Chrome Extension Thwarts User Profiling Based On Typing Behavior

An anonymous reader writes: Per Thorsheim, the founder of PasswordsCon, created and trained a biometric profile of his keystroke dynamics using the Tor browser at a demo site. He then switched over to Google Chrome and not using the Tor network, and the demo site correctly identified him when logging in and completing a demo financial transaction. Infosec consultant Paul Moore came up with a working solution to thwart this type of behavioral profiling. The result is a Chrome extension called Keyboard Privacy, which prevents profiling of users by the way they type by randomizing the rate at which characters reach the DOM. A Firefox version of the plugin is in the works.

Comments

A Chrome privacy extension

[Anonymous Coward]

The term "pissing in the ocean" comes to mind.

Re:Complex signal analysis

[ArcadeMan]

Grammar and phrases used by writers should be unique enough to identify the same anonymous writers on different sites, at least over the long run.

thats one more reason too never use capital letters or punctuation and too write with as many misteaks as u can including us1ng l33tsp34k

Re:I dunno?

[martas]

this does not fingerprint the browser, it fingerprints the user. it doesn't matter if you switch browsers, or even computers, your typing patters remain the same, and potentially identifiable.

That's one solution

[tehlinux]

> by randomizing the rate at which characters reach the DOM

Just do what IE11 does and randomly don't send some characters to the DOM.