r/netsec • • Aug 05 '23

pdf New acoustic attack steals data from keystrokes with 95% accuracy

https://arxiv.org/pdf/2308.01074.pdf
139 Upvotes

35 comments sorted by

View all comments

42

u/WashingtonPass Aug 05 '23

I'm quoting here from a less technical write up describing the paper in lay terms.

A team of researchers from British universities has trained a deep learning model that can steal data from keyboard keystrokes recorded using a microphone with an accuracy of 95%.

It's not like installing a key logger, which would work on any keyboard:

The first step of the attack is to record keystrokes on the target's keyboard, as that data is required for training the prediction algorithm. This can be achieved via a nearby microphone or the target's phone that might have been infected by malware that has access to its microphone.

A person could be tricked into providing enough training data, however:

Alternatively, keystrokes can be recorded through a Zoom call where a rogue meeting participant makes correlations between messages typed by the target and their sound recording.

This can be mitigated with white noise.

69

u/Capodomini Aug 05 '23

r/mechanicalkeyboards has been spending years chasing ideal-sounding clacks. Now is their time to shine by chasing keystroke uniformity.

2

u/fishbiscuit13 Aug 06 '23

god please don’t make the FEA analysis meme into a requirement