ADVERTISEMENT

ADVERTISEMENT

ADVERTISEMENT

Wireless mouse vulnerability leaves billions of computers at risk, cyber security firm says

SAN FRANCISCO -- Marc Newlin and Balint Seeber are checking how far apart they can be while still able to hack into each other's computers.It turns out it's pretty far - 180 meters - the length of this alley in downtown San Francisco.The pair wor...

mice.PNG
We are part of The Trust Project.

SAN FRANCISCO - Marc Newlin and Balint Seeber are checking how far apart they can be while still able to hack into each other's computers.

It turns out it's pretty far - 180 meters - the length of this alley in downtown San Francisco.

The pair work for Bastille, a start-up cyber security company that's uncovered a flaw it says leaves millions of networks and billions of computers vulnerable to attack.

Wireless mice from various companies use unencrypted signals to communicate with computers.

"Because they haven't encrypted the mouse traffic, that makes it possible for the attacker to send unencrypted traffic to the dongle pretending to be a keyboard and have it result as keystrokes on your computer and this would be the same as if the attacker was sitting at your computer typing on the keyboard," Newlin said.

ADVERTISEMENT

A hacker uses an antenna, a wireless chip called a dongle, and a simple line of code to trick the wireless chip connected to the target computer into accepting it as a mouse.

"So the attacker can send data to the dongle, pretend it's a mouse but say 'actually I am a keyboard and please type these letters,'" Newlin said.

"If we sent unencrypted keyboard strokes as if we were a mouse it started typing on the computer, typing at a 1000 words per minute," Rouland said.

And at a thousand words a minute, the hacker can take over the computer or gain access to a network in seconds.

Chris Rouland says that while security standards at most companies are good at protecting networks and websites, they don't compensate for all cyber traffic across the entire radio spectrum. He says it's time to re-think cyber security, in a world where smart phones can transmit massive amounts of data per second.

"No one was looking at the air space," Rouland said. "So I wanted to build this cyber x-ray vision to be able to see what was inside a corporation's air space versus what was just plugged into the wired network or what was on a Wifi hotspot."

Bastille hopes to offer new types of sensors that consider more of the threats present in an increasingly wireless world.

For now it's keeping tabs on the wireless mouse problem and says some companies are offering firmware updates to correct the security issues.

ADVERTISEMENT

Bluetooth devices are not vulnerable to this type of attack.

Related Topics: TECHNOLOGY
What to read next
The illness is making about the same number or more people sick compared to last year, but far fewer are going to the hospital, doctor says.
A discovery made in the lab sparked the creation of Anatomic Inc., which sells human stem cell-derived sensory neurons to pharmaceutical companies for the possible creation of new, nonaddictive painkillers.
Rural Americans, who die by suicide at a far higher rate than residents of urban areas, often have trouble accessing mental health services. While 988 can connect them to a call center close to home, they could end up being directed to far-away resources.
"Minding Our Elders" columnist Carol Bradley Bursack hears from a reader wondering how to respond when their spouse with dementia sees or talks with his long-deceased parents.