Questions tagged [keyboard]
The keyboard tag has no usage guidance.
15 questions
40
votes
8
answers
8k
views
Are all USB-based attacks dependent on being able to inject keystrokes?
From what I've seen, USB-based attacks such as RubberDucky need to be able to open a terminal and then execute commands from there, usually to download and then install malware or to open a reverse ...
- 983
6
votes
3
answers
822
views
Keyboard isolation in Android
I'm currently running GrapheneOS on a Pixel 6a, and I have installed several alternative keyboards from F-Droid and the Play Store.
How isolated are keyboards in Android? When I enable a keyboard in ...
- 975
4
votes
1
answer
3k
views
Is bluetooth keyboard more secure than USB keyboard for a malicious firmware?
There are some threads talking about Bluetooth keyboard security. But I have a different concern.
I will only need 4 keys from an external keyboard, Home/End/PageUp/PageDn keys. Because I use them a ...
- 143
4
votes
1
answer
2k
views
MSTG-PLATFORM-11: Prevent custom third-party keyboards on Android?
The MASVS states in section "V6: Platform Interaction Requirements" MSTG-PLATFORM-11:
Verify that the app prevents usage of custom third-party keyboards whenever sensitive data is entered.
...
- 238
3
votes
0
answers
227
views
Does authentication for USB keyboards exist?
I think bluetooth has an authentication measure. As a user, when I get a new bluetooth keyboard, I have to:
Go to my computer, search for bluetooth devices
Put my keyboard in "pairing mode"
My ...
- 3,952
2
votes
1
answer
2k
views
How can I find out if a wireless keyboard is encrypted / secure?
I bought wireless keyboards from Ali Express (brand is Royal Kludge) that connect to the pc using either Bluetooth or a 2.4GHz USB dongle, and I want to make sure no one can read my keystrokes when I ...
- 673
1
vote
1
answer
1k
views
Can I safely sell a used keyboard without risk of new owner recovering previous inputs?
As far as of my knowledge goes, keyboard don't store keystrokes in their memory by default (excluding those bundled with keyloggers). The thing that comes to my mind though is that some keyboards do ...
- 45
1
vote
1
answer
2k
views
Apple bluetooth keyboard insecure connection?
From time to time, I see this dialog box pop up on my MacBook Pro screen. It typically happens as the computer wakes up from sleep.
Magic keyboard is trying to connect using an unsecured Bluetooth ...
- 423
1
vote
0
answers
79
views
Apple Magic Keyboards in Public Spaces Man-in-the-middle
Let's imagine that I leave a Mac with wireless peripherals in a public space like a co-working space that might end up with other wireless devices nearby or physical access (say, at nighttime). My ...
- 11
0
votes
1
answer
422
views
Do mechanical keyboards only have non-modifiable firmware baked in?
I always used to use a mechanical keyboard to type. Recently, I found a hardware trojan in my keyboard's firmware.
Can mechanical keyboard firmware be modified?
- 101
0
votes
1
answer
166
views
Remote monitoring of key strokes — is an RF retro reflector required?
Is it possible to remotely monitor key strokes on a laptop or is an RF retro reflector required?
If so, where would be the most likely location such a device would be placed?
- 1
0
votes
0
answers
117
views
Does the Samsung keyboard for Android phones send user input anywhere?
I've heard of this rumor (here, for example) but no clear investigation/confirmation.
- 101
0
votes
0
answers
69
views
Can a computer peripheral (keyboard) be more sophisticated than meets the eye and steal data? [duplicate]
There are lots of mechanical keyboards out on the market now. When you buy one from a known name it's likely there's nothing nefarious going on. But no name peripherals have flooded the market. Cheap ...
- 1
0
votes
0
answers
836
views
How to tell if a mouse/keyboard doesn't have on-board memory?
How to tell if a mouse/keyboard doesn't have accessible on-board memory? I know if it has: there are tells like custom macro buttons for example, and I was told by A4tech support: if a mouse doesn't ...
- 101
-1
votes
2
answers
643
views
Hide reverse shell window launched with HID attack
GOAL: the attacker insert into a victim's laptop an USB which act as a keyboard. The payload opens a terminal, executes a reverse shell and hides the terminal.
PROBLEM: the tests I did locally (...
- 567