/. [Keyboard Sound Aids Password Cracking]

[Eugen Leitl]

Link: http://slashdot.org/article.pl?sid=05/09/13/1644259
Posted by: CmdrTaco, on 2005-09-13 17:04:00

   from the but-i-love-clicky-keyboards dept.
   [1]stinerman writes "Three students at UC-Berkley used a 10 minute
   [2]recording of a keyboard to recover 96% of the characters typed
   during the session. The article details that their methods did not
   require a 'training text' in order to calibrate the conversion
   algorithm as has been used previously. The [3]research paper [PDF]
   notes that '90% of 5-character random passwords using only letters can
   be generated in fewer than 20 attempts by an adversary; 80% of
   10-character passwords can be generated in fewer than 75 attempts.'"

References

   1. http://www.livejournal.com/~stinerman
   2. http://www.freedom-to-tinker.com/?p=893
   3.
http://www.cs.berkeley.edu/~tygar/papers/Keyboard_Acoustic_Emanations_Revisit
ed/preprint.pdf

----- End forwarded message -----
--
Eugen* Leitl <a href="http://leitl.org">leitl</a>
______________________________________________________________
ICBM: 48.07100, 11.36820            http://www.leitl.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE

[demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]