Replies (59)

This is pretty crazy. I guess using biometrics (e.g. Touch ID) and auto fill is now the safer option for performing an action such as logging in from a public place or coffee shop?
If you're not already mitigating the risk of someone stealing 216.93 BTC because you are stupid and keeping it on a "hot" wallet, you should probably start... It always seemed like a probable risk, but now it's confirmed. View quoted note β†’
Hoshi's avatar
Hoshi 2 years ago
my father does this too. The bad part is: what he shouts is the password
A potential workaround is N randomly generated characters . So the screen prompts typing in those random characters and asks the user to insert password letters at random intervals. tr#fdawdftjs (in that case the password was farts and the random stream/intervals were generated by the noises in my head). There are attacks on this based on repetition, potential sound differences in chosen letters, and bad or compromised RNGs. The ratio of noise to filler matters. View quoted note β†’
Well, I know how to build a retina scanner if you ever need one :) But an iris scanner is probably easier. Just keep in mind that both Iris and Retina do slightly change over a long lifespan. If everything you have is tied to having access to your eyes you might lose everything on a simple cataract surgery.
Get an IBM Model M keyboard and they’ll never figure out what keys you’re hitting with the microphone clipping.
RealJohnDoe's avatar
RealJohnDoe 2 years ago
This is why I use a keepass vault with extremely hardened security. Key files, and auto type obfuscation. If they can get past that security they earned it..πŸ˜†
I switched to a permanent offline device for password store and use a QR reader for entering every password on my devices now, never use a physical keyboard. I guess I'll be safe-ish...
I read about those high res cameras in Walmart where the viewer can see whats on the cell phones and finger movements
↑