry, giving him access to a string of A-list celebrities.

Public Conned by Fake Parking Tickets in First Real World 'Hacker' Scam

Drivers in a US city were duped into downloading malware onto their computer by fake parking tickets.

Infectious Virus Attacks Facebook
Infectious Virus Attacks Facebook

The notorious Koobface worm is back with a vengance.

OFT Warns on Festive Scams
OFT Warns on Festive Scams

Fake lotteries, cash prizes and psychics are the subject of a new financial warning from the Office of Fair Trading (OFT).

Identities Sold to Fraudsters for Just £80
Identities Sold to Fraudsters for Just £80

A new investigation has revealed that complete identities are being sold for just £80 online.

Global Spam Falls by 70% as US Hosting Firm Shut Down
Global Spam Falls by 70% as US Hosting Firm Shut Down

ISPs have pulled the plug on a hosting firm responsible for running spam-producing botnets.

Nigerian Fraudsters Attack Facebook
Nigerian Fraudsters Attack Facebook

Social networking sites are the latest online resource to fall victim to cyber-scams.

Popular Related Articles

Public Conned by Fake Parking Tickets in First Real World 'Hacker' ScamDrivers in a US city were duped into downloading malware onto their computer by fake parking tickets.

Latest Related Headlines

Citizens Advice Bureau Asks For More Volunteers
Citizens Advice Bureau Asks For More Volunteers The recession has resulted in increased demand for the charity's services.
RSS FeedLatest Guides
Free Services Money Saving Newsletter
The best money saving deals, freebies, rate alerts and advice emailed to you every week.
Enter your email:
Find Companies Money Guides RSS Feeds - Subscribe!
The "advice" given in our money saving tips is for information purposes only and should not be construed as "financial advice".
money.co.uk recommends you seek professional advice before proceeding with any investment or financial decision.
Site Map | Privacy Policy | About Us | Contact Us
money.co.uk is a trading name of Dot Zinc Limited, who are authorised and regulated by the Financial Services Authority. FSA Registration Number: 415689.
Copyright © www.money.co.uk / Dot Zinc Limited 2002-2009. All rights reserved.
Home | Login | Sign Up