zlacker

[return to "New acoustic attack steals data from keystrokes with 95% accuracy"]
1. lispis+Pq[view] [source] 2023-08-05 19:14:25
>>mikece+(OP)
So they generated training data from one laptop and microphone then generated test data with the exact same laptop and microphone in the same setup, possibly one person pressing the keys too. For the Zoom model they trained a new model with data gathered from Zoom. They call it a practical side channel attack but they didnt do anything to see if this approach could generalize at all
◧◩
2. OtherS+zA[view] [source] 2023-08-05 20:24:31
>>lispis+Pq
I believe that is the generalisable version of the attack. You're not looking to learn the sound of arbitrary keyboards with this attack, rather you're looking to learn the sound of specific targets.

For example, a Twitch streamer enters responses into their stream-chat with a live mic. Later, the streamer enters their Twitch password. Someone employing this technique could reasonably be able to learn the audio from the first scenario, and apply the findings in the second scenario.

◧◩◪
3. yowzad+FB[view] [source] 2023-08-05 20:32:53
>>OtherS+zA
I guess more reason to just use a password manager to autofill your password?
◧◩◪◨
4. jgtros+jK[view] [source] 2023-08-05 21:45:06
>>yowzad+FB
Only if it doesn't only rely on a master password
◧◩◪◨⬒
5. kristo+bm1[view] [source] 2023-08-06 04:12:13
>>jgtros+jK
[insert yubikey plug]

I don't use one but I know people who swear by them.

Also this is an extremely obvious result. Typing is obviously a form of "penmanship", it was well known that telegraph operators could identify each other by how they tapped out Morse code in the 1800s.

People have been able to do this based upon key stroke latency and even identify people based on habitual mouse patterns for decades.

Audio recordings work as yet another reliable proxy? Shocked!!

I am amazed that people can do such obvious things and get published, have articles written on them... I need to get in on that, sounds easy

I can make a web demo. You turn on the microphone type a couple things into a box on the web browser.

Then you go to a different window and continue typing and then the model predicts What you are typing. As long as it's proper grammar you can get to effectively 100% accuracy. It'll appear to be spooky magic.

I just might take the time.

◧◩◪◨⬒⬓
6. mercer+Go1[view] [source] 2023-08-06 04:52:16
>>kristo+bm1
You sound confident enough that'd I'd like to see you show that off :P.
[go to top]