According to security researchers at Bastille, the so-called KeySniffer vulnerability affects wireless keyboards that use a less secure, radio-based communication protocol rather than a Bluetooth connection. The affected keyboards come from eight different hardware makers and use transceiver chips or non-Bluetooth chips. These chips are cheaper than Bluetooth chips, but they also don’t receive Bluetooth’s frequent security updates. That’s a problem.
After researcher Marc Newlin reverse engineered these keyboards’ physical layer packets, he saw that the information being transmitted was unencrypted. This means someone within a several hundred metre radius and a $40 to $50 radio dongle (which you can buy online) could secretly see everything you type, including passwords, credit card numbers and weird porn search terms.
Although KeySniffer isn’t the first wireless vulnerability ever discovered, it’s certainly one of the biggest. Previous vulnerabilities include weak encryption issues with a keyboard made specifically by Microsoft. These affected keyboards, many of them low-cost wireless keyboards, are in use in millions private homes, business and government facilities. Here’s how a similar vulnerability called KeySweeper works. It’s terrifying For the full article click here
from hacker samurai http://ift.tt/2aerqyz
via IFTTT
No comments:
Post a Comment