|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
From: thomas möller (thomas.moller
DEFCOM.COM)Date: Thu Apr 05 2001 - 01:14:13 CDT
It is true. I've done it my self.
The Logitech devices does have an impressive range, up to two rooms in
between
separated with concrete walls. So eavesdropping between two floors should
be all possible. The tranceiver attached to the computer can be forced to
receive/transmit by pressing the "send" -button...(Or was it "start", don't
have
one my self) and then receive the signals allready in progress. One should
be
a little careful to use ones own wireless keyboard since there is big risk
that
your own keyboard transmition will end up writing on the "target" computer.
In that case, the victim will start to suspect things. In short, Logitech
devices
can interfere with each other very easily...
Thanks
/T
----- Original Message -----
From: <auto209810
HUSHMAIL.COM>
To: <VULN-DEV
SECURITYFOCUS.COM>
Sent: Tuesday, April 03, 2001 7:02 PM
Subject: Re: Wireless Keyboards
> Might I suggest that those interested in eavesdropping on Logitech
wireless
> keyboard users take a look at the following page:
>
> http://www.logitech.com/cf/support/1032.cfm
>
> One can glean quite a bit of information from that FAQ. If other people's
> mice and keyboards can so easily interfere with other wireless keyboards,
> then that would seem to imply that there are a rather limited number of
> channels available to such devices. So although I haven't tried, it
doesn't
> look like it would be all that difficult to intercept signals from
Logitech's
> devices.
>
> If I were to attempt keystroke interception I guess I would do the
following:
>
> 1. Attach a Logitech receiver to a computer (a laptop perhaps), on which
> a keystroke logging program is installed.
> 2. Move within range of the keyboard you want to listen to.
> 3. Press the connect button on the receiver. It will hunt for a keyboard
> and find one.
> 4. If there are multiple wireless keyboard results in use, you'll need to
> watch the keystrokes coming in and look at the user you want to spy on,
> and figure out if your looking at the right person. If there is only one
> wireless keyboard in use, your job is easy.
> 5. Record the activity and analyse later.
>
> If you wanted to step up to the next level of professionalism, and you
were
> electronically inclined, you could pull apart two receivers and modify
them
> as follows...
>
> On one, you have the signal output go into a FM transmitter (bug), rather
> than to the PS/2 cord. The range of small FM bugs can be up to a mile -
> running on very little power. (I just looked at my wireless mouse receiver
> and noted that if pulled apart, and with a FM transmitter attached, the
> resulting device would fit into a cigarette pack.) This is your listening
> device.
>
> On the other receiver, you have the signal input come from a FM receiver
> (a plain old radio), rather than from the antenna or tuned circuit or
whatever
> is inside the wireless keyboard receiver. This would attach to a laptop
> running a keystroke logger.
>
> Imagine walking up to your target with the cigarette box receiver, the lid
> of the pack open as if you were getting a cigarette out. You press the
relocated
> connect button, and watch the little green light which indicates a
> connection. It lights up. Success. You close the lid, and drop the box in
> a trash can within six feet of the target. You can now take your laptop
> with modified radio receiver attached, up to a mile away and watch the
target's
> keystrokes.
>
> Admittedly the second monitoring scenario requires someone with
electronics
> experience, and as such wouldn't be for everyone, but I'm certain that
there
> are more than a few of us on this list who can use a soldering iron. Also,
> you would probably never see the cigarette box bug again. This isn't a
> problem if the information you are intercepting is worth more than the
device
> you just lost.
>
> Comments or suggestions are encouraged.
>
> Free, encrypted, secure Web-based email at www.hushmail.com
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]