full-disclosure - Re: Firefox Addon: KeyScrambler

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4D00AE0E.7060205@propergander.org.uk>
Date: Thu, 09 Dec 2010 10:23:10 +0000
From: mrx <mrx@...pergander.org.uk>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Firefox Addon: KeyScrambler

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/12/2010 11:30, Tim Gurney wrote:
> Hi
> 
> This seems to contradict itself somewhat. A plugin to firefox should
> have no way to encrypt things at a driver level within the kernel, that
> would require installing seperate software at the root level, a plugin
> should not be able to do this and i would be VERY worried and surprised
> if it could as it would mean bypassing the security of the OS.

I tried installing this plugin to Firefox 3.6.12 in a virtualbox XP32(SP3) environment and it is incompatible.
I may wait for an update to the plugin and analyse its behaviour, providing my curiosity doesn't wane in the meantime.

I am not a professional, I do this kind of research as a hobby and for educational purposes, when I have some free time.


> Also if the driver is encrypting the key strokes and the plugin is
> decrypting, what about all the keystrokes that are not in firefox, like
> email, word processing, programming, there is nothing to decrypt these
> so you would end up only ever being able to use firefox on the machine
> and nothing else every again.

The devs do state that it only encrypts keystrokes in Firefox and not other applications, although they do sell a version that supposedly works
"in over 160 browsers and applications".
> 
> personally I would not touch this with a barge pole and I would do a lot
> more more digging and checking into this.

Yes, I am sceptical of claims, hence the post to this list.



> regards
> 
> Tim


Thanks for your input
Dave.


> 
> On 08/12/10 11:12, mrx wrote:
>> Hi list,
> 
>> Is anyone familiar with the firefox addon KeyScrambler? According to developers this encrypts keystrokes.
> 
>> Quote:
>> "How KeyScrambler Works:
>> When you type on your keyboard, the keys travel along a path within the operating system before it arrives at your browser. Keyloggers plant
>> themselves along this path and observe and record your keystrokes. The collected information is then sent to the criminals who will use it to
>> steal from you.
> 
>> KeyScrambler defeats keyloggers by encrypting your keystrokes at the keyboard driver level, deep within the operating system. When the encrypted
>> keystrokes reach your browser, KeyScrambler then decrypts them so you see exactly the keys you've typed. Keyloggers can only record the
>> encrypted keys, which are completely indecipherable."
> 
>> Can this be trusted? As in trusted I mean not bypassed.
> 
>> Input from the professionals on this list would be much appreciated.
> 
>> Thank you
>> regards
>> Dave
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



- -- 
Mankind's systems are white sticks tapping walls.
Thanks Roy
http://www.propergander.org.uk
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEVAwUBTQCuDrIvn8UFHWSmAQIgqAf9GJ6zNdmPxhCCsxJ10gmsBl5KixH6Wmi4
oSJs309oRg5sBgBWmuXxTDE7cOlnzeW9BYMf/j2IepKPIKhrO4PO0u001yMlLd0K
Jn0dG9wvEyyUiua5zeiHVB8ff1w2Op/AlDA3i3JK5GZrcnBZulh0dn9zpfIcRtW9
RhYNA0DTYLX72840s7uTCItKtLHRqKfuSakPmaX+J+9xci6/SM38YdMCul+d54CU
EayoJYjURXYG4GtFUUQA6uOqmn4pbQfSkP2/hAB04kNCghzY0TkDhP2VWQ24/dgj
CKqxM3vTcXrjcdM3k13WpRaIMgjZnBiklGJ0ZhE0gxRYACTfPJLolw==
=a6QP
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/