VoIP + social engineering (cunning) + hacking
Science Fiction, or not. Almost a year ago I read in Hispasec the possibility of listening to decrypt a password keyboard when you type. This is because each person tends to write in a different way than using force to press each key on the computer keyboard, despite the redundancy. Training
system first telling what has been written subsequently helps you recognize the sound of each key being thus able to reconstruct what is written.
Now someone is dedicated to talking on Google Talk (or any other VoIP software) with the victim, which in turn allows you to keep a written conversation with you. How to make the other person will write while maintaining audio conversation is something that every man being invented. It comes to this game of social engineering.
(I assume you hear the beats, at least on my laptop that has built-in microphone near the keyboard)
What if the victim manages to enter the page of your bank?
(For this Caixa Tarragona a writing system used for mouse clicks which is an effective security measure against this attack on science-fiction).
should be aware of this risk or science fiction?
Is it enough audio quality of these applications to distinguish the different presses?
0 comments:
Post a Comment