Hacker News Reader

Hacker News

Comment by miohtama | Hacker News Reader

Full thread

miohtama

Obvious attack target: Bluetooth keyboards for keylogging.

View on HN

Obvious solution: never use wireless input devices.

Has the added benefit of never having to deal with charging batteries or charging.

Well you can avoid all software vulnerabilities by not using computers at all, right?

Maybe I should use an Ethernet cable on my iPhone instead of LTE, that should be convenient.

As soon as people stop treating the physical layer as a security control, the better.

Encrypt your damn comms.

Obvious solution, don't use anything that emits electromagnetic radiation: https://en.m.wikipedia.org/wiki/Van_Eck_phreaking

Well, time to go back to typing everything on a typewriter.

Your data will leak regardless because of typewriter keystroke acoustics [0]. So you better have a soundproof room for that purpose.

Keep any electronics out of the room that might have a microphone. Like phones, laptops, or running mechanical hard drives [1].

[0]: https://arxiv.org/abs/1609.09359

[1]: https://spqr.eecs.umich.edu/papers/Kwong-HDDphone-IEEE-SP-20...

https://www.youtube.com/watch?v=DJdT7vsJtxw

Never trusted wireless keyboards always uses cable connected devices. Although those could still be tapped by a usb sniffer but it’s more safe than wireless.

The Bluetooth attack seems similar to car keyfob attacks. Block and replay.

A directional antenna could do the Bluetooth attack from distance.

Counter measures to key logging use one time passwords otp. A password strength also depends on password age.

Wireless mice that use their own little receivers and not bluetooth are also very susceptible to monitoring.

See: https://www.theverge.com/2019/7/14/20692471/logitech-mouseja...

I use a wired keyboard, but I also use a wireless mouse! I've been careful at DEFCON not to.

Only keyboards that use BR/EDR are affected. BLE keyboards are unaffected.

Sadly, many BLE keyboards on the market today are still not using the LE Secure Connections feature during pairing. The LE legacy pairing algorithm does not use Elliptic Curve Diffie-Hellman Key Exchange, and is easily susceptible to having the encryption cracked via passive eavesdropping.

Do you know one keyboard on the market today that has LE Secure Connections feature enabled?

I don't know of any because I haven't tested too many, but LE Secure Connections has been around since the Bluetooth 4.2 spec, which was adopted in 2014. The feature is supported by most single-mode BLE chipsets / stacks that have been released since then. I'd be surprised if there were none that supported it, though I don't know for sure.

Reply on news.ycombinator.com