Keyloggers are nasty little things that have the potential to steal the credit card numbers of you and everyone you care about. Usernames and passwords can be easily stolen this way, so they’re a useful tool for the black hats out there. One would generally expect to find a keylogger in a dodgy movie torrent or perhaps a keygen for pirated software, but this week a keylogger was found in an audio driver for an HP laptop.
The logger was found by Swiss security researchers modzero. The Conexant HD Audio Driver Package version 1.0.0.46 and earlier apparently logs keystrokes in order to monitor things like the laptop’s volume up and down keys. The real killer here is that it feels the need to log all keystrokes detected to a readily accessible file, for reasons we can’t possibly fathom. It’s a huge security risk, but it doesn’t stop there – the driver also exposes the keystrokes through an API as well, creating an even wider attack surface for malicious actors. One can in principle access the keystroke log remotely.
There’s no word from the company yet, but we really want to know – why save the keystrokes to a file at all? Code left over from debugging, perhaps? Speculate in the comments.



![Does [Eben] carry a silver marker with him, laptops for the signing of?](https://hackaday.com/wp-content/uploads/2017/03/archie-with-laptop.jpg?w=300)


All joking aside, this is a great example of doing what you can with what you’ve got. [starhawk] is limited on funds, and a regular laptop is beyond his means. But being light in the wallet is no reason to go without when you can scrounge parts from friends and family. The base of the laptop is a mini USB keyboard, with the top formed mainly by a 7″ HDMI panel. The back of the display is adorned with a Raspberry Pi 3, a USB hub, a little sound dongle, and the aforementioned Jolly Wrencher. The whole thing is powered by a cast-off power supply brick — no exploding batteries to worry about!
