zlacker

[return to "New acoustic attack steals data from keystrokes with 95% accuracy"]
1. lispis+Pq[view] [source] 2023-08-05 19:14:25
>>mikece+(OP)
So they generated training data from one laptop and microphone then generated test data with the exact same laptop and microphone in the same setup, possibly one person pressing the keys too. For the Zoom model they trained a new model with data gathered from Zoom. They call it a practical side channel attack but they didnt do anything to see if this approach could generalize at all
◧◩
2. OtherS+zA[view] [source] 2023-08-05 20:24:31
>>lispis+Pq
I believe that is the generalisable version of the attack. You're not looking to learn the sound of arbitrary keyboards with this attack, rather you're looking to learn the sound of specific targets.

For example, a Twitch streamer enters responses into their stream-chat with a live mic. Later, the streamer enters their Twitch password. Someone employing this technique could reasonably be able to learn the audio from the first scenario, and apply the findings in the second scenario.

◧◩◪
3. TechBr+CL[view] [source] 2023-08-05 21:56:33
>>OtherS+zA
Finally, a real security weakness to cite when making fun of people for their mechanical keyboard. Time to start recording the audio of Zoom calls with some particularly loud typers...
◧◩◪◨
4. fatfin+mM[view] [source] 2023-08-05 22:04:17
>>TechBr+CL
Not according to the article.. Microphones are sensitive enough to mount the attack on quieter keyboards.
◧◩◪◨⬒
5. therei+ZM[view] [source] 2023-08-05 22:08:21
>>fatfin+mM
What we clearly need are louder keyboards - which overload the mic so as to render keystrokes indistinguishable.
◧◩◪◨⬒⬓
6. tiltow+971[view] [source] 2023-08-06 01:17:58
>>therei+ZM
Some old IBM keyboards (beamsprings, the predecessor to the Model F, which preceded the Model M) had solenoids inside to make them louder and sound more like typewriters. I wonder if such a setup would defeat this attack, or if it would still be possible to discern the actual keypress alongside the solenoid.
◧◩◪◨⬒⬓⬔
7. doix+Og1[view] [source] 2023-08-06 03:02:49
>>tiltow+971
I'm guessing it would be easier (assuming you trained it on that keyboard), because each solenoid would be fairly unique due to manufacturing tolerances. Just my gut feeling, I have no data to back it up.
◧◩◪◨⬒⬓⬔⧯
8. Gh0stR+8y1[view] [source] 2023-08-06 07:16:54
>>doix+Og1
I know nothing about this keyboard, but I'd assume it just has one solenoid because the expense and space of 100+ solenoids is impractical if all you're using them for is simulating the vibration/sound of a typewriter.
[go to top]