AI-driven cyberattack can now steal your passwords with near 100 per cent accuracy, study warns
Scientists have discovered a new AI-driven hacking method that guesses passwords with over 90 per cent accuracy by listening to what people type on their keyboard. The cyberattack works by using AI to learn and recognise the sound profile of different keys on a keyboard, according to the yet-to-be peer-reviewed research, posted as a preprint in arXiv. Using a smartphone-integrated microphone listening for keystrokes on an Apple MacBook Pro, researchers, including Joshua Harrison from Durham University in the UK, could reproduce the exact keys with 95 per cent accuracy. Scientists also tested the accuracy of the AI system during a Zoom call, recording the keystrokes using the laptop’s microphone during a meeting. In this approach, the AI model was found to 93 per cent accurate in reproducing the keystrokes and in another test using Skype, the model was found to be about 92 per cent accurate. Researchers say the new cyberattack method is facilitated by advancements over the last decade in the number of microphones within acoustic range of keyboards. The model works by recognising the unique patterns with which users press keys on their keyboard, including the sound, the intensity and time of each keystroke. Researchers used a MacBook Pro to test the concept, helping the system recognise patterns first by pressing 36 individual keys 25 times a piece. They used an iPhone 13 mini, kept 17 cm away from the keyboard, to record the keystroke audio for their first test. They then recorded the laptop keys over Zoom, using the MacBook’s built-in microphones. This new technique using the trio of AI, microphones, and video calls “present a greater threat to keyboards than ever,” scientists warn in the study. “When trained on keystrokes recorded by a nearby phone, the classifier achieved an accuracy of 95 per cent, the highest accuracy seen without the use of a language model,” scientists write in the study. However, scientists say the AI system does not easily work the same way for every keyboard. They say the AI model must be trained separately for each keyboard, providing additional references to understand what character each keystroke corresponds to. The study says people can mitigate these kinds of attacks if they change their typing style. Scientists found that touch typing reduced the keystroke recognition accuracy from between 64 per cent to 40 per cent. They also recommend the use of randomised passwords featuring multiple cases as means of defence against such attacks. Since large language models such as ChatGPT are able to predict succeeding characters to complete words, scientists say passwords containing full words may be at greater risk. Randomly generated fake keystrokes to transmitted audio was also found to reduce the risk of such password theft. Using biometric password like fingerprint or face scanning instead typed ones can also help mitigate risk of such cyber attacks, researchers say. Read More Hackers crack Tesla software to get free features Famed computer hacker Kevin Mitnick dies at age 59 Stolen ChatGPT accounts for sale on the dark web Nuclear fusion milestone achieved in huge boost for near-limitless clean energy Tesla’s ‘Master of Coin’ is stepping down after 13-year stint at EV company Now even Zoom tells staff: ‘Come back to the office’
2023-08-08 14:57
The brightest explosion ever seen in the universe has finally been explained
It’s the brightest explosion ever seen in the universe, but until now it’s been a mystery that couldn't be explained. Telescopes observed an enormous blast in October which was regarded as the biggest of all time. It was identified as a gamma-ray burst, named GRB 221009A, which came as a result of a massive star collapsing into a black hole. At the time it was a mystery as to why the explosion shone so brightly. Now, further research published in the journal Science Advances has uncovered the reason it was so bright is due to the fact it was facing directly at us and also pulled stellar material along with it. Sign up to our free Indy100 weekly newsletter Hendrik Van Earthen from the University of Bath said: “The slow fade of the afterglow is not characteristic of a narrow jet of gas, and knowing this made us suspect there was an additional reason for the intensity of the explosion, and our mathematical models have borne this out. “Our work clearly shows that the GRB had a unique structure, with observations gradually revealing a narrow jet embedded within a wider gas outflow where an isolated jet would normally be expected.” The research into GRB 221009A has the potential to further the study of huge gamma-ray bursts, which can produce as much energy as the Sun will in its entire lifetime in the space of just a few seconds. “GRB 221009A represents a massive step forward in our understanding of gamma-ray bursts, and demonstrates that the most extreme explosions do not obey the standard physics assumed for garden variety gamma-ray bursts,” Brendan O’Connor, GW graduate student and lead study author, said. “GRB 221009A might be the equivalent Rosetta stone of long GRBs, forcing us to revise our standard theories of how relativistic outflows are formed in collapsing massive stars.” Have your say in our news democracy. Click the upvote icon at the top of the page to help raise this article through the indy100 rankings.
2023-06-08 18:24
Linguistic Siblings: 9 Pairs of Words With Surprisingly Shared Etymologies
The connections between words aren’t always as straightforward as the link between run and runner; often, figuring them out requires the subtle unraveling of linguistic evolution, the kind of detective work that makes etymology so fascinating.
2023-06-28 20:25
EDITED Draws on Big Brand Expertise to Launch myEDITED
LONDON & NEW YORK--(BUSINESS WIRE)--Sep 19, 2023--
2023-09-19 16:29
EA SPORTS FC™ Builds on Vision for the World’s Game With Immersive New Gameplay in EA SPORTS FC™ MOBILE
REDWOOD CITY, Calif.--(BUSINESS WIRE)--Aug 10, 2023--
2023-08-10 23:23
Apple Downgrade Pushes Bullish Analyst Ratings to 2-Year Low
Even as Apple Inc.’s shares have powered their way to a fresh record high, worries over cooling demand
2023-06-13 21:56
Biden to Meet AI Experts as He Pushes for Privacy Safeguards
President Joe Biden is scheduled to meet with business leaders and experts on artificial intelligence as his administration
2023-06-20 21:29
Elon Musk kicks off China visit, Tesla expansion in focus
BEIJING (Reuters) -Tesla Chief Executive Elon Musk on Tuesday kicked off a high-stakes visit to China with a meeting with
2023-05-30 22:53
Australian bourse operator partners with TCS for trading software replacement
Australian bourse operator ASX Ltd said on Monday it would proceed with a product-based solution delivered by TATA
2023-11-20 06:25
Patterson-UTI to Buy NexTier Creating Shale-Services Giant
Patterson-UTI Energy Inc. agreed to acquire NexTier Oilfield Solutions Inc. in an all-stock deal worth $1.9 billion that
2023-06-15 23:46
Wrongly arrested because of facial recognition: Why new police tech risks serious miscarriages of justice
On 16 February, Porcha Woodruff was helping her children get ready for school when six Detroit police officers arrived at her door. They told her she was under arrest for a January carjacking and robbery. She was so shocked she wondered for a moment if she was being pranked. She was eight months into a difficult pregnancy and partway through a nursing school programme. She did little else besides study and take care of her kids. She certainly wasn’t out stealing cars at gunpoint, she said. “I’m like, ‘What,?’ I opened my door so he could see my stomach. ‘I’m eight months pregnant. You can see two vehicles in the driveway. Why would I carjack?’” she told The Independent. “‘You’ve gotta be wrong. You can’t have the right person.’” Her children cried as she asked officers if the suspect was pregnant and insisted they had mistakenly arrested her. She was put in handcuffs and taken to jail, where she had panic attacks and early contractions. She later learned police identified her as a suspect after running security footage through the department’s facial recognition software, relying on a 2015 mugshot from a past traffic arrest into a photo lineup where the carjacking victim singled out Ms Woodruff as her assailant. The Detroit Police Department eventually dropped the case, but the arrest has deeply shaken Ms Woodruff. “What happened to the questioning? What happened to me speaking to someone?” she said. “What happened to any of the initial steps that I thought were available to a person who was accused of doing something?” The case underscores the growing risks of civil rights violations as police departments and law enforcement agencies across the country increasingly adopt facial-recognition and other mass surveillance technologies, often used as an unreliable shortcut around methodical human police work. Criminal justice advocates and the people targeted by this burgeoning police tech argue these programmes are riddled with the same biases and opaque or nonexistent oversight measures plaguing policing at large. The early results, at least, haven’t been encouraging. At least six people around the US have been falsely arrested using facial ID technology. All of them are Black. These misfires haven’t stopped the technology from proliferating across the country. At least half of federal law enforcement agencies with officers and a quarter of state and local agencies are using it. “We have no idea how often facial recognition is getting it wrong,” Albert Fox Cahn, executive director of the Surveillance Technology Oversight Project (STOP), told The Independent. “When you have facial recognition being used thousands of times, without any accountability for mistakes, it’s inviting injustice,” he added. Nowhere has that injustice been more pronounced than Detroit, a city where Black people have long experienced documented over-policing from law enforcement. Three of the six people mistakenly arrested by facial recognition technology have been in the Motor City, according to the ACLU. This status quo is why Ms Woodruff is suing DPD, claiming among other things that the agency has engaged in “a pattern of racial discrimination” against her and other Black residents “by using facial recognition technology practices proven to misidentify Black citizens at a higher rate than others in violation of the equal protection guaranteed by” the Michigan civil rights statutes. “I definitely believe that situation would’ve gone differently had it been another race, honestly, just my opinion. There was no remorse shown to me and I was pregnant. I pleaded,” she told The Independent. “Being mistaken for something as serious as that crime – carjacking and armed robbery – that could’ve put me in a whole different type of lifestyle,” she added. “I was in school for nursing. Felons cannot become nurses. I could’ve ended up in jail. That could have altered my life tremendously.” The Independent has requested comment from DPD. After Ms Woodruff filed her suit, Detroit police chief James White said in a press conference in August “poor investigative work” led to the false arrest, not facial recognition technology. He claimed that department software gave detectives numerous possible suspects and was only meant to be a “launch” point for further investigation. “What this is, is very, very poor investigative work that led to a number of inappropriate decisions being made along the lines of the investigation, and that’s something this team is committed to not only correcting, having accountability, having transparency with this community, and in building policy immediately to ensure regardless of the tool being used, this never happens,” Mr White said. He added that officers won’t be allowed to use images sourced by facial recognition in lineups, and warrants based on facial ID matches must be reviewed by two captains before being carried out. ‘The lead and the conclusion’ Some aren’t convinced these changes will prevent the excesses of what they see as a fundamentally flawed technology. “The technology is flawed. It’s inaccurate,” Philip Mayor, senior staff attorney at the ACLU of Michigan, told The Independent. “Police repeatedly assured us that it’s being used only as an investigative lead, but what we see here in Detroit time and time again is it is both being used as the lead and the conclusion.” Studies suggest that facial-recognition algorithms, which have been used to capture suspects in high-profile cases like those connected to January 6, also fail to accurately identify Black people and women, driving up inequalities in arrests, because image-training datasets often lack full diversity. However, according to Mr Mayor, police departments make things even worse by failing to do basic training and common-sense investigative work on top of facial recognition tools. He represents Robert Williams, a Detroit man who was mistakenly arrested for a 2020 theft from a high-end Detroit boutique. A security contractor employed by the store worked with the city and state police and flagged Mr Williams’ name using facial recognition tools. How police came to trust that Williams was the right man reveals the sloppiness of how facial ID tech is used in practice, according to the ACLU attorney. After the theft, police searched a database containing both past photos of Mr Williams and his present-day driver’s license. ‘It picks out 486 people who are the most likely perpetrators; not a single one of them is his current driver’s license, even though his current driver’s license is in the database that was searched,’’ Mr Mayor said. “That seems like an obvious exculpatory fact, the kind of thing that would lead you to say if you were actually thinking, this isn’t the right guy.” When these dubious matches are then used to build a line-up, questionable police work attains the gloss of near-fact, and witnesses choose from a group of people who may have no credible tie to a crime that took place but still look something like the person who did. “This is not me,” Mr Williams told police during his investigation, according to The New York Times. “You think all Black men look alike?” The father of two, after asking a local police voluntarily stop using facial recognition technology, sued the DPD in 2021. “This technology is dangerous when it doesn’t work, which is what the cases in Detroit are about. It’s even more dangerous when it does work. It can be used to systematically surveillance when we come and go from every one of the places that are important in our private lives,” the ACLU attorney said. “I don’t think there’s any reason to believe that departments elsewhere right now are not making the same mistakes.” ‘A force multiplier for police racism’ Detroit isn’t the only place grappling with the impacts – and errors – of this technology. In Louisiana, the use of facial recognition technology led to a wrongful arrest of a Georgia man for a string of purse thefts. A man in Baltimore spent nine days in jail after police incorrectly identified him as a match to a suspect who assaulted a bus driver. The Baltimore Police Department ran nearly 800 facial recognition searches last year. Those cases and others have added to a growing list of misidentified suspects in a new era of racial profiling dragnets fuelled by tech that is rapidly outpacing police and lawmakers’ ability to fix it. Facial recognition software often is “a force multiplier for police racism,” worsening racial disparities and amplifying existing biases, according to Mr Cahn. It can spur a vicious cycle. Black and brown people are already arrested at disproportionate rates. These arrests mean they are more likely to enter a database of faces being analyzed and used for police investigations. Then, error-prone facial recognition technology is used to comb these databases, often failing to identify or distinguish between Black and brown people, particularly Black women. “So the algorithms are biased, but that’s just the start, not the end of the injustice,” Mr Cahn says. Such technologies, advocates warn, are embedded in wider mass surveillance programmes that often lack robust public oversight. In New York City, law enforcement agencies relied on facial recognition technology in at least 22,000 cases between 2016 and 2019, according to Amnesty International. New York City’s Police Department spent nearly $3bn growing its surveillance operations and adding new technology between 2007 and 2019, including roughly $400m for the Domain Awareness System, built in partnership with Microsoft to collect footage from tens of thousands of cameras throughout the city, according to an analysis from STOP and the Legal Aid Society. The NYPD has failed to comply with public disclosure requirements about what those contracts – from facial recognition software to drones and license plate readers – actually include, according to the report. Until 2020, that money was listed under “special expenses” in the police budget until passage of the Public Oversight of Surveillance Technology Act. The following year, more than $277m in budget items were listed under that special expenses programme, the report found. “We’ve seen just concerted pushback from police departments against the sort of oversight that every other type of government agency has because they don’t want to be held accountable,” according to Mr Cahn. “If we treated surveillance technology vendors the way we treated other technology vendors, it would be like Theranos – police would be arresting some of these vendors for fraud rather than giving them government contracts,” he added. “But there is no accountability.” On 7 August, 2020, New York City Police Department officers in riot gear launched a six-hour siege outside Derrick Ingram’s Hell’s Kitchen apartment. Mr Ingram – a racial justice organiser who is embroiled in a federal lawsuit against the NYPD – was surrounded by more than 50 officers after he allegedly shouted into an officer’s ear at a protest earlier that summer. Police insisted they had a warrant on assault charges, but couldn’t produce one when Mr Ingram asked them to, according to his suit. The whole encounter, in which the NYPD deployed snipers, drones, helicopters, and police dogs, began with facial recognition technology. “To say that I was terrified is an understatement – I was traumatized, I still am,” Mr Ingram later testified. “I fear deep down in my core that if I opened my door to those officers, my life would be swiftly taken.” To identify Mr Ingram as a potential suspect, NYPD relied on facial recognition software “as a limited investigative tool, comparing a still image from a surveillance video to a pool of lawfully possessed arrest photos,” according to a police statement, adding that “no one has ever been arrested solely on the basis of a computer match.” The software pulls from a massive internal database of mugshots to generate possible matches, according to the department. Civil rights groups and lawmakers criticized the department’s use of facial recognition – initially hailed as a tool to crack down on violence offenders – for being deployed to suppress dissent, and triggering a potentially lethal police encounter at Mr Ingram’s home. As for Ms Woodruff in Detroit, she hopes her experience can show the dangers of relying too heavily on facial recognition technology. “It may be a good tool to use, but you have to do the investigative part of using that, too,” she said. “It’s just like everything else. You have your pieces that you put together to complete a puzzle.” Her life would’ve been a whole lot different, she said, if “someone would’ve just taken the time to say, ‘OK, stop, we’re going to check this out, let me make a phone call.’” Read More Detroit police changing facial-recognition policy after pregnant woman says she was wrongly charged White House science adviser calls for more safeguards against artificial intelligence risks How a Drake concert put NYPD’s ‘arsenal’ of surveillance technologies under the spotlight
2023-09-15 03:47
Precision Cancer Consortium Teams Up with Massive Bio to Utilize AI Analytics and Enhance Clinical Trial Matching for Cancer Patients Worldwide
NEW YORK--(BUSINESS WIRE)--Jun 2, 2023--
2023-06-02 20:27
You Might Like...
Auto Wage Hikes Complicate the Search for an Affordable EV
X threatens brands with lost verification if they don't cough up $1,000 a month
Amazon is having an end-of-summer sale on smart thermostats — starting at $64
UAE Oil Giant Adnoc to Boost Carbon Capture Capacity
Xbox Game Pass Games Leaving June 30
Gulf oil giants turn to start-ups in carbon-capture bid
Instacart reveals 31% revenue jump in road to long-awaited IPO
Applications Open for the 2024 SPIE Prism Awards, Which Recognize the Photonics Industry’s Most Innovative Products
