Wireless keyboard sniffing security threat

[Muse]

Saw a news story yesterday:

Security Flaw In Wireless Keyboards Exposes Millions To Possible Identity Theft

Implicated were several manufacturers' wireless keyboards:

Anker
EagleTec
GE
HP
Insignia
Kensington
Radio Shack
Toshiba

Affected Devices

I bought an Insignia NS-PNK5011. On the list is the Insignia NS-PNC5011. I don't know that there's any difference. I got mine for setting up my RCA 10" Windows Tablet with Detachable Keyboard W101 V2. I probably will leave the keyboard at home when I take this tablet anywhere and figure no one within 250 feet is going to be sniffing for data when I do use it at home, a somewhat middle class suburban neighborhood. Anyway, I wonder:

1. Is my keyboard really insecure?
2. Is there anything I can do about it?
3. Is it really a negligible threat?

I could just (hopefully) make sure I don't type sensitive info on that wireless keyboard.

In the news story they said you could get a bluetooth keyboard instead.

 

[Fardringle]

Before you panic, ask yourself this question: What is the actual range of your wireless keyboard/mouse? Does it extend beyond the walls of your house? (most won't) If not, then a potential hacker would have to be inside your house in order to 'sniff' your keyboard, and in that case you have more problems than just the wireless keyboard...

 

[Muse]

Yeah, I'm not panicky, they said on the TV news program that the range would be limited to ~250 feet. That's beyond my property perimeters (40x100'). Probably the 250 figure is conservative, it's probably in reality a lot less. I don't think I should worry, but thought there might be something I should do, could do other than pony up for a bluetooth keyboard if I want to be bullet proof on this.

Sniffer in the house is not an issue.

I think it's a little odd that the manufacturer's didn't work out something. The higher end keyboards don't have that problem, or so the TV news segment suggested.

 

[WilliamM2]

Before you panic, ask yourself this question: What is the actual range of your wireless keyboard/mouse? Does it extend beyond the walls of your house? (most won't) If not, then a potential hacker would have to be inside your house in order to 'sniff' your keyboard, and in that case you have more problems than just the wireless keyboard...

Not only that, even if in range, how long will they have to monitor you before you type your social security number?

The process records everything a hacker needs to steal your identity: addresses, social security numbers, birthdates – basically everything you type – and you don’t need a computer science degree to figure it out.

My address? Oh my! Good thing I removed it from my mailbox. Clickbait article.

 

[sn8ke]

Not only that, even if in range, how long will they have to monitor you before you type your social security number?
My address? Oh my! Good thing I removed it from my mailbox. Clickbait article.

Well people do use them in public places too.
But I think this is only a new/different method. It's been possible before with things like KeySweeper which is a DIY Arduino sniffer (http://samy.pl/keysweeper/). And the cheap ubertooth device can sniff bluetooth signals for targeted attacks.

You should assume someone is always sniffing your wireless data in a public place like a coffeeshop, even if it's just the shop itself.

 

[WilliamM2]

Well people do use them in public places too.
But I think this is only a new/different method. It's been possible before with things like KeySweeper which is a DIY Arduino sniffer (http://samy.pl/keysweeper/). And the cheap ubertooth device can sniff bluetooth signals for targeted attacks.

You should assume someone is always sniffing your wireless data in a public place like a coffeeshop, even if it's just the shop itself.

I never use wi-fi in public areas. But if I did, it would be on a phone or laptop. No wireless keyboard.

 

[sn8ke]

I never use wi-fi in public areas. But if I did, it would be on a phone or laptop. No wireless keyboard.

I didn't mean you specifically, just a general statement.

But even with a phone or laptop in public I would suggest at the very least installing HTTPS Everywhere.
https://www.eff.org/https-everywhere

 

[WilliamM2]

I didn't mean you specifically, just a general statement.

But even with a phone or laptop in public I would suggest at the very least installing HTTPS Everywhere.
https://www.eff.org/https-everywhere

I'm still trying to figure out what that has to do with a wireless keyboard.

 

[sn8ke]

I'm still trying to figure out what that has to do with a wireless keyboard.

Nothing. As you said "No wireless keyboard."
Just referring to using a phone or laptop on public wifi.

 

[blackangst1]

There are wireless boards/mice that use AES 128 bit encrytion for their connection. I use this one for example.

 

[John Connor]

Since I use my laptop mostly while surfing the net and my desktop mostly for gaming, all they'll see is -- WWWWWW, SSSSS, AAAAA,DDDD.