Penetration testing wireless keyboards
kth.diva-portal.org
kth.diva-portal.org
Protocol Sniffing Injection
Plexgear Yes Yes
Rapoo Yes Yes
Logitech No Yes
Corsair Yes Yes
iiglo Yes Yes
Exibel Yes Yes
Razer No No
The results show that 9 out of 10 keyboards have at least some form of vulnerability. Out of all the keyboards, 8 of them were shown to contain new previously unknown vulnerabilities that could grant an attacker full control of the computer of the keyboard. The severity of these vulnerabilities in combination with how prevalent they are show that the usage of wireless keyboards should in no way be used in any situation where security, privacy, or integrity is of any concern whatsoever.
[...]
Out of all the keyboards, only one of them actually promised any form of encryption as part of the marketing of the keyboard and this is the Corsair K63 Wireless. The keyboard is marketed with 128-bit AES encryption but as the results of the penetration test show, this is not the case. The keyboard’s only obfuscation of the wireless transmission is a simple XOR of the payload with a static key that can potentially be reverse engineered automatically with some very simple calculations.
[...]
Razer BlackWidow V3 Pro was the only keyboard not shown to contain any vulnerability. As a result of this, it is deemed the most secure of the targeted keyboards but it could still be vulnerable to some unidentified vulnerability that requires more time and resources compared to the rest of the keyboards
This sounds like fraud to me.
You don't 'accidentally' mistake weak XOR obfuscation with AES, so this is fraud. However whether that results in any tangible legal action is debatable. I have strong doubts given the corporatocratic nature of the corporate judicial outcomes in USA.
Are these sold online? Wire fraud is a common enhancement to a lot of criminal charges involving fraud taking place online or over phone.
Just a couple years ago, I was finalizing and testing some factory stations we'd built (incorporating industrial NUCs) before they'd be flown to Asia for installation in a production line.
Someone had ordered a name-brand wireless keyboard with USB dongle, and I'd said we probably don't want wireless keyboards nor their dongles in the factory, but I figured it was OK to use briefly for testing, since it's what we had handy.
Was getting phantom key events, which initially was alarming, because I'd had to get creative with some device drivers and the Linux input system. But then it also happened during BIOS/UEFI setup.
There was one other person in the shared tech/lab space at this time, so I go over and ask if they happen to be doing anything with RF... It turns out they were also using the same brand of wireless keyboard, which seemed to intermittently be barging-in or interfering with mine, in such a way to generate valid USB input device events.
When I brought it up with colleagues, we were all baffled, since presumably the name-brand would like to sell fleets of wireless keyboards to entire open-plan office building floors at a time, and would design it to work well for that use case. But it did indeed seem that activity on one keyboard was triggering events out the USB dongle on another.
(I won't mention the brand, since I didn't investigate rigorously, and write it up. We were crazy-busy, launching our startup's MVP. Fortunately, without the wireless keyboards, the stations were rock-solid for the entire year-plus deployment, against all odds.)
That's one of the reasons Logitech is moving to Logi Bolt, which is supposed to be very similar to BLE (but with a separate receiver). I'd be really interested to know if it's also as secure as BLE.
One hint may be that on my Macbook my Logitech mouse appears to have a higher latency (feeling more "spongy") when connected via Bluetooth instead of via the dongle.
Putting a more complete Bluetooth host into their dongle would just change the edges of where it is incompatible with normal Bluetooth usage.
I've heard elsewhere Logitech devices are laggy on bluetooth. Why isn't this an issue for Apple and other manf?
I've moved from mech keyboards with O-ringed MX blues to pretty much using the Apple magic keyboard and trackpad anytime I'm at the desk. Sometimes I still reach for the clicky-claky, but integrated Touch-ID is so useful I've taken a liking to using the Apple magic keyboard (with touch id) and grown accustomed to the feel.
This is why I like their G series mice, even though I'm not a gamer. You can configure them, and they'll remember the settings on their on-board memory. They're also supported by Piper on Linux, so you never have to touch the crappy Logitech software.
I also have one of their trackballs, and it's a pain having to make sure the software runs so that the sensitivity is the correct one. It does Unifying and BT, and I've actually been impressed with how well the latter works. I don't feel any difference between that and the Unifying dongle, be it on a current-gen Linux PC or on an old MBP.
I wonder whether this is but people just don't notice because they can't directly compare.
But then I have a 32 channel mixer with cables everywhere in my office, so not the most unbiased cable-opinionator directly.
And yet ... wireless keyboard and mouse ... because ... I dunno. Just seems right.
Me, I like a wireless mouse, but a wired keyboard.
My current WFH desk is not ideal and having a full sized keyboard with numeric keypad meant I couldn't center the keyboard for typing and have enough room to comfortably use the mouse.
I tried to find a ten key less wired keyboard that didn't have noisy mechanical switches. I can clearly hear my colleagues typing on theirs during Teams calls, which is very distracting.
I couldn't find a wired, small form factor keyboard, without mechanical switches. So I went the wireless route. I would have gone wired if I could find one that met my requirements.
Having used the Logitech for about a month, there are some pros and cons. I often like to use pencil and paper to diagram existing code to better think through how to change it. With the wired keyboard I was limited in where I could move the keyboard out of the way. Now I can move the wireless keyboard right off the desk.
I usually work with a work laptop open for Teams voice chat while primarily working via a virtual desktop connection on my personal PC. I haven't done it yet, but the work laptop recognises the wireless keyboard and mouse, so I could switch input between the laptop and PC at the press of a button. This means I wouldn't need to use the laptop keyboard or touchpad for input, freeing me to position the laptop for screen visibility and video chat.
The main cons so far are that the keyboard has lost the wireless connection to the USB dongle a couple of times. This can be temporarily worked around by (ironically) plugging in the USB cable used to charge it. Also the mouse seems to be laggy sometimes. Picking it up and repositioning it on the desk gets it working smoothly again.
https://www.keychron.com/products/keychron-k8-tenkeyless-wir...
Goes without saying though they should all be 100% secure so credit to the author for investigating this
So my intuition that generic "2.4GHz" communication is insecure has mostly been proven right. Now what about Bluetooth keyboards? Can they be considered secure?