JohnInSJ
Premium
join:2003-09-22
San Jose, CA
 ·SONIC.NET
| reply to jansson_mark
Re: Any SECURE wireless keyboard available?
1&5 are all you need
The StowAway iGo conforms to those. It's one of those fold-out portable jobbies, I got it for my WM phone.
- note that most BT HID devices are not discoverable unless they are in pairing mode. Most HIDs only allow connections to partnered devices, only support 1 partner, and allow secure as an option
Or am I missing something?
(Oh, and no wireless keyboard is secure. Nothing beats a wire to avoid all sniffing over the air) |
|
jansson_mark
Markus Jansson
Premium
join:2001-08-05
Finland
edit:
January 9th, @02:06PM
| quote:
1&5 are all you need
Wrong.
BT devices can be forced to drop connection and then you have to repair them. Listening to pairing process gives attacker all the information needed to construct encryption keys, EXCEPT the PIN-code (which he can guess - its easy, mostly PIN is either 0000 or 1234 on devices by default).
The only real security and secret IS the PIN code, thats why you should be able to change it and use long and random PIN on Bluetooth. |
|
JohnInSJ
Premium
join:2003-09-22
San Jose, CA
·SONIC.NET
| Ok, so 1,3,and 5 are good, or a Faraday cage for pairing
Seriously, if you care this much about security, no way in hell are you going to use a wireless keyboard unless you suddenly become insane.
That said, again the $30 cheapo iGo Bt keyboard does 1,3, and 5 - the passcode is entered right on the keyboard every time it is manually forced into a discoverable pairable state. |
|
jansson_mark
Markus Jansson
Premium
join:2001-08-05
Finland
| said by JohnInSJ  :
Seriously, if you care this much about security, no way in hell are you going to use a wireless keyboard unless you suddenly become insane.
I sayed I wanted a SECURE wireless keyboard. I meant what I sayed. Its same as saying I would want secure WLAN. It can be done. The question is, what products allow it and what dont...
quote:
That said, again the $30 cheapo iGo Bt keyboard does 1,3, and 5 - the passcode is entered right on the keyboard every time it is manually forced into a discoverable pairable state.
Link and quote please, what product you are talking about? How can you be sure about that? How long can the PIN be? How do you change it in receiver too?
--
My computer security & privacy related homepage »www.markusjansson.net
Use HushTools or GnuPG/PGP to encrypt any email before sending it to me to protect our privacy. |
|
JohnInSJ
Premium
join:2003-09-22
San Jose, CA
·SONIC.NET
| Google for the iGo Stowaway - same one I mentioned on my first post.
There is the manual
»info.igo.com/mobility/datasheets···tter.pdf
You enter the pin on the keyboard during paring, so you can enter as much as you want, and its per-paring, not stored in the keyboard.
My range quote was a joke. Good luck, I'm done here, except to again point out that only a wired keyboard is going to be 100% secure vs wireless attack. So if you are worried about someone 100ft away with a BT sniffer, you have to be bat-poop-crazy to even consider any bluetooth wireless devices.
So, who in the KGB did you piss off, anyway? |
|
jansson_mark
Markus Jansson
Premium
join:2001-08-05
Finland
| said by JohnInSJ :
Google for the iGo Stowaway - same one I mentioned on my first post.
Hmmm... Maybe I should have also mentioned, that I need a keyboard with scandinavic letters (Å, Ä, Ö), and that one doesnt support them. But thanks anyway!
quote:
You enter the pin on the keyboard during paring, so you can enter as much as you want, and its per-paring, not stored in the keyboard.
How can you enter the same PIN on the computer, where the BT receiver is?
quote:
My range quote was a joke. Good luck, I'm done here, except to again point out that only a wired keyboard is going to be 100% secure vs wireless attack. So if you are worried about someone 100ft away with a BT sniffer, you have to be bat-poop-crazy to even consider any bluetooth wireless devices.
Well, the range is really 1 mile. Not 100ft.
quote:
So, who in the KGB did you piss off, anyway?
I could tell you, but then I would have to kill you.  |
|
Anav
Sarcastic Llama? Naw, Just Acerbic
Premium
join:2001-07-16
Dartmouth, NS
| I would suggest that someone with such concerns is probably working within an organization that has the resources to produce/clandestinely purchase such devices.
Are you sure its not Jansson Bourne? |
|
jansson_mark
Markus Jansson
Premium
join:2001-08-05
Finland
| said by Anav :I would suggest that someone with such concerns is probably working within an organization that has the resources to produce/clandestinely purchase such devices. Freelancers too? |
|
CellRell
@verizon.net | reply to jansson_mark
btw it's said. not sayed. op |
|
