bugtraq - Re: RE: Defeating Citibank Virtual Keyboard protection using screenshot method

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20070510065618.27274.qmail@securityfocus.com>
Date: 10 May 2007 06:56:18 -0000
From: balazs.zolika@...il.com
To: bugtraq@...urityfocus.com
Subject: Re: RE: Defeating Citibank Virtual Keyboard protection using
 screenshot method

My opinion is that there are better ways to capture login information for virtual keyboards. Look for firefox plugins like tamper data or any other plugins displaying post parameters. I already tested www.citibank.hu. It could be another "anti virtual keyboard method", too. 

Regards
Zoltan Balazs