Monday, December 17, 2012

Other issues

Keystroke logging

Keystroke logging (often called keylogging) is a method of capturing and recording user keystrokes. While it is used legally to measure employee productivity on certain clerical tasks, or by law enforcement agencies to find out about illegal activities, it is also used by hackers for various illegal or malicious acts. Hackers use keyloggers as a means to obtain passwords or encryption keys and thus bypass other security measures.

Keystroke logging can be achieved by both hardware and software means. Hardware key loggers are attached to the keyboard cable or installed inside standard keyboards. Software keyloggers work on the target computer's operating system and gain unauthorized access to the hardware, hook into the keyboard with functions provided by the OS, or use remote access software to transmit recorded data out of the target computer to a remote location. Some hackers also use wireless keylogger sniffers to collect packets of data being transferred from a wireless keyboard and its receiver, and then they crack the encryption key being used to secure wireless communications between the two devices.

Anti-spyware applications are able to detect many keyloggers and cleanse them. Responsible vendors of monitoring software support detection by anti-spyware programs, thus preventing abuse of the software. Enabling a firewall does not stop keyloggers per se, but can possibly prevent transmission of the logged material over the net if properly configured. Network monitors (also known as reverse-firewalls) can be used to alert the user whenever an application attempts to make a network connection. This gives the user the chance to prevent the keylogger from "phoning home" with his or her typed information. Automatic form-filling programs can prevent keylogging entirely by not using the keyboard at all. Most keyloggers can be fooled by alternating between typing the login credentials and typing characters somewhere else in the focus window.25

Wireless keystroke logging

Also known as remote keylogging or wireless keylogging.

In their research, "Compromising Electromagnetic Emanations of Wired Keyboard",26 Vuagnoux and Pasini have provided evidence that modern keyboards radiate compromising electromagnetic emanations. The four techniques presented in their paper prove that these basic devices are generally not sufficiently protected against compromising emanations. Additionally, they showed that these emanations can be captured with relatively inexpensive equipment and keystrokes are recovered27 not only in the semi-anechoic chamber but in practical environments as well (e.g. office). The consequences of these attacks are that compromising electromagnetic emanations of keyboards still represent a security risk. PS/2, USB, laptop and wireless keyboards are vulnerable. Moreover, there is no software patch to avoid these attacks. Hardware has to be replaced to obtain safe devices. Due to cost pressure in the design and lack of knowledge, manufacturers do not systematically protect keyboards. Even in the practical space of an office with multiple keyboards, Vuagnoux and Pasini were able to deduce a specific fingerprint for every keyboard. When multiple keyboards are radiating at the same time, they are able to identify and differentiate them.

Physical injury

Proper ergonomic design of computer keyboard desks is necessary to prevent repetitive strain injuries, which can develop over time and can lead to long-term disability.28

The use of any keyboard may cause serious injury (that is, carpal tunnel syndrome or other repetitive strain injury) to hands, wrists, arms, neck or back. The risks of injuries can be reduced by taking frequent short breaks to get up and walk around a couple of times every hour. As well, users should vary tasks throughout the day, to avoid overuse of the hands and wrists. When inputting at the keyboard, a person should keep the shoulders relaxed with the elbows at the side, with the keyboard and mouse positioned so that reaching is not necessary. The chair height and keyboard tray should be adjusted so that the wrists are straight, and the wrists should not be rested on sharp table edges. Wrist or palm rests should not be used while typing.

Some adaptive technology ranging from special keyboards, mouse replacements and pen tablet interfaces to speech recognition software can reduce the risk of injury. Pause software reminds the user to pause frequently. Switching to a much more ergonomic mouse, such as a vertical mouse or joystick mouse may provide relief. Switching from using a mouse to using a stylus pen with graphic tablet or a trackpad can lessen the repetitive strain on the arms and hands.

Bacteria

A growing body of research raises the question if keyboards can be a health hazard. Some keyboards were found to contain five times more germs than a toilet seat.29 Dr. Aaron Glatt, spokesperson for the Infectious Disease Society of America, remembers that "there is no surface under the sun ... that is sterile" and "there is overwhelming evidence that this is not a danger for most people." Basic hygiene measures like handwashing and not sharing the keyboard may reduce exposure to harmful bacteria.

No comments:

Post a Comment