fmaury/seirdy.one
1
0
Fork 0
mirror of https://git.sr.ht/~seirdy/seirdy.one synced 2024-11-23 04:42:10 +00:00
Code Issues Projects Releases Wiki Activity

Syndicate, use relref

Browse source
This commit is contained in:
Seirdy 2024-11-20 10:36:41 -05:00
parent 5bd1befe74
commit efa2327747
No known key found for this signature in database
GPG key ID: 1E892DB2A5F84479
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
content/notes/your-keystroke-biometrics-are-everywhere.md
View file

@ -1,10 +1,15 @@
---
title: "Your keystroke biometrics are everywhere"
date: 2024-11-20T10:25:39-05:00
syndicatedCopies:
- title: 'The Fediverse'
url: 'https://pleroma.envs.net/objects/20ed1d72-24f0-4674-8d38-dafe4540d7cb'
- title: 'Bluesky'
url: 'https://bsky.app/profile/seirdy.one/post/3lbfbm6z34c2g'
---
Real time collaboration software and text boxes that rapidly save drafts to the cloud essentially log your fingerprintable typing behavior. The industry refers to this information as "keystroke dynamics" or "typing biometrics".
Other modern "operator signatures" are easier to minimize. A user can learn to [obfuscate writing style](https://seirdy.one/posts/2022/07/09/stylometric-fingerprinting-redux/), or can use keyboard navigation with different pointing devices to limit [fingerprinting of mouse behavior](http://jcarlosnorte.com/security/2016/03/06/advanced-tor-browser-fingerprinting.html).
Other modern "operator signatures" are easier to minimize. A user can learn to [obfuscate writing style]({{<relref "/posts/stylometric-fingerprinting-redux.md">}}), or can use keyboard navigation with different pointing devices to limit [fingerprinting of mouse behavior](http://jcarlosnorte.com/security/2016/03/06/advanced-tor-browser-fingerprinting.html).
Keystroke biometrics are difficult to anonymize without [installing software such as kloak](https://github.com/vmonaco/kloak) or browser extensions (the latter of which may add fingerprintable vectors) designed to cloak some of your typing habits. Signature typos, approximate typing speed, etc. will still leak. Alternatively, we could normalize typing messages out in a simple offline editors that don't store revision history before pasting them into other input fields.