The purpose of keystroke timing obfuscation is to make it difficult for a man-in-the-middle to deduce your passwords as you type them over an SSH connection.
Thanks, that’s cool! I remember using ssh back in college when I was attempting to major in computer engineering and interacting with the student server.
Is keystroke timing a legitimate way for programs to decipher/narrow down a password?
I’m not a Linux user, so maybe this is all way over my head, but what’s the purpose of software like this?
The purpose of SSH is to allow remote access to computers.
https://en.wikipedia.org/wiki/Ssh
The purpose of keystroke timing obfuscation is to make it difficult for a man-in-the-middle to deduce your passwords as you type them over an SSH connection.
Thanks, that’s cool! I remember using ssh back in college when I was attempting to major in computer engineering and interacting with the student server.
Is keystroke timing a legitimate way for programs to decipher/narrow down a password?
Not legitimate in the sense of being nice or ethical, but a legitimate concern in the sense that timing attacks can be very effective.