Audio By Carbonatix
At first glance, a new hacking technique looks pretty scary. Using an attack that researchers at cybersecurity firm Bastille are calling "keysniffer," hackers can detect every key you press on your wireless keyboard.
That means they can pick up your passwords and maybe the answers to your security questions, like your mother's maiden name. The flaw affects keyboards manufactured by big names such as HP, Toshiba and General Electric. So far, bad news.
The good news? To use "keysniffer" on you, hackers would have to be pretty close. The attack works within 250 feet, which is about three-fourths the length of a football field. So international hackers aren't going to get you, and neither is anyone else who isn't in your physical neighborhood.
Like many vulnerable internet-connected devices, these keyboards are most at risk when someone with bad motives happens to be nearby -- or, more likely, has specifically targeted you. The same was true of flaws found in Hello Barbie, a doll that connects to Wi-Fi and learns to interact with its human friends.
Still, the reason your keyboard might be a touch vulnerable is disconcerting. The vulnerable keyboards are sending out each character you type over an unencrypted connection, according to Bastille researchers. That means the data flowing from your keyboard to your computer isn't scrambled, and it's no sweat for hackers to intercept and read.
Researchers from Bastille, led by Marc Newlin, said they tested low-cost keyboards from 12 manufacturers. In addition to keyboards from HP, Toshiba and General Electric (which licenses its name to manufacturer Jasco for keyboards), wireless keyboards from Kensington, Radio Shack, Anker, EagleTec and Best Buy's Insignia brand were vulnerable.
Denise Nelson, a spokeswoman for Kensington, said the company is working with Bastille on security issues. "They have taken all measures that they possibly can to close any security gaps," she said.
Nelson said new Kensington keyboards will feature an encrypted connection going forward. However, she did not know whether wireless keyboards already in use were still unencrypted. She added that the Kensington support team is ready to help customers resolve any issues.
Jasco is aware of the report from Bastille and "will work directly with its customers of this product to address any issues or concerns," the company said in a statement. Jasco is "committed to delivering secure products to its customers and would like to express its appreciation to Bastille Threat Research Group for reporting these issues."
The rest of the manufacturers named by Bastille did not immediately respond to requests for comment.
Bastille's website offers a list of the exact models affected.
"When we purchase a wireless keyboard we reasonably expect that the manufacturer has designed and built security into the core of the product," Bastille's Newlin said in a statement.
Latest Stories
-
Diaspora Nasara Caucus congratulates Mohammed Ali Suraj, new NPP executives
31 minutes -
Dr Antwi-Boasiako’s cybersecurity book showcased at UN crime prevention congress
34 minutes -
We will empower the grassroots and protect every vote – NPP’s 1st Vice Chair Kojo Bamba
43 minutes -
I do not see myself as better than anyone – NPP’s 1st Vice Chair Kojo Bamba
1 hour -
Police blur the line between invitations and arrests – Reindorf Twumasi Ankrah
2 hours -
Turning invitations into arrests is making citizens reluctant to assist police – Twumasi Ankrah
2 hours -
The Traffitech-GH SMS spot-fine system: The good, the sad, and the funny – Bright Simons writes
3 hours -
Hawa Koomson pledges experienced and mature leadership of NPP women’s wing
4 hours -
Young woman found dead at Kasoa Peace Town
4 hours -
Playback: The Law examined lawful arrest in Ghana
5 hours -
Mahama urges African governments to treat healthcare as an investment, not budget cost
5 hours -
Bawumia congratulates John Boadu and new NPP executives, pledges support ahead of 2028
5 hours -
Aksa Energy delegation pays courtesy call on GRA Commissioner-General
5 hours -
‘No talent should be left out’ – Bawumia pledges inclusive NPP campaign for 2028
5 hours -
Prof. Mike Oquaye recounts how he blocked the Special Prosecutor’s attempt to arrest Bawku Central MP
6 hours