April 25th, 2014

We know what you typed last summer

An interesting advisory comes from guys at remote-exploit and dreamlab technologies dealing with (in)security of common non-bluetooth wireless keyboards sold by Microsoft (Wireless Optical Desktop 1000 and 2000). According to the white paper released on the subject (available here) only the actual key pressed is transmitted in encrypted form, all other communication such as keyboard identification, metakeys (Shift, Alt, etc.), and other data are all transmitted in clear text. Furthermore, the encryption scheme used for keystroke data consists of “a simple XOR mechanism with a single byte of random data generated during the association procedure”. What this means is that not only can you quickly brute force entire key space (256 combinations), but you can actually obtain the encryption key by intercepting the initial association of keyboard and receiver (as was demonstrated in this video ). Authors did not release the PoC tool to the public citing an ongoing research (meaning more goodies coming soon ;). As such we can only applaud at this effort and look forward to seeing this tool in the upcoming Backtrack 3.

Microsoft Optical Desktop 1000

22 Responses to 'We know what you typed last summer'

  1. 1RobotSkirts » Blog Archive » We know what you typed last summer
    December 2nd, 2007 at 12:51 pm

    [...] We know what you typed last summer XOR’d against a single “random” byte for encryption?! Hahaha, that’s awesome. [...]


  2. 2cmdjunkie
    December 3rd, 2007 at 9:28 am

    Thats interesting, and sounds like it could be easily pulled off as well.


  3. 3IppatsuBlog » Crackare le tastiere wireless
    December 3rd, 2007 at 6:28 pm

    [...] [via midnightresearch] [...]


  4. 4IFZen
    December 4th, 2007 at 1:24 am

    So a simple statistical analyze should do it, counting the e’s.


  5. 5sk
    December 4th, 2007 at 12:34 pm

    Wow…. just wow… it’s almost like they’re not trying any more.


  6. 6Play Computer Games
    January 11th, 2008 at 5:41 pm

    Very nice ! I have to be careful using this kind of keyboard(s). Even worse to know that they have been sold by Microsoft.


  7. 7domeinregistratie
    January 11th, 2008 at 5:44 pm

    An interesting post with a nice title… Will consider this on my plan to buy a wireless keyboard.


  8. 8Midnight Research Labs – Keyboard Sniffing
    June 17th, 2009 at 7:59 am

    [...] talked about this before, and since it’s a pretty interesting project I thought it would be good to follow up on. The [...]


  9. 9how to unlock android phone
    July 31st, 2012 at 2:24 am

    Excellent weblog right here! Additionally your site quite a bit up fast!

    What host are you the usage of? Can I get your associate hyperlink
    for your host? I wish my web site loaded up as fast
    as yours lol


  10. 10five stars
    September 19th, 2012 at 8:39 am

    Very nice post. I just stumbled upon your
    weblog and wanted to say that I’ve truly enjoyed browsing your blog posts. After all I will be subscribing to your rss feed and I hope you write again very soon!


  11. 11http://www.youtube.com/watch?v=VEqTimv8Ago
    December 26th, 2012 at 2:11 am

    you’re really a good webmaster. The website loading speed is incredible. It seems that you’re doing any unique trick. Furthermore, The contents are masterwork. you have done a wonderful job on this topic!


  12. 12Leroy
    April 9th, 2013 at 12:03 am

    Superb information, but I’ve got a quick question… who made your theme? Did you build it yourself or is this a high grade theme? If it’s totally
    free, I would love to get it, it’s exactly the sort of template I need for my upcoming blog.


  13. 13Gerry Mazur
    April 9th, 2013 at 9:17 pm

    Hiya, I’m really glad I’ve found this info. Nowadays bloggers publish only about gossips and internet and this is actually annoying. A good site with exciting content, that is what I need. Thank you for keeping this web site, I will be visiting it. Do you do newsletters? Cant find it.


  14. 14Clifford Yacono
    April 9th, 2013 at 9:23 pm

    Hello there, I discovered your web site via Google at the same time as searching for a related subject, your site came up, it looks good. I’ve bookmarked it in my google bookmarks.


  15. 15enjoy
    June 11th, 2013 at 7:41 am

    Very nice post. I just stumbled upon your blog and wanted to say that I’ve really enjoyed browsing your blog posts. In any case I will be subscribing to your feed and I hope you write again soon!


  16. 16campeggi in croazia sul mare
    July 10th, 2013 at 5:21 pm

    Definitely believe that which you stated. Your favorite justification appeared to be on the web the easiest thing to be aware of.

    I say to you, I certainly get irked while people consider worries that
    they plainly don’t know about. You managed to hit the nail upon the top and defined out the whole thing without having side effect , people could take a signal. Will probably be back to get more. Thanks


  17. 17i was reading this
    July 21st, 2013 at 9:52 am

    Wow, that’s what I was looking for, what a stuff! present here at this web site, thanks admin of this web site.


  18. 18contemporary vanity set
    July 22nd, 2013 at 11:30 pm

    It’s amazing in support of me to have a website, which is valuable in support of my knowledge. thanks admin


  19. 19cool tv stands
    July 30th, 2013 at 11:59 am

    Hey! This is my first visit to your blog! We are a collection of
    volunteers and starting a new project in a community
    in the same niche. Your blog provided us beneficial information to work on.

    You have done a wonderful job!


  20. 20psn card
    November 19th, 2013 at 9:34 am

    Howdy exceptional blog! Does running a blog like this require a great deal of work?

    I have no expertise in computer programming but I was hoping to start my own blog in the near future.
    Anyhow, if you have any recommendations or techniques for new blog owners please
    share. I understand this is off topic nevertheless I just needed to ask.
    Thank you!


  21. 21video games
    December 6th, 2013 at 1:15 pm

    If you are concerned about the ESRB rating, and you aren’t
    sure whether you should purchase a game for your family or not, turn to
    the Internet for help. Achieving good results even in the smallest and
    simplest games subconsciously give a feeling of confidence in people, increase motivation, and this is of particular importance and according to a U.
    Some use simulations while others have semi simulation effects.


  22. 22making money
    January 27th, 2014 at 8:39 pm

    ?i ther?, You hqve done a great job. I will ?efinitely digg
    ?t aand personally ?uggest to m? friends. I am sure they’ll
    ?e benefited fro thiis web site.


Leave a Response

Imhotep theme designed by Chris Lin. Proudly powered by Wordpress.
XHTML | CSS | RSS | Comments RSS