Re: [Full-disclosure] all your keyboards are belong to us!

2 views
Skip to first unread message

Bipin Gautam

unread,
Oct 20, 2008, 3:07:42 PM10/20/08
to kra...@coromputer.net, Intelligen...@googlegroups.com, full-di...@lists.grok.org.uk
ref: http://www.usace.army.mil/publications/armytm/tm5-690/


On 10/20/08, kra...@coromputer.net <kra...@coromputer.net> wrote:
> Hello,
>
> An interesting article concerning the compromising of electrical
> emanations (TEMPEST) of wired keyboards:
>
> http://lasecwww.epfl.ch/keyboard/
>
> Cheers,
>
>
> kralor - HiC & [Crpt]
>

---
X-No-Archive:
___________________________________________

http://groups.google.com/group/Intelligence-Studies
************************************************************

black knight

unread,
Oct 21, 2008, 1:18:10 AM10/21/08
to Intelligen...@googlegroups.com

On Tue, Oct 21, 2008 at 12:52 AM, Bipin Gautam <bipin....@gmail.com> wrote:

ref: http://www.usace.army.mil/publications/armytm/tm5-690/

yea it was a nice piece of information....read it in slashdot yesterday....but as it says wired keyboards open to such attacks...does that mean wireless keyboards aren't ;).....makes me think of!! but as again they (wireless keyboards) are wired too at the ends...i guess they are open to such attacks as well.....

jeez now i wonder how ppl are gonna save them off such attacks...virtual keyboards (keylogger were built that can even log them), wired keyboards..ppl can see what you hit in from a range of 20metres...oh wow!...

I did read some long time ago of a similar tapping of a display in a computer screen in the similar way as the keyboard tapping is now...though it was discovered quiet a longtime ago by Wim Van Eck [http://en.wikipedia.org/wiki/Van_Eck_phreaking] the article i read then had some more information/resources on the subject...I will post the link if I find it soon in the heaps of my bookmarks.

P.S: The subject here "All your keyboard are belong to us" is derived from the other slang used highly in internet "All your base are belong to us" (A broken english declaration derived from some video game ) http://en.wikipedia.org/wiki/All_Your_Base_Are_Belong_To_Us ;) even wiki has a full page article on the subject :)

Regards,

Black Knight

--
- in a quest lacking destinations.

black knight

unread,
Oct 21, 2008, 1:31:49 AM10/21/08
to Intelligen...@googlegroups.com
One query again!! the frequency at what the researcher then typed the keys in the keyboard! that was pretty slow....but in the average we DONT type as such!! so can the electromagnetic waves emitting from the rapid hitting of those keys effect what is dumped on the other side? I guess it might!.. well for now only questions can be arose :) lets see if we hear some more from the researchers!

Prasanna Gautam

unread,
Oct 21, 2008, 1:25:35 AM10/21/08
to Intelligen...@googlegroups.com
On Tue, Oct 21, 2008 at 1:18 AM, black knight <l3lac...@gmail.com> wrote:

On Tue, Oct 21, 2008 at 12:52 AM, Bipin Gautam <bipin....@gmail.com> wrote:

ref: http://www.usace.army.mil/publications/armytm/tm5-690/

yea it was a nice piece of information....read it in slashdot yesterday....but as it says wired keyboards open to such attacks...does that mean wireless keyboards aren't ;).....makes me think of!! but as again they (wireless keyboards) are wired too at the ends...i guess they are open to such attacks as well.....

Incidentally, I have been thinking about this problem too. I think wireless keyboards depend on what kind of encoding is used between the receiver connected to the computer and the keyboard. Due to the nature of the device, we can't encrypt everything strongly and perhaps within a certain range such an attack might be trivial to pull off.  I have to do some research before I can say for sure.

Bipin Gautam

unread,
Oct 21, 2008, 11:22:00 AM10/21/08
to Intelligen...@googlegroups.com, neps...@googlegroups.com
On 10/21/08, black knight <l3lac...@gmail.com> wrote:
> On Tue, Oct 21, 2008 at 12:52 AM, Bipin Gautam
> <bipin....@gmail.com>wrote:
>
>
> jeez now i wonder how ppl are gonna save them off such attacks...virtual
> keyboards (keylogger were built that can even log them), wired
> keyboards..ppl can see what you hit in from a range of 20metres...oh wow!...
>


Attached is a introductory article in this topic by me from over 3 years ago...

If you have something really important going on least you could have
your computer room on the center of your house, if you have a
underground floor its even better, make use of it, if you live in a
residential area you would have a small compound for sure, (are the
walls high enough?) its good to have shrubs/trees around the boarder
walls of your compound, use low power LCD monitor if possible. Laptop,
better. Only use anything wireless only when absolutely necessary.
Have proper grounding for all your electrical equipments.

This should provide you with a fair protection from most amateur
gadgets but its no way a reliable shielding. Larger the compound,
thicker the compound walls, denser the vegetation around your compound
the better as these are all signal absorbers so a better shielding
which you can have economically.
---
This is the type of project i would love to get into with IOEans? :)
Academic research is so primitive in Nepal :(
---

There is a known attack to capture keystroke from a wireless keyboard as well.

In theory faster typing shouldn't affect the probability of capturing
the signal from the keyboard except addition of some noise.

thanks,
-bipin


--

part1_physical security.pdf
Reply all
Reply to author
Forward
0 new messages