{
  "id": 19804923,
  "title": "Your router can read your keyboard: 85% keystroke recovery from Wi-Fi, and the firmware fix that cut it to 9.8%",
  "url": "https://urgent.news/2026/11/13/your-router-can-read-your-keyboard-85-keystroke-recovery-from-wi-fi",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-13T12:29:12.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/sushant-me/your-router-can-read-your-keyboard-85-keystroke-recovery-from-wi-fi-and-the-firmware-fix-that-5cmo"
  },
  "original_language": "en",
  "account": "Your Wi-Fi router can read your keyboard, not by breaking encryption but by measuring the air. The Wi-Fi system, originally designed for data transfer, has quietly become a sensing fabric capable of detecting motion, inferring behavior, and reconstructing physical activity from signal reflections alone. This transformation, however, was never accounted for in enterprise and IoT security frameworks. Our paper quantifies the severity of this issue in realistic, interference-prone environments using a bidirectional LSTM to correlate Channel State Information (CSI) sequences with keystroke signatures. In ideal line-of-sight office settings, a passive adversary with commodity hardware, no network authentication, and no physical access can achieve an F₁ score of 85.4%. Even through a standard 15 cm drywall partition, the accuracy remains at 61.2%. To put this into perspective, a ten-class random guess baseline is set at 10%, and the observed accuracy surpasses six times this value, achieved passively through a wall. A deterministic, stateful CSI obfuscation framework called RF-Guard, implemented at the firmware level, aims to rectify this vulnerability. Across three testbeds, it successfully reduces the observer's accuracy to 9.8%, below the random-guess floor. Two key takeaways emerge from this research: deploying Wi-Fi for connectivity inherently introduces a sensing capability, and the conventional threat model often neglects the passive RF observer. The most effective mitigation strategy lies not in detecting the attack, but in making the signal uninformative at the point of radiation. This work was presented at IC-AICSE 2026 (abstract book p. 33). For more details, visit https://sushantpoudel2028.com.np/publications/wifi-sensing or https://sushantpoudel2028.com.np/writing security.",
  "summary": "Your Wi-Fi router can read your keyboard. Not by breaking encryption — by measuring the air. Wi-Fi was designed to move data. Paired with modern deep learning it has quietly become something else: a sensing fabric that detects motion, infers behaviour, and reconstructs physical activity from signal reflections alone, on hardware cheaper than a home router. Enterprise and IoT security was never…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "XDA Developers",
        "title": "This monstrous Raspberry Pi 5 project turns the SBC into a Wi-Fi router with Pi-hole",
        "url": "https://urgent.news/2026/11/13/this-monstrous-raspberry-pi-5-project-turns-the-sbc-into-a-wi-fi",
        "published": "2026-11-13T08:45:57.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}