Re: Techniques to prevent Key-loggers

Re: Techniques to prevent Key-loggers

Secure Home | Search | About
 Computer Software Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Re: Techniques to prevent Key-loggers bealoid 02-10-2008
Posted by bealoid on February 10, 2008, 5:22 am
If you were  Registered and logged in, you could reply and use other advanced thread options

> Besides protecting your System additional measures that can be taken
> are:

This is, surely, the most important part. Don't install software that you
don't trust. If you think there's malware (a keylogger) on your machine
then in theory there's nothing you can to do protect against keylogging.
Sure, there's stuff you can do with real software that works against real
key-loggers, but in theory once you've run malware that machine is hosed
and you should flatten and re-install.

[snip]

> Any other ideas for protection against keyloggers?

You didn't seem to mention hardware loggers. These are small, hard to
notice, and hard to protect against, but they require physical access to
the machine. You only need a few moments to unplug a keyboard and connect
the doo-hickey.

The one I've read about (keyghost or something similar??) couldn't handle
the shifted character that -on my keyboard- is next to the 1 key. "¬" (I
don't know how well that's going to make it through Usenet.)

Posted by Ertugrul =?UTF-8?B?U8O2eWxlbWV on February 11, 2008, 5:07 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Sun, 10 Feb 2008 10:22:58 GMT

> > Any other ideas for protection against keyloggers?
>
> You didn't seem to mention hardware loggers. These are small, hard to
> notice, and hard to protect against, but they require physical access
> to the machine. You only need a few moments to unplug a keyboard and
> connect the doo-hickey.

This is particularly a problem at my workplace. I cannot trust anyone
here. Unfortunately there are no useful counter-measures other than
using key files on a USB stick, from which you boot, which isn't quite
easy to handle (backups and such), and not quite secure. A
smartcard-based solution would be nice.


Regards,
Ertugrul S=C3=B6ylemez.


Posted by Ertugrul =?UTF-8?B?U8O2eWxlbWV on February 11, 2008, 7:52 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Mon, 11 Feb 2008 04:32:55 -0800 (PST)

> > Still the cable can be cut apart to install a logger right
> > inbetween, or a camera could be installed to intercept my typing.
> > Connected USB storages may be intercepted through hardware. Or even
> > the entire Machine could be replaced, while I'm at home sleeping.
>
> Yeah right, and even the entire office could be vandalized or even
> demolished while you are away on vacation.
> Gimme a break, will yah?

This threat is real for some people. In my case, it's not that bad, but
for some the possibilities I mentioned must be considered.


Regards,
Ertugrul S=C3=B6ylemez.


Posted by comment on February 11, 2008, 10:30 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Mon, 11 Feb 2008 04:32:55 -0800 (PST)

>> > Still the cable can be cut apart to install a logger right
>> > inbetween, or a camera could be installed to intercept my typing.
>> > Connected USB storages may be intercepted through hardware. Or even
> > the entire Machine could be replaced, while I'm at home sleeping.
>>
>> Yeah right, and even the entire office could be vandalized or even
>> demolished while you are away on vacation.
>> Gimme a break, will yah?

>This threat is real for some people. In my case, it's not that bad, but
>for some the possibilities I mentioned must be considered.
>
FFS I thought the Third Reich was defeated in 1945.

--
This poast was encoded using ROT 0

Posted by Ertugrul =?UTF-8?B?U8O2eWxlbWV on February 11, 2008, 11:03 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Mon, 11 Feb 2008 15:30:47 -0000

> > This threat is real for some people. In my case, it's not that bad,
> > but for some the possibilities I mentioned must be considered.
>
> FFS I thought the Third Reich was defeated in 1945.

I mean the threat that someone may be interested in my data enough to
try to steal it.


Regards,
Ertugrul S=C3=B6ylemez.


Similar ThreadsPosted
Re: Techniques to prevent Key-loggers February 10, 2008, 4:15 pm
Re: Techniques to prevent Key-loggers March 6, 2008, 8:04 pm
Re: Techniques to prevent Key-loggers March 6, 2008, 8:13 pm
Re: Techniques to prevent Key-loggers March 6, 2008, 8:11 pm
Re: Techniques to prevent Key-loggers March 6, 2008, 8:40 pm
Re: Techniques to prevent Key-loggers March 6, 2008, 9:11 pm
Re: Techniques to prevent Key-loggers March 6, 2008, 9:14 pm
Re: Techniques to prevent Key-loggers March 7, 2008, 12:15 am
Re: Techniques to prevent Key-loggers March 7, 2008, 10:55 am
Re: Techniques to prevent Key-loggers March 7, 2008, 11:15 am

The site map in XML format XML site map

Contact Us | Privacy Policy