Swiss security researchers can snag typed passwords wirelessly from 65 feet

This really ought to be in the next James Bond movie. Swiss security experts showed that they can monitor keystrokes typed on wired keyboards from afar.

The researchers showed they can capture the words being typed on 11 different models of keyboards by monitoring the electromagnetic radiation emitted by those keyboards. The techniques work on PS /2, universal serial bus, and laptop keyboards. (That seems like just about everything).

The researchers at the Security and Cryptography Laboratory at Ecole Polytechnique Federale de Lausanne say they used four different means of attack from as far as 65 feet away. It reminds me of the keyboard identification techniques used to verify user identities from start-up AdmitOne. But that technique is used to protect the identity of users, while today’s hack could be used to compromise someone’s passwords. Such attacks could leave less physical evidence and involve less risk to the attacker compared to leaving a keylogger on someone’s machine to steal passwords as they are typed.

Next Story: GE Healthcare partners with Living Independently to monitor elderly
Previous Story: Display ad co. ValueClick sells off properties, hunkers down

Bookmark and Share
Photo of Dean Takahashi

About the Author, Dean Takahashi

Dean is lead writer for GamesBeat at VentureBeat. He covers video games, security, chips and a variety of other subjects. Dean previously worked at the San Jose Mercury News, the Wall Street Journal, the Red Herring, the Los Angeles Times, the Orange County Register and the Dallas Times Herald. He is the author of two books, Opening the Xbox and the Xbox 360 Uncloaked. Follow him on Twitter at @deantak, and follow VentureBeat on Twitter at @venturebeat.

  • This has been doable for over 30 years by tapping into a phone line -- and even with a directly connected keyboard (such as with a laptop), but this Swiss wireless method is a "nice" variation. I'll go into greater depth about this at my Zero-Day Defense blog either later today or tomorrow.
  • Oops ... I meant electric grid, NOT phone line.
  • Jackie
    This just gives users another reason not to use passwords as the major means of authentication.

    It's time for alternatives such as yubikey.