Keystroke timing obfuscation added to SSH(1)

Re:Keystroke timing obfuscation added to SSH(1) by yencabulator on Tuesday August 29, 2023 @04:41PM (#37313720)

[delayed]

[ Parent | on HN ]

Re:Keystroke timing obfuscation added to SSH(1) by Vicinity9635 on Tuesday August 29, 2023 @06:44PM (#37315131)

I remember seeing this in Lotus Notes. Never saw it before that, or since.

[ Parent | on HN ]

Re:Keystroke timing obfuscation added to SSH(1) by yencabulator on Tuesday August 29, 2023 @06:48PM (#37315161)

Oh yes, that could be it! Employer made me run Windows in a VM to read corporate email.

My memory doesn't match videos I can find online of it, but that could be version differences.

[ Parent | on HN ]

Re:Keystroke timing obfuscation added to SSH(1) by compsciphd on Wednesday August 30, 2023 @09:45AM (#37322062)

At IBM someone made something called fetchnotes that worked like fetchmail, but worked with mail and calendar, made me able to get away with minimal usage of notes.

[ Parent | on HN ]

Re:Keystroke timing obfuscation added to SSH(1) by nmstoker on Tuesday August 29, 2023 @06:57PM (#37315260)

Yes. Wasn't it to make it harder spoof a password prompt with a static image popping up?

[ Parent | on HN ]

Re:Keystroke timing obfuscation added to SSH(1) by Cyykratahk on Wednesday August 30, 2023 @04:50AM (#37319252)

I think it was to provide an indication that the password was correct at a glance. (IIRC the number of dots in the password field was also generated, so it didn't necessarily match the number of chars)

The image was essentially a simple checksum. Each user would eventually memorise which icon was "theirs".

[ Parent | on HN ]

Re:Keystroke timing obfuscation added to SSH(1) by _emacsomancer_ on Tuesday August 29, 2023 @06:59PM (#37315284)

xsecurelock[https://github.com/google/xsecurelock] has a few variants on this.

[ Parent | on HN ]