Ever wondered how key presses and clipboard data look on the network when you run Synergy unencrypted without TLS/SSL enabled? If so, you're not the only one!
Sometimes, network professionals will do this just for fun, like at DEFCON 22...
"For round seven of our recent Network Forensics Puzzle Contest at DEFCON 22, we captured some Synergy network traffic with a clue hidden inside (so stop reading if you have yet to solve that round!) Now we will explore in-depth the revealing data contained in the Synergy protocol." (Source: Tracking Keyboard and Mouse Activity)
Ok, so want to do this yourself?
Here are the steps you need to follow...
There are many packet sniffers, but we'll use Wireshark, probably the most well known packet sniffing tool (aka. 'packet analyzer') used by security professionals, network software engineers, and anyone else that needs to take a peek into what's happening with network traffic.
Download, install and run Wireshark, to capture the network packets so that you can read them later.
There are two approaches, and both have the same outcome. Knowing both ways will give you a bit more insight into how you can use Wireshark if you haven't used it before.
Yeah, I know, I'm revealing my LAN IPs to the Internet. They're pretty generic LAN IPs, not specific to me, so not really a big deal.
Pro tip: You can also filter on specific keys, e.g. synergy.keyreleased.keyid == 103
Once you have found your key up packets and applied the filter, you can step through each packet to use the "Key Id" to find each key ID. Do these numbers look familiar to you?
Hint: They're all between 97 and 122. If you guessed "Hey, those look like ASCII key codes!" then you'd be right.
If you head over to any ASCII code map, you can look up those numbers and translate them into letters. You can also take a look at key_types.h for any strange keys that aren't letters, numbers, symbols, etc.
Can you decode the mystery key presses? Here's the sequence of numbers...
116 104 101 32 113 117 105 99 107 32 98 114 111 119 110 32 102 111 120 32 106 117 109 112 101 100 32 111 118 101 114 32 116 104 101 32 108 97 122 121 32 100 111 103
After upgrading, go to Edit, and click Preferences to ensure that the Enable TLS encryption checkbox is ticked, then click Save.
Q: I got an email with a promo code to upgrade to Pro, but the links on this page don't apply the promo code.
A: We sent out a promo code for 50% off the upgrade price for Synergy Pro (we don't have a code for the new Ultimate edition, yet). Please use the link in your email to apply the Pro edition upgrade promo code. Please contact us if you need help.
Q: I don't have Synergy Ultimate or Synergy Pro edition. Does that mean my Synergy install is not secure? Will hackers be able to get my data?
A: Your level of security depends on your LAN (local area network) connection. If you're using home Ethernet only, then it's unlikely that a malicious person will have gained access to your network (unless you share access to your Ethernet switch with people you don't fully trust). However, if you're using Wi-Fi, then it's relatively straightforward for someone to packet sniff your wireless communication, given enough skill. If you're using Wi-Fi, we recommend you use TLS/SSL encryption. If you're a business user, then you'll be on Synergy Business which comes with TLS/SSL as standard.
Q: Why don't you just release TLS/SSL in the standard edition?
A: Not all customers need TLS/SSL in Synergy. As a business, we owe it to our customers to produce the best product possible. To do that, we need to pay developer salaries to improve Synergy. Charging extra for TLS/SSL allows to make better software.