News for hackers. Stuff that matters.

A comment on The Google plasma globe affair of 2012. Parent comment

Re:The Google plasma globe affair of 2012 by duped on Monday October 10, 2022 @11:52PM (#33159330)
Pick one of the most popular keyboards used by your target and reuse it. That's how I'd do it. It's not going to get everyone but I think it's a legitimate approach.

The alternative methods looking at the time between keystrokes seems more reliable.

[ Parent | on HN ]
Re:The Google plasma globe affair of 2012 by yencabulator on Tuesday October 11, 2022 @02:38PM (#33167290)
Keystroke delay based heuristic is just naive, all that means is that the attack needs to happen on an idle system.

In an ideal world, vendors would actually populate the serial number field with a number that's at least semi-random.

On this computer, only the USB-C HDMI adapter and the fingerprint reader have a serial number that looks random :-(

[ Parent | on HN ]