Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Some of our users have installed Mouse Without Borders and I wanted to know if it is possible to intercept the traffic being sent between the two computers and read it in some meaningful manner. I was looking at the PCAP file of the traffic between the two and I couldn't discern anything, but I also am not an expert at reading packets and there is no mention of encryption anywhere about Mouse Without Borders. If the traffic is readable somehow, then user's password and other sensitive information could easily be read.

share|improve this question

2 Answers 2

up vote 4 down vote accepted

From the support site, it says that communication is encrypted.

The comment is oblique and there is no overt indication in the documentation that things are encrypted. This is an example of the question being asked by others with no satisfactory answer.

From Wireshark, it LOOKS encrypted, but there is little from the developer on how.

share|improve this answer
1  
At least with synergy I know it's not encrypted (opensource solution that's been available for years), and I can SSH tunnel it if I wish. No drag and drop file transfer though. –  ewanm89 Apr 13 '12 at 22:59
    
@ewanm89 ... that's a different product ... –  schroeder Apr 13 '12 at 23:34
    
It certainly doesn't look readable and since it is all internal traffic, it probably isn't a big risk. Thanks for taking another look at the traffic. –  nrduren Apr 16 '12 at 15:55

If you are asking because you want to know whether using Mouse Without Borders is safe in the presence of eavesdroppers: Given the lack of documentation on MWB's security/encryption model, and given the lack of other positive indicators, I would be cautious about relying upon MWB to be secure. Just because it looks scrambled in Wireshark doesn't mean that the system has implemented the encryption properly in a way that is truly secure.

If you are asking because you want to set up a network intrusion detection system to try to scan for some sort of problem in MWB traffic: sorry, I don't know. I suggest contacting the vendor that supplies your network intrusion detection system (as ultimately it would need to be supported by them anyway).

If you are asking because you want to spy on other users without their authorization, then this probably isn't the site to get help on that.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.