# Never let them hear you type.

**URL:** <https://boards.straightdope.com/t/never-let-them-hear-you-type/322658>\
**Category:** Miscellaneous and Personal Stuff I Must Share\
**Created:** [September 21, 2005, 3:53am UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658 "2005-09-21T03:53:31Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Q.E.D](https://avatars.discourse-cdn.com/v4/letter/q/51bf81/32.png) [@Q.E.D](https://boards.straightdope.com/u/Q.E.D)\
**Post date:** [September 21, 2005, 3:53am UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/1 "2005-09-21T03:53:31Z")

</div>

In doing some searching for the GQ question about the oldest audio recording available online, I came across [this interesting article](http://www.physorg.com/news6541.html). Seems another thing the truly paranoid have to worry about now:

> [@](#):
>
> A new security threat revealed by computer scientists at the University of California, Berkeley, may be enough to drive some people away from their computer keyboards and back to pen and paper. The researchers show that a simple audio recording of those keyboard clicks can betray the text you just entered, from passwords to secret love notes.

Even scarier:

> [@](#):
>
> Once the system is trained, recovering the text became more straightforward, even if the text was a password and not an English word. After just 20 attempts, the researchers were able to retrieve 90 percent of five-character passwords, 77 percent of eight-character passwords and 69 percent of 10-character passwords.

And it was all done with a $10 microphone like the ones you can buy in any computer or electronics retailer. Type softly, folks.

---

<div class="post-metadata">

**Author:** ![engineer\_comp\_geek](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/engineer_comp_geek/32/504_2.png) [@engineer\_comp\_geek](https://boards.straightdope.com/u/engineer_comp_geek)\
**Post date:** [September 21, 2005, 4:39am UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/2 "2005-09-21T04:39:43Z")

</div>

If someone is in my office to set up a mic they can just read my password off of the yellow sticky note stuck on the bottom of my monitor (insert grumbling and complaining about letter/number/long passwords required by IT here).

Still, kinda scary.

---

<div class="post-metadata">

**Author:** ![Spatial\_Rift\_47](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@Spatial\_Rift\_47](https://boards.straightdope.com/u/Spatial_Rift_47)\
**Post date:** [September 21, 2005, 4:44am UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/3 "2005-09-21T04:44:35Z")

</div>

That’s nothing. If you read Neal Stephenson’s \<i\>Cryptonomicon\</i\>, you find out about something called Van Eck Phreaking, wherein the interested party reads the magnetic field coming from the cable connecting the motherboard to the monitor, thereby getting not just keystrokes but the actual image itself – everything that’s on the target computer’s screen can be read this way. It’s sort of like tapping the phone line between monitor and CPU, and it’s a completely passive scan, so it has no effect on the computer on which it’s spying. I’m a bit hazy on the details as it’s been a while since I read the novel.

---

<div class="post-metadata">

**Author:** ![Q.E.D](https://avatars.discourse-cdn.com/v4/letter/q/51bf81/32.png) [@Q.E.D](https://boards.straightdope.com/u/Q.E.D)\
**Post date:** [September 21, 2005, 4:52am UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/4 "2005-09-21T04:52:16Z")

</div>

> [@Spatial Rift 47](#):
>
> I’m a bit hazy on the details as it’s been a while since I read the novel.

There is actually REAL technology that can do this. It essentially reads the RF emanations from the monitor screen using highly directional antennas to reconstruct the image. Read this PDF technical paper on the subject: [Optical Time-Domain Eavesdropping Risks of CRT Displays](http://www.cl.cam.ac.uk/~mgk25/ieee02-optical.pdf).

---

<div class="post-metadata">

**Author:** ![theLaughingMan](https://avatars.discourse-cdn.com/v4/letter/t/90db22/32.png) [@theLaughingMan](https://boards.straightdope.com/u/theLaughingMan)\
**Post date:** [September 21, 2005, 4:52am UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/5 "2005-09-21T04:52:27Z")

</div>

Damn, beat out while looking for a good web site that covers the info. This [is a website](http://www.eskimo.com/~joelm/tempestintro.html) about the governments response to ‘Van Eck Phreaking.’

My problem is this, like the above, one **could** do this but why? Unless it’s really, really, really important, it just sounds paranoid to be worried about this kind of stuff. If you’ve got information that you don’t want people see via Van Eck or Audio Keylogging, you need to secure your hardware better.

---

<div class="post-metadata">

**Author:** ![Cicero](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cicero/32/3594_2.png) [@Cicero](https://boards.straightdope.com/u/Cicero)\
**Post date:** [September 21, 2005, 9:12am UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/6 "2005-09-21T09:12:33Z")

</div>

I had a telephone hook up today so I sneaked home to call in from home. I am careful not to type at the time (no mute button at home) to ensure they aren’t convinced that my mind is elsewhere. All worked well until the mongrel cat came in and started meowing for food. Cats with a guts ache have no mute button either.

---

<div class="post-metadata">

**Author:** ![Smeghead](https://avatars.discourse-cdn.com/v4/letter/s/f1d935/32.png) [@Smeghead](https://boards.straightdope.com/u/Smeghead)\
**Post date:** [September 21, 2005, 5:23pm UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/7 "2005-09-21T17:23:36Z")

</div>

Expect to see this as a major plot point in all the network crime dramas next year.

---

<div class="post-metadata">

**Author:** ![Misnomer](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/misnomer/32/14897_2.png) [@Misnomer](https://boards.straightdope.com/u/Misnomer)\
**Post date:** [September 21, 2005, 5:37pm UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/8 "2005-09-21T17:37:35Z")

</div>

Ok, so, anyone know where I can get a silent keyboard? 😃

---

<div class="post-metadata">

**Author:** ![Greenback](https://avatars.discourse-cdn.com/v4/letter/g/2bfe46/32.png) [@Greenback](https://boards.straightdope.com/u/Greenback)\
**Post date:** [September 21, 2005, 5:42pm UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/9 "2005-09-21T17:42:09Z")

</div>

[Ask and you shall receive](http://cgi.ebay.ca/New-USB-Flexible-keyboard-silent-type-black_W0QQitemZ5811205356QQcategoryZ33965QQtcZphotoQQssPageNameZWDVWQQrdZ1QQcmdZViewItem)

---

<div class="post-metadata">

**Author:** ![Misnomer](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/misnomer/32/14897_2.png) [@Misnomer](https://boards.straightdope.com/u/Misnomer)\
**Post date:** [September 21, 2005, 5:55pm UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/10 "2005-09-21T17:55:42Z")

</div>

I love this board! 🙂

---

<div class="post-metadata">

**Author:** ![gotpasswords](https://avatars.discourse-cdn.com/v4/letter/g/c57346/32.png) [@gotpasswords](https://boards.straightdope.com/u/gotpasswords)\
**Post date:** [September 21, 2005, 6:49pm UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/11 "2005-09-21T18:49:31Z")

</div>

Speaking as a security geek, I’m not overly concerned about this. The rest of the security community’s also pretty blase’ about it.

It’s kinda-sorta a variant on Tempest emissions. This time, the emissions are noise, rather than electromagnetic, but if someone’s close enough to be able to hear your typing, they’re close enough to plug in a keylogger or otherwise physically mess with the computer.

However, as a proof-of-concept, it’s fascinating.

---

<div class="post-metadata">

**Author:** ![Mama\_Tiger](https://avatars.discourse-cdn.com/v4/letter/m/6de8d8/32.png) [@Mama\_Tiger](https://boards.straightdope.com/u/Mama_Tiger)\
**Post date:** [September 21, 2005, 6:54pm UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/12 "2005-09-21T18:54:31Z")

</div>

Here’s another silent keyboard:

[From our good friends at Think Geek](http://www.thinkgeek.com/computing/input/5a7f/)

I actually own this one – it rolls up into a 5’x5’ box and is absolutely silent when being used. (I got it for space-saving when traveling, not for silence, but why look a gift horse in the mouth?)

There are ways to get around _anything_ the Evil Folks dream up. Muwahaha…

---

<div class="post-metadata">

**Author:** ![DMark](https://avatars.discourse-cdn.com/v4/letter/d/e68b1a/32.png) [@DMark](https://boards.straightdope.com/u/DMark)\
**Post date:** [September 21, 2005, 6:58pm UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/13 "2005-09-21T18:58:53Z")

</div>

If you wear a tin foil hat while you type, they cannot hear the keyboard.  
Also, my passwords are either 1111, or 2222, or 3333…so it would have to be one very clever spy to figure out which one I am using that month!

I feel totally secure.

(For these and other tips, please refer to the Homeland Security manual, page 372)

---

<div class="post-metadata">

**Author:** ![chappachula](https://avatars.discourse-cdn.com/v4/letter/c/d2c977/32.png) [@chappachula](https://boards.straightdope.com/u/chappachula)\
**Post date:** [September 21, 2005, 7:07pm UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/14 "2005-09-21T19:07:49Z")

</div>

“keylogging” has been possible for 50 years. The CIA and KGB used microphones in embassy walls to pick up the click of typewriter keys hitting the platen( for the kids-- that’s the round part of the typewriter that the sheet of paper is /was rolled around ).  
But it probably cost more than $10.

Sorry, no cite. I just remember being surprised to read it in a newspaper report about the US Embassy in Moscow, which was discovered in 1975(?) to be bugged.It seemed like really exotic high-tech at the time.

---

<div class="post-metadata">

**Author:** ![chappachula](https://avatars.discourse-cdn.com/v4/letter/c/d2c977/32.png) [@chappachula](https://boards.straightdope.com/u/chappachula)\
**Post date:** [September 21, 2005, 7:11pm UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/15 "2005-09-21T19:11:17Z")

</div>

> [@DMark](#):
>
> Also, my passwords are either 1111, or 2222, or 3333…

gee, why didnt I think of that. …My password is usually abcdef.  
I guess you’re just smarter than me…

---

<div class="post-metadata">

**Author:** ![Spatial\_Rift\_47](https://avatars.discourse-cdn.com/v4/letter/s/a8b319/32.png) [@Spatial\_Rift\_47](https://boards.straightdope.com/u/Spatial_Rift_47)\
**Post date:** [September 21, 2005, 9:24pm UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/16 "2005-09-21T21:24:22Z")

</div>

> [@Q.E.D.](#):
>
> There is actually REAL technology that can do this. It essentially reads the RF emanations from the monitor screen using highly directional antennas to reconstruct the image. Read this PDF technical paper on the subject: [Optical Time-Domain Eavesdropping Risks of CRT Displays](http://www.cl.cam.ac.uk/~mgk25/ieee02-optical.pdf).

Oh, I knew it was real. It’s just that the novel was my only source of info on the subject.

> [@chappachula](#):
>
> > [@DMark](#):
> >
> > Also, my passwords are either 1111, or 2222, or 3333…
> 
> gee, why didnt I think of that. …My password is usually abcdef.  
> I guess you’re just smarter than me…

Ha! My passwords are 12345. Just like on my luggage, and my planet shield. [/geek]

---

<div class="post-metadata">

**Author:** ![Q.E.D](https://avatars.discourse-cdn.com/v4/letter/q/51bf81/32.png) [@Q.E.D](https://boards.straightdope.com/u/Q.E.D)\
**Post date:** [September 22, 2005, 1:38am UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/17 "2005-09-22T01:38:54Z")

</div>

> [@gotpasswords](#):
>
> Speaking as a security geek, I’m not overly concerned about this. The rest of the security community’s also pretty blase’ about it.

Oh, I completely agree. I just posted it because…well, you said it:

> [@gotpasswords](#):
>
> However, as a proof-of-concept, it’s fascinating.

Definitely!

---

<div class="post-metadata">

**Author:** ![Dr.Rieux](https://avatars.discourse-cdn.com/v4/letter/d/aeb1de/32.png) [@Dr.Rieux](https://boards.straightdope.com/u/Dr.Rieux)\
**Post date:** [September 22, 2005, 8:24am UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/18 "2005-09-22T08:24:20Z")

</div>

> [@Smeghead](#):
>
> Expect to see this as a major plot point in all the network crime dramas next year.

Coming soon to CBS: **CSI: Palo Alto**.

---

<div class="post-metadata">

**Author:** ![TokyoBayer](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tokyobayer/32/13989_2.png) [@TokyoBayer](https://boards.straightdope.com/u/TokyoBayer)\
**Post date:** [September 22, 2005, 8:46am UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/19 "2005-09-22T08:46:13Z")

</div>

From the article

> [@](#):
>
> “Background noise definitely made it harder to recover accurate text, but the differences became smaller after several rounds of feedback,” said Tygar. “Given enough tries, the computer algorithm will eventually come up with a pretty good estimate of the text that was typed.”
> 
> The researchers noted that sophisticated Karaoke systems already exist that can separate voice and music, so it may be possible to separate out music from the taps and clicks on a keyboard

I guess you could play a background noice of 1,000 monkeys trying to type Shakespeare, and it may protect you if it didn’t drive you nuts first.

---

<div class="post-metadata">

**Author:** ![gotpasswords](https://avatars.discourse-cdn.com/v4/letter/g/c57346/32.png) [@gotpasswords](https://boards.straightdope.com/u/gotpasswords)\
**Post date:** [September 22, 2005, 5:53pm UTC](https://boards.straightdope.com/t/never-let-them-hear-you-type/322658/20 "2005-09-22T17:53:50Z")

</div>

Or the Tom Tom Club’s _Wordy Rappinghood_. 😃
