Microsoft Outlook Support

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Monday, 3 August 2009

Criminals could capture data from wireless keyboards

Posted on 11:17 by Unknown
A piece of Open-source software could be hijacked by criminals to steal people's personal data, according to security firm

by Michael Smith (Veshengro)

Cyber-criminals could use so-called “sniffer” software to steal sensitive data from users of wireless keyboards, so says Symantec, the makers of Norton Security software.

The security firm said that an open-source project, dubbed Keykeriki, which has been developed by a group called Remote-Exploit.org and theoretically is intended to be used as an educational tool or to test the security of wireless keyboard transmissions, could be dangerous to users of wireless keyboards.

This is because the software and schematics can be downloaded from the Internet, there is nothing to stop criminals using it as a remote keystroke logger that can capture every keystroke without having to install malware onto a PC, said Symantec.

“The criminal implications of this are immediate and obvious. It would mean that someone would be able to remotely capture every keystroke made without having to install anything on to the system and capture personal, sensitive information such as passwords and bank details,” said Symantec.

The company “strongly recommends” using wired keyboards in the office and public places to avoid making critical data vulnerable.

I must say though that this appears, yet again, to be an attack by the proprietary software companies and those that love closed codes on Open Source software.

While it may be a case that cyber-criminals could use the software and even change the code as it is an open source application I am sure there are other keyloggers out there that are in use by such criminals that have been written by this or that member of their criminal fraternity.

To blame the fact that the software is Open Source is, in my opinion, once again, as said, an attack on Open Source.

On the other hand I can but agree with Symantec's recommendation to use wired keyboards. Not only are those safer in use as no signals being transmitted – via the ether – that could be “sniffed out” and also wire keyboards are (1) cheaper and (2) greener.

While wireless keyboards and rodents may be nice as there are no wires cluttering up the desk I personally prefer wired keyboards and mice and that for the previously mentioned reasons, including and especially the security aspect.

But before we all go off the deep end here I think we must also consider that the range of wireless keyboards is not really all that great and the “sniffer” would have to be rather close to the transmitter and transmissions of such a wireless device. Most wireless devices do not cover more than a few yards and unless the “sniffer”, as said, is very, very sensitive it should not be able to do much at all.

Obviously one must be careful and, as Symantec stated, it is therefore best to use wired keyboards, for security alone.

© 2009
<>
Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest
Posted in cyber crime | No comments
Newer Post Older Post Home

0 comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Popular Posts

  • DDoS-Attacks disable many shopping websites, including Amazon
    Just in time for last minute Christmas shopping major shopping sites disabled by Michael Smith (Veshengro) London, December 26, 2009: An...
  • Open Source Software in Business & Government
    by Michael Smith (Veshengro) Lots of Open Source in use in mainland Europe, including EU member states, very little in the UK and less still...
  • Cyber-Ark Expands RSA Secured Partner Program Certification Status
    Cyber-Ark Privileged Identity Management Suite, Inter-Business Vault and Sensitive Document Vault Now Formally Interoperable with RSA enVisi...
  • Infosecurity Adviser applauds forensics lab training facilities at key UK university
    London, UK. May 2009: Infosecurity Adviser, Infosecurity Europe’s online community for the information security industry, has published a r...
  • Scientific company discusses simultaneously protecting applications and data
    Simultaneously protecting applications and data: The next evolution in security? September 2009 (Eskenzi PR) – In a recent Imperva podcast...
  • TUFIN TECHNOLOGIES WINS the PRESTIGIOUS 2010 Computing Security Award for ‘Best bench tested solution of the Year’
    Network Computing and Computing Security Magazine Editors Select Tufin’s SecureChange Workflow as the Top Product Reviewed in 2010 Londo...
  • Brocade Service Could Help Reduce Billions in Data Centre Operations Costs
    New Energy Efficiency Review provides holistic assessment and remedial strategies to help companies optimise efficiency and reduce costs Ene...
  • Infosecurity Europe 2011 Hall of Fame nominations now open
    London UK, February  2011 – The time is ripe to elevate the greatest movers and shakers in the world of information security as nominations ...
  • Tufin survey reveals the truth about fudging audits, IT cost cutting and buying equipment online
    Ramat Gan, Israel – May 27, 2009 – Tufin Technologies today announced the results of its “Reality Bytes” security survey. The survey parti...
  • ISACA’s EuroCACS Conference Demystifies the Cloud
    Event for IT Professionals Will Take Place 20-23 March, Manchester London, England, (8 th March 2011)— Global business and information ...

Categories

  • ASUS
  • AVG Link Scanner
  • BeCrypt
  • book review
  • Brocade
  • Codenomicon
  • Columbian USB stick loss
  • computer recycling
  • Conficker worm
  • Credant Technologies
  • cyber crime
  • Cyber-Ark
  • Cyber-Ark®
  • Data Center
  • data encryption
  • DeviceLock
  • Digital Pathways
  • diskGenie
  • Eclypt
  • Eee PC
  • Eee PC Seashell 1008HA
  • F5 Networks
  • Facebook
  • Finjan
  • Finjan Inc.
  • Finjan MCRC
  • Firewall Management
  • Fortify
  • Fortify 360
  • Fortify Software
  • Fortify® Software
  • gadgets
  • Google
  • Google Chrome
  • green computing
  • green IT
  • IBM
  • Infosec
  • Infosec Europe 2009
  • Infosecurity Adviser
  • Infosecurity Europe
  • Infosecurity Europe 2009
  • Internet privacy
  • iStorage
  • iStorage diskGenie
  • iStorage Ltd.
  • Juniper Networks
  • Lakeland
  • Lapdesk
  • LLC
  • Logitech
  • malware
  • ManageEngine
  • McAfee International Ltd
  • MI6
  • MI6 data loss
  • Microsoft
  • MiFi™ 2352
  • Mio
  • Mobile Broadband
  • MS Office
  • National Cybersecurity Advisor
  • Navman
  • Navman Spirit
  • Netac
  • Novatel
  • Novatel Wireless Intelligent Mobile Hotspot 2352
  • OneClick IntelliPanel Desktop
  • online social media
  • open source
  • OpenOffice.org
  • Optenet
  • Origin Data Locker
  • Origin Storage
  • PNDs
  • product review
  • Red
  • SaaS
  • Sat Nav
  • saving energy
  • Security
  • Shavlik Technologies
  • SIS
  • spam
  • Stonewood Group
  • Storage Area Networks
  • Storage Expo
  • Storage Expo 2009
  • Sun Microsystems
  • Swine Flu
  • Syphan Technologies
  • Throwing Sheep in the Boardroom
  • Tufin Technologies
  • Twitter
  • U256
  • Unisys Security Index
  • USB drives
  • Vektor
  • VisionRacer
  • VisionRacer VR3
  • VMware
  • Weast
  • Web Apps Security
  • WebFilter PC Solution
  • WebSpy
  • XSS-driven attacks

Blog Archive

  • ►  2012 (1)
    • ►  January (1)
  • ►  2011 (67)
    • ►  December (1)
    • ►  April (1)
    • ►  March (14)
    • ►  February (30)
    • ►  January (21)
  • ►  2010 (192)
    • ►  December (20)
    • ►  November (22)
    • ►  October (19)
    • ►  September (5)
    • ►  August (8)
    • ►  July (5)
    • ►  June (22)
    • ►  May (13)
    • ►  April (11)
    • ►  March (13)
    • ►  February (27)
    • ►  January (27)
  • ▼  2009 (240)
    • ►  December (25)
    • ►  November (9)
    • ►  October (21)
    • ►  September (19)
    • ▼  August (30)
      • Leona Lewis music hack may be publicity stunt
      • US Court Grants Finjan a Permanent Injunction for ...
      • Swisscom IT cuts time spent on firewall management...
      • Amazon cloud evangelist to give Storage Expo openi...
      • Crown Plaza Venice hotel booking fiasco could have...
      • Fowlers Revs Up With Numara Track-It!
      • Twitter security move positive but is it it enough?
      • Stolen Lincoln playgroup laptop highlights danger ...
      • Mobile laptop usage soaring - but what about compa...
      • Security players form alliance to tackle malware
      • 1.7 million reasons for local authorities to use p...
      • “VirtualiSation and the Other Green Computing Init...
      • Cross site scripting (XSS) flaws hit the Ministry ...
      • Britney Spears hack highlights reputational risk o...
      • CREDANT Technologies extends data protection to Ma...
      • Compliance does not guarantee security
      • Staff&Line Partners with ProServ
      • Microsoft announces Office 2010 web applications
      • Weak cloud password security highlights strength o...
      • Peru makes a big statement about reusing rather th...
      • FSA £3m fine on HSBC could easily have been avoided
      • Twitter down again - another attack?
      • Pro-Georgian blogger was the target of Internet at...
      • Finjan Prevents Zero-Day Exploit of Adobe Acrobat ...
      • Microsoft and Yahoo cooperate on Search
      • DESlock+ Achieves ‘Five Star’ Accolade
      • Instant message dangers are growing
      • Google promises end to viruses - Fortify says: don...
      • Criminals could capture data from wireless keyboards
      • Loyal Employees or Snooping Staff? You Decide
    • ►  July (35)
    • ►  June (30)
    • ►  May (21)
    • ►  April (42)
    • ►  March (8)
Powered by Blogger.

About Me

Unknown
View my complete profile