Re: Wireless Keyboard Security

From: Glen Becker (glen.becker_at_gmail.com)
Date: 03/25/05

  • Next message: Matthew F. Caldwell: "RE: Wireless Keyboards" 
    Date: Thu, 24 Mar 2005 22:36:43 -0500
To: security-basics@securityfocus.com

    Just to clarify for myself, since the discussion has mentioned
    products that appear to have keyboards with an integrated pointing
    device but centered on the potential key-logging vuln:

    Is there any risk posed, or valuable info trasmitted, by wireless mice?

    Regards,

    -Glen Becker

    On Wed, 23 Mar 2005 20:33:52 -0700, David King <davewking@gmail.com> wrote:
    > Here's a successful attack on a wireless keyboard/mouse combo made by logitech.
    >
    > http://www.osvdb.org/displayvuln.php?osvdb_id=13367
    >
    > and the original message
    >
    > http://archives.neohapsis.com/archives/bugtraq/2001-05/0224.html
    >
    > Looks bad.
    >
    > Laters,
    > Dave King
    > http://www.thesecure.net
    >
    > On Wed, 23 Mar 2005 18:16:06 +0000, Pedro Venda
    > <pjvenda@arrakis.dhis.org> wrote:
    > > On Wednesday 23 March 2005 05:25, Alvin Oga wrote:
    > > > hi ya jared
    > > >
    > > > On Tue, Mar 22, 2005 at 04:13:16PM -0700, Badger, Jared wrote:
    > > > > My job involves reviewing computer security at a bank, and I was very
    > > > > surprised to see that nearly all of the computers at one of my branches
    > > > > are using these wireless mouse/keyboard combos. It seems like this could
    > > > > be a potentially serious security risk,
    > > >
    > > > yup .. big problem
    > >
    > > I agree. This is a serious issue, and I don't think current hardware is
    > > encrypting data. hardware sniffers can now be wireless too :-)
    > >
    > > The wireless peripherals are now hype (not in the sense that they won't be
    > > used further, but in the sense that everyone has one). with wireless
    > > ethernet, there were security concerns (not efficiently solved) from day 1,
    > > but most people overlook this issue on other peripherals, which I consider
    > > very serious.
    > >
    > > It'd be expensive for manufacturers to start producing peripherals with decent
    > > encryption/decryption hardware, so I don't predict short/medium term changes.
    > > After all, mose people (even on banks !!!) don't see this issue, so why would
    > > the masses pay more for something not obviously necessary?
    > >
    > > regards,
    > > pedro venda.
    > > --
    > >
    > > Pedro Joćo Lopes Venda
    > > email: pjvenda < at > arrakis.dhis.org
    > > http://arrakis.dhis.org
    > >
    > >
    > >
    >

  • Next message: Matthew F. Caldwell: "RE: Wireless Keyboards"

    Relevant Pages

    • Re: Wireless Keyboard Security
      ... Here's a successful attack on a wireless keyboard/mouse combo made by logitech. ... > The wireless peripherals are now hype (not in the sense that they won't be ... > Pedro Joćo Lopes Venda ...
      (Security-Basics)
    • Re: [SLE] Wireless and cordless withy SuSE 9.1
      ... encryption scheme for wireless. ... Here we have been using the logitech wireless keyboards and optical ... mice for several years. ...
      (SuSE)
    • Re: DVI/wifi interference
      ... but not with a wireless network connection but with a wireless ... At first i thought it was the keyboards, ... Tried all pci slots and no luck (linksys is the only pci card and radeon is ...
      (alt.internet.wireless)
    • Re: DVI/wifi interference
      ... but not with a wireless network connection but with a wireless ... At first i thought it was the keyboards, ... In a past life I've spent time in a lab down a salt mine trying to solve RFI ...
      (alt.internet.wireless)
    • Re: Msoft wireless keyboards - need help please
      ... I would also suggest that you look at the Logitech keyboards. ... greater variety of wireless products for the desktop than does Microsoft. ...
      (microsoft.public.windowsxp.hardware)