60-Second Science

App Turns iPhone into spiPhone

An iPhone app can enable the smart phone to tell what somebody is typing on a nearby computer keyboard. Christopher Intagliata reports














Share on Tumblr

Listen to this Podcast

Used to be if spies wanted to eavesdrop, they planted a bug. These days, it's much easier. Because we all carry potential bugs in our pockets—smartphones. One team of researchers used an iPhone to track typing on a nearby computer keyboard with up to 80 percent accuracy. They presented the findings at a computer security conference in Chicago. [Philip Marquardt et al., (sp)iPhone: Decoding Vibrations from Nearby Keyboards Using Mobile Phone Accelerometers, 18th ACM Conference on Computer and Communications Security]


The researchers designed a malicious app for the iPhone 4. When you place the phone near a keyboard, it exploits accelerometer and gyroscope data to sense vibrations as the victim types—detecting whether keystrokes come from the left or right side of the keyboard, and how near or far subsequent keys are from each other. Then, using that seismic fingerprint, the app checks a pre-created "vibrational" dictionary for the most likely words—a technique that works reliably on words of three letters or more.

Of course, you'd need to install the app to allow it to spy. But whereas most apps have to ask permission to access location data or the camera, that's not so for the accelerometer. This kind of attack may offer good reason to limit accelerometer access too—and keep iPhones from becoming "spiPhones."

—Christopher Intagliata

[The above text is a transcript of this podcast.]


6 Comments

Add Comment
View
  1. 1. BobTheAxolotl in reply to Didonai 02:11 AM 10/27/11

    That's an awful lot of anger you're holding towards some imaginary person using an app that's never been released to the public to spy on you. Maybe you should channel that aggression towards something useful, like breaking your keyboard. Then, no one would be able to spy on you typing, and you wouldn't be able to embarrass yourself on the internet by expressing your thoughts, ideas, and emotions.

    Reply | Report Abuse | Link to this
  2. 2. Postulator 03:26 AM 10/27/11

    So it's a vibraphone?

    Reply | Report Abuse | Link to this
  3. 3. Postulator in reply to Didonai 03:27 AM 10/27/11

    Would you like to talk about your anger management and social exclusion problems? It's okay, we're here for you...

    Reply | Report Abuse | Link to this
  4. 4. sijodk 10:02 AM 10/27/11

    "Then, using that seismic fingerprint, the app checks a pre-created "vibrational" dictionary for the most likely words—a technique that works reliably on words of three letters or more."

    I think this approach is brilliant in its simplicity. However, it should be noted that it would fail to be of much help in guessing passwords. At least when people have been at least a tiny bit sensible about their choice of those.

    Reply | Report Abuse | Link to this
  5. 5. NatureTM 12:32 PM 10/27/11

    Soe I hav nuttin tue wuriee abowt sinse I tipe liek thiz?

    Reply | Report Abuse | Link to this
  6. 6. luvanu 02:48 AM 10/28/11

    If China can break-in firewalls to enter the White House whats left? There is no privacy. As advance more foretold. But advantages are innumerable. Make your choice. Like to use quill and ink again!!

    Reply | Report Abuse | Link to this
Leave this field empty

Add a Comment

You must sign in or register as a ScientificAmerican.com member to submit a comment.
Click one of the buttons below to register using an existing Social Account.

More from Scientific American

See what we're tweeting about

Scientific American Editors

More »

Free Newsletters


Get the best from Scientific American in your inbox

  SA Digital

Latest from SA Blog Network

  SA Digital

Science Jobs of the Week

Email this Article

App Turns iPhone into spiPhone

X
Scientific American Magazine

Subscribe Today

Save 66% off the cover price and get a free gift!

Learn More >>

X

Please Log In

Forgot: Password

X

Account Linking

Welcome, . Do you have an existing ScientificAmerican.com account?

Yes, please link my existing account with for quick, secure access.



Forgot Password?

No, I would like to create a new account with my profile information.

Create Account
X

Report Abuse

Are you sure?

X

Institutional Access

It has been identified that the institution you are trying to access this article from has institutional site license access to Scientific American on nature.com. To access this article in its entirety through site license access, click below.

Site license access
X

Error

X

Share this Article

X