Contributor

Worried about electronic snooping of key strokes? Forget about it.

Opinion
Oct 23, 20081 min

While technically enthralling, the recent buzz over the  vulnerability discovered in the way manufactures wire keyboards is unwarranted.   While it is too late for the concept to be worked into the next James Bond movie due out in two weeks, I am sure it will make it into either the next James Bond or Mission Impossible film.   The idea, explained in a blog posting at the Security and Cryptography Laboratory at the Ecole Polytechnique Fédérale de Lausanne in Switzerland, is that each key will emit slightly different electromagnetic signals when depressed.  This is very similar to the Tempest concept of cathode ray tube images being reconstructed by remote sensing devices.  mylar bags!  

My contention is that while interesting this is not a threat that you should spend anytime worrying about.  When was the last time you heard of a successful tempest attack? Or how about those proximity sensing card swipe machines?  Have any hackers figured out how to steal money from your wallet when you brush against their illicit scanner? No.  Some threats are possible, just not probable.  

However, if you are truly worried about compromising key stroke emission sensing attacks have I got a solution for you: 

Mylar bags

Richard Stiennon is chief research analyst at IT-Harvest, the firm he founded in 2005 to cover the 1,600 vendors that make up the IT security industry. He is the author of Surviving Cyberwar (Government Institutes, 2010) and There Will Be Cyberwar: How the Move to Network-Centric Warfighting Set the Stage for Cyberwar. He is a member of the advisory board at the Information Governance Initiative and principal of TrueBit Cyber Partners. He also serves on the R2-TAC, the technical advisory committee for the Responsible Recycling standard for e-waste.

Stiennon was chief marketing officer for Fortinet Inc. and vice president of threat research at Webroot Software. Prior to that, he was vice president of research at Gartner Inc. He has a B.S. in aerospace engineering and an M.A. in war in the modern world from King’s College, London.

The opinions expressed in this blog are those of Richard Stiennon and do not necessarily represent those of IDG Communications Inc. or its parent, subsidiary or affiliated companies.

More from this author