Wireless Keyboards and Security

[Demorve]

I was reading a document from the IT people where I work when I noticed that they have banned wireless keyboards because they believe they are a security risk. Is this true or are the IT people where I work a bunch of paranoid morons? I'm leaning toward the moron side and not just because of this wireless keyboard ban. Is there a security risk using wireless keyboards?

[rei]

They're paranoid morons.

[JM]

One of our major clients at my last company banned wireless keyboards.

I decided not to point out the major problems with security they had (as a result of them allowing senior management to get whatever they asked for) made this pointless.

[Coca Cola Zero]

Is there a security risk using wireless keyboards?

Yes, of course there is. Most wireless keyboards don't encrypt the data being sent from the keyboard to your computer and the ones that do tend to have laughably weak encryption (so that the keyboard device logic can be as simple (read: cheap) as possible). So basically anyone within reception range of your keyboard's wireless signal can remotely keylog the data without ever touching or installing anything on your system.

This doesn't mean your IT dept. aren't morons, though. As with JM's last company I'm sure there are dozens of more practical risks that they routinely allow. I wouldn't worry about wireless keyboards unless you're doing for-reals top secret work. But they are, in fact, a security risk.

[Demorve]

Yes, of course there is. Most wireless keyboards don't encrypt the data being sent from the keyboard to your computer and the ones that do tend to have laughably weak encryption (so that the keyboard device logic can be as simple (read: cheap) as possible). So basically anyone within reception range of your keyboard's wireless signal can remotely keylog the data without ever touching or installing anything on your system.

This doesn't mean your IT dept. aren't morons, though. As with JM's last company I'm sure there are dozens of more practical risks that they routinely allow. I wouldn't worry about wireless keyboards unless you're doing for-reals top secret work. But they are, in fact, a security risk.

Thanks, I didn't think of people intercepting the wireless signal with keyloggers. I still think they are morons with an intelligence factor slightly lower than "The Three Stooges", but then again "The Three Stooges" might be considered geniuses compared to most of them.

[Lunch of Kong]

Is there a security risk using wireless keyboards?

Yes. Depending on what your company does, it may or may not be reasonable to ban them. CIA headquarters? Ban them. Bank? Ban them. Your average software company? Probably not.