New Method of Spying on Your Computer

BasketCase

Username sez it all
Joined
Aug 7, 2004
Messages
13,024
Location
Closer than you'd like
The New Method

BERKELEY, California (AP) -- If spyware and key-logging software weren't a big enough threat to privacy, researchers have figured out a way to eavesdrop on your computer simply by listening to the clicks and clacks of the keyboard.

Those seemingly random noises, when processed by a computer, were translated with up to 96 percent accuracy, according to researchers at the University of California, Berkeley.

"It's a form of acoustical spying that should raise red flags among computer security and privacy experts," said Doug Tygar, a Berkeley computer science professor and the study's principal investigator.

Researchers used several 10-minute audio recordings of people typing away at their keyboards. They fed the recordings into a computer that used an algorithm to detect subtle differences in the sound as each letter is struck.

On the first run, the computer had an accuracy of about 60 percent for characters and 20 percent for words, said Li Zhuang, a Berkeley graduate student and lead author of the study. After spelling and grammar checks were deployed, the accuracy for individual letters jumped to 70 percent and words to 50 percent.

The software learned to improve as researchers repeatedly fed back the same recordings, using results of spelling and grammar checks as a gauge on correctness. In the end, it could accurately detect 96 percent of characters and 88 percent of words.

"If we were able to figure this out, it's likely that people with less honorable intentions can -- and have -- as well," Tygar said.

Researchers said there is some limitation to their technique. For one, their work did not take into account the use of a computer mouse or the "shift," "control," "backspace" or "caps lock" keys. They did, however, describe approaches for taking those into account.

The use of a computer mouse is another challenge, the researchers said.

The Berkeley research builds on the findings of an International Business Machines Corp. study in which 80 percent of text was recovered from the sound of keyboard clicks.

The IBM team, however, relied on controlled conditions such as using the same keyboard and training the software with known text and corresponding sound samples.

Bruce Schneier, chief technology officer of Counterpane Internet Security Inc., called the study "a great piece of research." He said audio eavesdropping is just one of many possible techniques to spy on PC users.

"If the bad guys can get access to your physical space, they can eavesdrop on your stuff," he said. "They can install a camera or a keyboard logger on the wire. They can install a microphone."

The Berkeley researchers built their system using off-the-shelf equipment.

"We didn't need high-quality audio to accomplish this," said Feng Zhou, another Berkley graduate student and study author. "We just used a $10 microphone that can be easily purchased in almost any computer supply store."

The Berkeley researchers, part of the Team for Research in Ubiquitous Secure Technology, will present their results November 10 at a computer and communications security conference in Alexandria, Virginia.

Yikes. Be CAREFUL typing in those passwords, folks..... :eek:
 
Computing world is never safe. Don't leave too much personal information in your computer or you risk getting your bank account empty.
 
*readys the tin foil hat in preperation* THEY WILL COME FOR YOU TOO!!!!!!!!!,


*quietly enters his password to bank accounts and empties it in cash*
 
I think I'll worry more about...

The PATRIOT Act
National ID
The death of the 6th Amendment
and
Having former KGB Officials working for the Department of Homeland Security

a hell of a lot more than this.
 
You can pick up the elctrical emenations from the computers/keyboards as well. About 15 yrs ago we had our headquarters building examined as part of a regular test (we knew some of this stuff even back then ;)). Talking to the testers afterward, they said they could pick up the emenations from our building very well. Too well. There was such a flood coming from our building that they couldn't decipher any single stream. :lol:
 
Back
Top Bottom