Submitted 1 year ago by cyu@sh.itjust.works to technology@lemmy.world
Laptops more susceptible to having keyboard recorded in quieter areas, like coffee shops, libraries, offices. Previous attempts at keylogging VoIP calls achieved 91.7 percent top-5 accuracy over Skype in 2017 and 74.3 percent accuracy in VoIP calls in 2018.
Dvorak keyboard mode enabled.
This saves me time by letting Carl directly know he’s an idiot rather than waiting until I mistakenly message him instead of my coworker.
Every operating system should come with a built in noise gate.
Part of me agrees, and part of me reverts to my “Stop adding shit I didn’t ask for in my OS” especially if it doesn’t work correctly and people just disable it. Though people will also talk while typing passwords sometimes and so this attack still works.
Not complaining about this idea, but more the fucking bloat that all software takes on, but Windows seems to really push to the limit.
This is the best summary I could come up with:
In their paper A Practical Deep Learning-Based Acoustic Side Channel Attack on Keyboards (full PDF), UK researchers Joshua Harrison, Ehsan Toreini, and Marhyam Mehrnezhad claim that the trio of ubiquitous machine learning, microphones, and video calls “present a greater threat to keyboards than ever.”
Laptops, in particular, are more susceptible to having their keyboard recorded in quieter public areas, like coffee shops, libraries, or offices, the paper notes.
Combining the output of the keystroke interpretations with a “hidden Markov model” (HMM), which guesses at more-likely next-letter outcomes and could correct “hrllo” to “hello,” saw one prior side channel study’s accuracy jump from 72 to 95 percent—though that was an attack on dot-matrix printers.
The Cornell researchers believe their paper is the first to make use of the recent sea change in neural network technology, including self-attention layers, to propagate an audio side channel attack.
Because of this, the potential for a second machine-bolstered system to correct the false keys, given a large language corpus and the approximate location of a keystroke, seems strong.
The 2013 “Dropmire” scandal that saw the US spying on its European allies was highly likely to have involved some kind of side channel attack, whether through wires, radio frequencies, or sound.
I’m a bot and I’m open source!
Kinglink@lemmy.world 1 year ago
I thought this type of attack had been known and used for a while. Though in the previous styles I’ve seen it’s usually required at least some understanding of the keyboard layout and preparations (hearing each key pressed previously) I don’t know if they’ve jumped that gap, or made some rather huge assumptions. (The victim has the same keyboard as X or the victim has a known keyboard.)
Actually would be interesting to see laptops randomize their keys for passwords, though that would be hellish to type a known password on. I mostly do my password from touch memory.
Lmaydev@programming.dev 1 year ago
Kinglink@lemmy.world 1 year ago
I think my question is more “Does this only work on MacBook Pro” though now I wonder how much the angle the Mac Book is open will matter to the program, or if an external microphone will affect it (or completely throw it off).
Not trying to tear this down, but more understand the scope needed for this attack to work, or what could break this approach.