full-disclosure - Most common keystroke loggers?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri Dec  2 07:05:02 2005
From: lionel.ferette at belnet.be (Lionel Ferette)
Subject: Most common keystroke loggers?

In the wise words of Valdis.Kletnieks@...edu, on Thursday 01 December 2005 
18:57:
[SNIP]
> Using crypto all the way from the web server to a smart-card (so all the
> compromised system can see is encrypted data it can't get the key for) can
> help yere. 
Even then, you would need a card reader with integrated pinpad. Otherwise, the 
keylogger can still sniff the PIN code entry - and then generate any 
signature it wants by accessing the PC/SC layer directly (been there, done 
that).

Lionel

-- 
"To understand how progress failed to make our lives easier,
please press 3"

Lionel Ferette
BELNET CERT Coordinator

Tel: +32 2 7903385                  http://cert.belnet.be/
Fax: +32 2 7903375                  PGP Key Id: 0x5662FD4B
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20051202/67823d50/attachment.bin