Researchers hack Microsoft wireless keyboards

05/12/2007 by swordfish.

The protocol for securing some of Microsoft’s wireless keyboards has been cracked, opening up the possibility of keystroke logging, according to Swiss security company Dreamlab Technologies. Researchers from the company have said they are also close to being able to use the hack to control affected computers remotely.

Microsoft’s Wireless Optical Desktop 1000 and 2000 keyboards communicate by transmitting radio signals to the sound card in a user’s computer. The data stream is encrypted using an exclusion-or (XOR) cipher, which is not strong enough to secure the communication, according to Dreamlab’s senior security specialist, Max Moser.

Dreamlab started their cracking efforts six months ago. They first identified the radio frequency used by the keyboards. They then used a piece of copper wire to intercept the signal, which is effective to a range of 10 metres, including through walls and floors. However, because the radio frequency is in the citizens’ band — that is, it is used by CB radios — Moser said it would be possible to obtain radio equipment that could intercept the transmissions from up to 50 metres away. “Range is not a problem,” said the security specialist.

Source: ZDNet

Return to the main QBS site

Posted in Wireless, Office Tools, Microsoft, Security | Print | No Comments »