5 ms·

And this worked? Seems hard to believe.

• nerdponx 9y ago
  I think I read about a similar "keylogging" technique in Popular Science at one point.
  • trendia 9y ago
    Researchers recover typed text using audio recording of keystrokes (2005) [0] [0] http://www.berkeley.edu/news/media/releases/2005/09/14_key.shtml http://www.berkeley.edu/news/media/releases/2005/09/14_key.s...
    • purrcat259 9y ago
      Turns out my ducky blues mechanocal keyboard has a big disadvantage when it comes to this then
• cmdrfred 9y ago
  It would cut entropy down by a great deal if you even simply knew how long the password was.
  • wruza 9y ago
    I've seen a movie where a bad guy entered password and a good girl counted the number of characters: one-two-three-four-five. Then she noticed that his suit had "GREED" badge on it. Combining these two facts she succesfully hacked into his laptop and prevented some shit. Since then I started to always mix few backspaces into my passwords. Not that I'm really bad, but life is life.
    • ballenf 9y ago
      The backspace key on most keyboards has a very distinct sound. Not to mention it's positioning means timing will be noticeably different as well. Might be better off mixing in a few meaningless modifier keys (press Ctrl, Alt or Caps Lock).
      • sigjuice 9y ago
        I usually type a long string of gibberish, sneak in ctrl-U at some point and then enter my actual password
        • idanoeman 9y ago
          Unless the gibberish is the same every time, the repeated sound of your password will still be parsable from a long enough sound recording of your computer usage.
          • sigjuice 9y ago
            The gibberish is unlikely to ever be the same.
            • jaredsohn 9y ago
              I think it is more accurate to say that the gibberish is unlikely to _always_ be the same. I think one can tend to create similar gibberish over time. I've worked on a system where I needed to do a new signup every time I wanted to test a feature and I've run into issues where the gibberish I entered matched an account that I had previously created.
              • NeutronBoy 9y ago
                Everyone here has accounts in development databases named 'aaa', 'asd', 'asdf', 'qwer', 'hjkl', etc!
                • BigJono 9y ago
                  Nope, mine are all oeunt, oeunth, huet, uehis, ais, etc
                  • uiri 9y ago
                    You are a user of the Dvorak layout, I take it? Colemak seems like it would have a different fingerprint.
    • PhasmaFelis 9y ago
      I feel like the real lesson here is "don't wear your password."
  • SamReidHughes 9y ago
    Barely. Trying all the passwords less than N characters long is way cheaper than trying the ones that are exactly N.
    • cmdrfred 9y ago
      Best case scenario wouldn't you have to do both without knowing the length?
      • thfuran 9y ago
        Right but even with alphanumeric only, only about 2% of passwords of length N or less are less than length N.
        • baddox 9y ago
          The advantage is having the upper bound.
• deleted 9y ago
  [deleted]
• scoot 9y ago
  No. The idea that you could discern the difference between keys based on their relative volume due to their distance and angle from the recording device is complete nonsense. OP is living a fantasy and taking HN along for the rise.
• scoot 9y ago
  No. The idea that you could discern the difference between keys based on their relative volume due to their distance and angle from the recording device is complete nonsense. OP is living a fantasy and taking HN along for the ride.