Sonar Keyboard Logs You Out To Protect Your Data 175
Zothecula writes "While the simple act of logging off a workstation is an obvious way to protect sensitive data – like that used by healthcare providers, pharmacies, banks and government agencies – it is all too easy for users to forget and leave the data not only viewable, but also editable by anyone who happens to pass by. Custom keyboard supplier Key Source International (KSI) has developed a keyboard that does the remembering for you, logging out as soon as the user physically leaves the keyboard."
What a great practical joke this would be. (Score:4, Interesting)
Re: (Score:2)
Re: (Score:2)
And BTW, the medical field is not dripping with dollars. Despite the incredible costs many hospitals / clinics are running in the red. It makes little sense, but there your are. If I thought this thing was the greatest thing since sliced bread, I would have to argue passionately to get it funded and likely be dumped way down the list since we can't bill for keyboards.
The Das Keyboards I could probably get IS to buy a couple of out of petty cash just to be
Switch in a seat cushion and xlock... (Score:3)
When I worked about a decade ago at a place where people with dubious intentions could access the work area, I ended up making a switch embedded in a seat cushion that was connected to the serial port of my workstation. When I got up, the program sitting and monitoring that port would automatically xlock the machine.
It was an ugly hack, but I never had unattended terminal issues unlike some cow-orkers.
Re: (Score:2)
When I worked about a decade ago at a place where people with dubious intentions could access the work area, I ended up making a switch embedded in a seat cushion that was connected to the serial port of my workstation. When I got up, the program sitting and monitoring that port would automatically xlock the machine.
It was an ugly hack, but I never had unattended terminal issues unlike some cow-orkers.
In 90% of office scenarios the general public doesn't have access to the office computers. I can see guarding against the public in a hospital setting for example, but for most people the office should be secured against outsiders only.
My computer is like the "pocket watch" in "Gangs of New York". I leave it out in the open and invite people to mess with it. Yet they don't... because they know, if they do, there will be repercussions... and they will be horrific.
Re: (Score:2)
My computer is like the "pocket watch" in "Gangs of New York". I leave it out in the open and invite people to mess with it. Yet they don't... because they know, if they do, there will be repercussions... and they will be horrific.
And the rest of us just clean the cheetos off occasionally.
Re: (Score:2)
You were assuming Windows... the SPARC workstation I was using back then definitely didn't have a Windows key.
Yes, I had a macro with CDE that would lock the screen, but I wouldn't trust my job to making sure I nailed it for a quick coffee break. Especially with people who would be zooming for an unattended machine with a root prompt on it.
Risk Analysis (Score:3)
Re: (Score:2)
Bad idea.
Most people do work at their desk, not necessarily at the key board. all this will do is frustrate employees and the will work aorund it.
No, A web cam the detect when you physically leave your desk would be a good idea.
Re: (Score:2)
Re: (Score:2)
No, an RFID chip implanted in each employee's head would be a good idea.
(Stolen from Dogbert's School of Managment's How to spread rumours.)
Boss: No, we are not considering implanting implanting RFID chips into each employee's head! Not even with the added bonus of a partial lobotomy during the same surgery. It never even occurred to us to think about that. And certainly not at the prices we were quoted.
These keyboards are horribly insecure (Score:2)
These keyboards are completely hackable by dolphins.
If you work at an aquarium or have dolphin coworkers, I would avoid these keyboards.
IT Support? (Score:4, Insightful)
This is going to be nightmarish for IT and it will generate all kinds of useless calls as a result. My guess is we'll be seeing some people using duct tape over the sensors on the first day too, making these expensive keyboards totally useless, apart from being a great way to inflate IT budgets, to ensure they stay plump.
Re: (Score:2)
A bigger concern would be supporting translucent jellyfish.
RFID? (Score:3)
Couldn't a solution using RFID be used. Basically you have a RFID detector with 1m radius of detection. The detector would poll the card to see if is there and logs you out or locks your session if you leave the zone.
Re: (Score:2)
Re: (Score:2)
I suppose this is where having virtual computers is useful, since you would essentially always be logged in, but your session would only be accessible as long as you are connected and could simply switch to which ever terminal you are at.
Re: (Score:2)
The answer there is to use the same card but a different RFID token as a door unlock.
Leaving the ID card behind is fine but you can't enter the employee lounge, or access other areas.
Re: (Score:2)
Why not have the same RFID? Many companies manage the card list on a central system.
Re: (Score:2)
because security through stupidity is never good.
Do you use the same key to unlock your car as you do your house?
Besides with two RFID tags in one device long range scanning becomes harder.
Re: (Score:2)
could always add .. where my mom works if you don't have your ID on you and you are in the building you are fired. no 3 strikes no questions no excuses.
Re: (Score:2)
I've looked at this, and the commercially available ones are only good for a few (4-6) inches. that's 10-15cm for metric folk.
Re: (Score:2)
Tech (Score:2)
All the technology in the world won't fix staff who don't want to do what you tell them. All this will do is piss off people who have to keep going to and from their desk while in sight of their machine to get files or talk to visitors until they figure out a way to trick the keyboard into thinking they're always at their machine, at which point you've spent a lot of money for nothing.
Put reasonable security policies in place, punish your staff proportionally if they repeatedly violate them and don't try to
Duct tape (Score:2)
Will fix the problem of these keyboards logging you out when you leave for a quick coffee. Once again, any kind of security is thwarted by duct tape.
Re: (Score:2)
Will fix the problem of these keyboards logging you out when you leave for a quick coffee. Once again, any kind of security is thwarted by duct tape.
They've got that one figured out: If the sensor detects a range of zero, corresponding to the duct-tape trick, your workstation will play a tinny rendition of "Don't Stand so Close to Me" at earsplitting volume until one of your enraged coworkers rectifies the situation and then shoves a pen into your eye...
Re: (Score:2)
if it can give actual depth.. then just don't except any readings less than 1ft ... but then we can defeat it with a cardboard cutout (which would be funny to see really)
Prior art? (Score:2)
Another alternative - bluetooth phone as a sensor (Score:4, Informative)
For linux:
http://blueproximity.sourceforge.net/ [sourceforge.net]
For Win:
http://btprox.sourceforge.net/ [sourceforge.net]
Comment removed (Score:4, Interesting)
Re: (Score:2)
btprox is overrated, tried it and found I could walk nearly anywhere in the office and the computer wouldn't lock, bluetooth has too large a range for this.
Irritating (Score:2)
Wow, that is potentially (highly) irritating.
Imagine:
* You duck down in your chair to grab a pencil you drop
* You lean over to open a desk drawer
* You lean back to take a moment of reflection
* You step to the side (if standing) to grab something
* You're skinny and the sensors can't see you
* You (potentially) don't move enough while watching something on the screen
* You do a lot of back-and-forth in a small area (eg. a pharmacy, where you've got to fetch medications after looking them up, then come back to t
Re: (Score:2)
Wow, that is potentially (highly) irritating.
Imagine:
* You duck down in your chair to grab a pencil you drop
* You lean over to open a desk drawer
[ etc. ]
A more sensible meme would be to lock the machine when the user steps away instead of logging them out, to be sure. Hopefully the sensors are accurate. Even then, there are many cases (within the designed use case) where this probably isn't appropriate or useful. Biometric logins/unlocking would likely be a bare minimum additional component, IMO.
Nearly every OMGITCANTPOSSIBLYWORK scenario suggested above can be fixed by proper adjustment of various sensitivity and timeout settings. And, if you read the article, it can lock the system, or log out, or potentially anything you want it to do. Why automatically assume that the people who designed such a thing are incompetent boobs?
"The SonarLocID Keyboard connects to a PC via USB and can be configured via an included programming application that allows the user to program custom keystrokes as well as d
PFFFT! Thats nothing! (Score:2)
My computer has a state of the art dynamic temporal activity sensing program that will automatically lock my workstation! I can even set it for different amounts of time!
So if at ANY time I am not doing any activity on my computer, for a period of time, say 5 or 10 or even 15 minutes (Whatever I want!) say if I get up, or fall asleep or stare out the window too long, it will automatically and magically lock up my computer. Talk about safety! Amazing!
Re: (Score:2)
So your computer is secure as long as your nearby enough to notice it, and no one can walk into the room 30 seconds after you run to the bathroom and use your computer.
5 minutes is enough time to walk into an unlocked house and walk out with a computer and TV.
Re: (Score:2)
exactly. for the Parent to my post, you can visit him selling girl scout cookies to find out if he locks his door while he is home. Then wait for him to lock himself in the bath room and take his unsecured computer because it is on a 5 minute delay.
Or... (Score:2)
You could just, you know, use that option that that requires a password after coming back from screensaver and set the screensaver idle timer rather low.
(By screensaver I mean turning off the monitor, I haven't used an actual screensaver since the 90s)
PFFT! Thats Nothing! (Score:2)
I just created my own motion sensing system to log you out. It melds the security of handcuffs to the authenticating power of a USB key. BAM!
Exploit (Score:2)
User testimony (Score:2)
This keyboard is so great that I am now even more likely to forget my sessions open on computers that aren't equipped with it compared with before.
Why a whole keyboard? (Score:2)
Why not just a USB transducer?
Looked into this idea last year (Score:2)
Re: (Score:2)
Doesn't have to be so complicated... (Score:2)
The tech doesn't have to be quite so "high." You just need a magnetic receptacle at the terminal. Attached to your belt, on a tether, is a little magnetic bead. When you sit down, you put the bead in the receptacle and the terminal activates. When you get up and walk away the bead pops out and the terminal locks.
They've had this kind of thing on watercraft forever. If you're thrown from the boat, the tether pops and the ignition cuts.
Re: (Score:2)
Attached to your belt, on a tether, is a little magnetic bead.
So now you're telling me I'll have to wear pants?
screen lock (Score:2)
I have way too many things open to be logging out all the time --- it's a royal pain and I lose too much state, so I just lock the screen when I leave. It was easy to build the habit as for a while I had a co-worker who was a joker who had a warped sense of humor, so I was careful to make sure he never had a chance to screw anything up. It's now a reflex...
USB proximity lock (Score:2)
Screensaver (Score:2)
How is this solution better than a screensaver with the 'lock after X mins of inactivity' option?
lol (Score:2)
If the data truely needs that kind of security the answer is simple. When the inactivity time limit is reached and the machin
Re: (Score:3, Informative)
Rule 1: The weakest link in computer security is the user.
Rule 2: See rule 1.
Rule 3: See rules 1 and 2.
Re: (Score:2)
...which is why, after a couple of times of this thing logging them out when they didn't want it to, they'll find a way to defeat it.
I wonder if unplugging it from the PC would work?
Re: (Score:2)
Re: (Score:2, Insightful)
Tried sonar mounted above the monitor at our hospital already. Unsurprisingly, you a corrrect. The genius docs and nurses taped tongue depressors with a small index card to hang in front of the device so it wouldn't log off...
Re: (Score:2)
Re: (Score:2)
Companies who make security should really have two teams:
- Team A in charge of security
- Team B in charge of defeating/bypassing security
Re: (Score:2)
They usually do.
However Team M (managers) never let the two team mingle, or even know each side exists.
look at HBGary for more information. They never bothered to look at their own systems, or audit their own processes for flaws.
Re: (Score:2)
It's not terribly unreasonable to expect some cooperation from the people you're trying to protect. If you have locks on your building at night but people keep propping the door open, you don't look for ways to defeat the door propping, you go beat heads and tell them to knock it off.
The only time it makes sense to get involved in a forced-security escalation
Re: (Score:2)
It can also be programmed to simply lock the session.
Re:Hey, I've got an idea. (Score:5, Insightful)
I'm sure that would work GREAT in a hospital setting where a nurse keying in data has to jump up and run down the hall to a patient who is crashing..... and then gets fired because she forgot to log herself out on 3 occasions. /sarcasm
Re:Hey, I've got an idea. (Score:4, Interesting)
There are solutions to that kind of problem. Basically you can have a wireless token. I've seen them advertised before where they automatically log you out as soon as the token gets out of range. It's not perfect, but fine for situations where you absolutely need to be logged out.
Re: (Score:2)
There are solutions to that kind of problem. Basically you can have a wireless token. I've seen them advertised before where they automatically log you out as soon as the token gets out of range. It's not perfect, but fine for situations where you absolutely need to be logged out.
This does more or less the same thing.
There can be multiple solutions to the same problem.
Re: (Score:2)
Re: (Score:2)
That never fails to surprise me, even though there are keyboards out there that are designed to take a bath or a quick rub down well.
Re: (Score:2)
Additionally, depending upon the implementation you can also cope with situations where one might fool the keyboard into thinking your still there, when what really happened was the nurse got knocked out or you were in the vicinity as she left. Of course wireless tokens aren't perfect either, but at least they take some savvy and equipment to duplicate.
Re: (Score:3)
Re: (Score:2)
Re: (Score:2)
I use Proximity [google.com] on the Mac. It lets you run an Applescript when your phone comes in range, and another when it goes out of range.
Re: (Score:2)
I successfully used http://code.google.com/p/reduxcomputing-proximity/ [google.com] for this purpose under OS X. Have not looked to see if there's something for Windows.
Re: (Score:2)
I think some kind of body/facial recognition software with a webcam might be a nice cheap way to do it. Whenever the program detects that the user has left their chair, lock the session.
Re: (Score:2)
Unless your camera can detect depth, I'm pretty sure that kind of security is easy to bypass. See Columbo And The Murder Of A Rock Star [imdb.com].
Re: (Score:2)
If it was only responsible for locking rather than unlocking, and it locked within seconds of you standing up, then it would be pretty effective I'd think. You can detect depth of a sort simply by the size of the body, but we may all have 3D webcams in a few years anyway.. depends whether the fad turns out not to be a fad this time.
Plus, I would probably still hit ctrl-alt-l when leaving my desk anyway, this would just be a backup measure.
Re: (Score:2)
For Linux, install blueproximity. Very useful.
Re: (Score:2)
I set that up a while ago, I like it.
However it's easy to defeat the unlock portion by cloning someone's bluetooth device ID.
Re: (Score:2)
Do you mind posting a link to the wireless token product in question? I've been working on one myself, and I'd love to know what's out there already. Thanks!
Re: (Score:2)
If you have a wireless token why not use it to better effect - locking and unlocking the terminal display as and when you are in or out of range. Saves a bit of hassle logging in all the time.
Good for Healthcare, w/ appropriate software (Score:2)
I'm sure that would work GREAT in a hospital setting where a nurse keying in data has to jump up and run down the hall to a patient who is crashing..... and then gets fired because she forgot to log herself out on 3 occasions. /sarcasm
Used to do healthcare IT. I wrote a gizmo that would clear the user's Kerberos ticket when they walked away for more than, I think, 15 seconds, using a serial/IR dongle taped to the top of the monitor. The nice thing about the Kerberized sessions were that lacking a ticket o
Re: (Score:2)
Right, because everyone who knows the dangers is perfect and is never distracted. Way better to force the user to conform to the computer than make the computer conform to the user.
Re: (Score:2)
try understanding the needs of your users before throwing "solutions" at them.
My practice is to decant the solution, then throw the precipitate at them. Less wasteful.
Re:Hey, I've got an idea. (Score:4, Interesting)
Simply instruct your employees on the importance of not leaving a workstation unsecured (i.e. locked, logged off, etc.). Use a 3-strike system, if you must. There really shouldn't be a need for such fancy equipment.
In the end, though, I guess it comes down to whichever method of prevention is less expensive, or less time-consuming..
Bigger problem: The whole concept of logging in / logging out doesn't work well for lots of people. Let's say I have to key some data in or look something up - OK, log into the system. I then have to move away from the terminal to do something (just a reminder to Slashdotter's - not everyone is physically chained to their desk nor locked in the basement all day). I do this day in and day out. If the system logged me out every time I moved away from the keyboard or I had to log out every time my head didn't block the screen I would be one annoyed camper.
Sure, there are 'technical fixes' - use a laptop (doesn't work well if I'm standing), use a tablet (none one them yet work with clunky Enterprise software that will not be significantly upgraded in my lifetime), use a smart card system (we don't have one, aren't likely to get it). So yep, there are security holes all around the place but you always have the balance between security and usability.
A more useful system, IMHO, would be one that automatically logged off every PC in a room after a motion detector noted a period of inactivity. We do have issues where people leave for the day, go into another area or just close the door and leave systems up. That's a much bigger attack surface than leaving a PC logged in with 8 other employees wandering around.
Re: (Score:2)
A more useful system, IMHO, would be one that automatically logged off every PC in a room after a motion detector noted a period of inactivity. We do have issues where people leave for the day, go into another area or just close the door and leave systems up. That's a much bigger attack surface than leaving a PC logged in with 8 other employees wandering around.
And that depends on your domain. In many places, e.g. a software development house, sure. However, in something like a doctor's office, where even t
Re: (Score:2)
What I worry about is a PC left on in a side room which isn't staffed continuously and some bored
Re: (Score:2)
The intention is for this to be used in environments where unlocking the computer can be done with a proximity card or a fingerprint, and scanners for both are built into this keyboard. So, all it takes to return to your work is sit down, wave your card over the keyboard, and get back to typing.
Re: (Score:2)
Sure, there are 'technical fixes' - use a laptop (doesn't work well if I'm standing), use a tablet (none one them yet work with clunky Enterprise software that will not be significantly upgraded in my lifetime),
Run your clunky enterprise app on an Windows Terminal Server and RDP into it, the application need not know that you're on a tablet.
A more useful system, IMHO, would be one that automatically logged off every PC in a room after a motion detector noted a period of inactivity. We do have issues where people leave for the day, go into another area or just close the door and leave systems up. That's a much bigger attack surface than leaving a PC logged in with 8 other employees wandering around.
Isn't a simple inactivity timer just as effective? Just set your PC's inactivity timer to whatever you'd set your motion sensor inactivity timer to (5 minutes, 10 minutes, whatever) and you've removed most of the threat of computers running unattended all day without the added complexity of a motion sensor (which, if it works as well as my office light sensor, will lock your co
Re: (Score:2)
inactiviety timers fail easily. 5 minutes is enough time for a nurse to get called away, walk up to her terminal do something and walk away. for such a timer to be secure in a high secure environment you need it to be 30 seconds long at which point it is more of a hassle.
The best so far is the id/RFID tag to login, logout when out of range. To log in the card must be present and a finger scanned.(two factors), every 15 -30 seconds the computer checks the proximity of the RFID tag or it logs you out.
If yo
Re: (Score:2)
inactiviety timers fail easily. 5 minutes is enough time for a nurse to get called away, walk up to her terminal do something and walk away. for such a timer to be secure in a high secure environment you need it to be 30 seconds long at which point it is more of a hassle.
Please read my post - I was responding to the poster that said he has a PC in a room with 8 other employees, he's not a nurse in a patient's room:
A more useful system, IMHO, would be one that automatically logged off every PC in a room after a motion detector noted a period of inactivity. We do have issues where people leave for the day, go into another area or just close the door and leave systems up. That's a much bigger attack surface than leaving a PC logged in with 8 other employees wandering around.
Isn't a simple inactivity timer just as effective? Just set your PC's inactivity timer to whatever you'd set your motion sensor inactivity timer to (5 minutes, 10 minutes, whatever) and you've removed most of the threat of computers running unattended all day without the added complexity of a motion sensor (which, if it works as well as my office light sensor, will lock your computer out 5 times a day until you jump up from your chair and wave your arms so it can see movement).
I guess the point I was trying to make (but was remiss in not stating it plainly) is that there are different solutions for different environments. It's pointless to look at a solution for one person's environment and say "Bah! That's stupid! It would never work in my (completely different) environment.
Re: (Score:2)
Isn't a simple inactivity timer just as effective? Just set your PC's inactivity timer to whatever you'd set your motion sensor inactivity timer to (5 minutes, 10 minutes, whatever) and you've removed most of the threat of computers running unattended all day without the added complexity of a motion sensor (which, if it works as well as my office light sensor, will lock your computer out 5 times a day until you jump up from your chair and wave your arms so it can see movement).
Actually, that's not a half bad idea if I can get one to work in XP. I'll have to look around for that.
So your employer won't install a smart card system, but will install motion sensors linked to your computers?
No, they won't do either but the smart card system has been nixed for the moment because various ancient bits don't work with any we've looked at and / or are too expensive (too expensive being a rather low bar). Many of the rooms all ready have motion detectors on the lights as an energy saving strategy. It probably would be relatively easy to tap a signal off the detector (or even just use a light dete
Re: (Score:2)
Isn't a simple inactivity timer just as effective?
Actually, that's not a half bad idea if I can get one to work in XP. I'll have to look around for that.
It's called a screensaver, with the 'password protect' option. Even Microsoft puts one of those on their default system installation.
Re: (Score:2)
It doesn't have to log you out all the way, just switch to a login screen while maintaining your session. It seems that kind of thing, with something to automatically detect whether you are at the computer, would be perfect. Set it up so it recognizes your cell phone and can log you in as well as out.
Re: (Score:2)
A more useful system, IMHO, would be one that automatically logged off every PC in a room after a motion detector noted a period of inactivity. We do have issues where people leave for the day, go into another area or just close the door and leave systems up. That's a much bigger attack surface than leaving a PC logged in with 8 other employees wandering around.
That's true for some situations but a lot of the time companies are more concerned employees don't "see" information they are not cleared for (payroll, contracts etc) or place requisitions using someone else's ID. Users with different levels of clearance / departments share work areas in a lot of companies (open plan offices were tres chic for a while) plus a lot of software uses audit stamps to track who entered /edited what.
Ultimately, I suspect the users will defeat any attempt at "security" if the mea
Re: (Score:2)
Humans forget sometimes. Some enough to describe them as "sloppy and incompetent" and fire them; but almost anyone will fuck up occasionally if they have to do it enough.(Plus, I'm guessing that nurses forget a little more often than average if their distractions include such minor items as "pa
Re: (Score:2)
For all the employees you want, the new hires will do the same thing.
What might work is to make something painful happen, like losing all their work when they get up and walk away from their computer and their keyboard logs them out.
It's the companies work, not the users. (Score:2)
Re: (Score:2)
Far too often, however, the problem comes not in whether you can properly educate your users/punish them for non-compliance, but whether you, as an IT entity, have the power to do so. If you do, awesome, but if you don't have the favor of the high muckity-mucks, phrases like "3 strikes" are going to get you stricken from the payroll records. This is particularly a problem in educational or medical environments, where profs/docs rule the roost, have for years, and aren't particularly interested in you coming
Re: (Score:2)
Far too often, however, the problem comes not in whether you can properly educate your users/punish them for non-compliance, but whether you, as an IT entity, have the power to do so.
It sucks to work in places where the IT flunkies have that much power. It leads to all sorts of problems, like them spending too much time running around being thuggish, when they could be changing the toner in the Ljet4 up on third floor, like they're supposed to.
Re: (Score:2)
Maybe try not overworking them to the point where they're exhausted after you've laid off 1/3 of the workforce in a "cost-cutting" move and expected the remaining 2/3 to pick up the "slack" even though your company has earned record profits and has paid a huge bonus to the new CEO who decided on the "cost-cutting" measure. Having employees that are underpaid, overworked, having their benefits reduced, monitored with cameras and keyloggers, are allowed two bathroom breaks
Re: (Score:2)
Better yet, set the wallpaper to "LOCK YOUR WORKSTATION" , rather than somethign NSFW. The former is not something you'd get in trouble for having/creating, whereas bringing NSFW stuff into work is, by definition, not safe.
Re: (Score:2)
I changed the wallpaper picture of a colleague to hello.jpg once and hid it under a maximised application.
Then the colleague and his boss walk in, the colleague minimises the application, hilarity ensues. Needless to say that the colleague has always locked his workstation after that.
Re: (Score:3)
What does "physically leave the keyboard" mean?
Not touch it any more? What if he's using the mouse?
Click the link and watch the video. It detects when you've physically left your seat and locks the OS (note: it locks, not logs you out like the summary claims). It has a little pointer that you adjust to point at wherever you're sitting, and when you leave that spot, it triggers the lock function. It also has a proximity card scanner and fingerprint scanner so the person doesn't have to type in a password each time they return to their seat.
Re: (Score:2)
BRB party van^W^W secret police
Re: (Score:2)
Wouldn't a keyboard that simply locks the terminal make more sense? I don't want to be completely logged out just because I leave my desk to use the can.
FTFA:
The SonarLocID Keyboard connects to a PC via USB and can be configured via an included programming application that allows the user to program custom keystrokes as well as delays and a sequence to lock the computer when the user walks away.