Beware the Haunted Cordless keyboard

dr. greenthumb writes "The norwegian newspaper Aftenposten reports about an incident where a computer suddenly seemed to develop a life of its own. A game which the user could not remember using that day suddenly appeared on the screen. When he went over to shut it off the screen displayed a message asking him if he "really wanted to delete this file?" His computer was receiving keystrokes from another computer (with the same type of wireless keyboard) 150 metres away! Check out the full story and a follow-up, where experts warns against using wireless keyboards." /me plans to destroy Hemos' sanity...

Comments

256 channels???

[g4dget]

The attitude companies have towards security is appalling. Wireless keyboards have to use strong cryptography or credit card numbers and personal information are being broadcast across the neighborhood. 256 channels isn't going to fix it.

This is only the beginning

[ShawnDoc]

With Bluetooth finally making an appearance, expect to see a lot more of this. Since Bluetooth devices are supposed to automatically find each other and just "work", this is only going to become more common. Imagine giving a very important PowerPoint presentation when everything goes hawire when someone giving a presentation of their own the next floor up has their Bluetooth remote starting giving signals to your computer.

I know there are security and other settings that when properly configured will help prevent these mistakes, but just look at the number of unsecured business wireless networks out there that don't even have WEP turned on. Its going to be nasty.

Re:This is only the beginning

[ShawnDoc]

10 meters is about 30 feet. That'll easily cover 2 floors up or down from you.

Re:This is only the beginning

[Tensor]

Yeah, well its open air 10mts so instead of 3 floors you have, at best, 1.5 floors centered on the device.

Remember that, in offices, floors and ceilings are covered with cables for telephone & networking and electricity. Which also helps to cut down on the range.

Re:Logitech Encryption Driver Releases

[Krelnik]

Now, will someone please explain to me how updating drivers for a 3 year old wireless keyboard will encrypt the path from the keyboard to the receiver?

There could be a number of legitimate ways this happened:

1. The encryption feature was there all along, but they didn't get around to supporting it in the software until now. This often happens in commercial hardware products, when you hit a deadline and the drivers just aren't ready. Although 3 years does seem a bit excessive.

2. The driver actually downloads code to the controller in the keyboard, thereby "upgrading" it to include encryption.

3. The hardware supported it all along, but they were having trouble getting their government paperwork to ship a product with encryption. So they just yanked the feature out of the driver until such time as the paperwork is done. Now its done so they are shipping the drivers.