By Geeta Dayal... via Wired.com Don’t you dare even think about
your banking account password when you slap on those fancy new
brainwave headsets. Or at least that seems to be the lesson of a
new study which found that sensitive personal information, such
as PIN numbers and credit card data, can be gleaned from the
brainwave data of users wearing popular consumer-grade EEG
headsets. A team of security researchers from Oxford, UC
Berkeley, and the University of Geneva say that they were able
to deduce digits of PIN numbers, birth months, areas of
residence and other personal information by presenting 30
headset-wearing subjects with images of ATM machines, debit
cards, maps, people, and random numbers in a series of
experiments. The paper, titled “On the Feasibility of Side-
Channel Attacks with Brain Computer Interfaces,” represents the
first major attempt to uncover potential security risks in the
use of the headsets. “The correct answer was found by the first
guess in 20% of the cases for the experiment with