WebApp Sec mailing list archives

Re: keyloggers?


From: Augusto Paes de Barros <apbarros () gmail com>
Date: Wed, 6 Apr 2005 17:58:19 -0300

Some trojans/backdoors do not capture key strokes but form field
contents. In these cases I believe that Roboform won't help to avoid
the password to be stealed.

Regards,

Augusto.

On Apr 5, 2005 7:14 PM, Louis Baumann <louis () baumanns net> wrote:
You can use a program like Roboform portable on a usb drive that fills in
passwords with a few clicks of the mouse.  That way there's no keys to
capture. ;)

- louis


----- Original Message -----
From: "SB" <vidyabalaji () gmail com>
To: <webappsec () securityfocus com>
Sent: Friday, April 01, 2005 12:48 PM
Subject: keyloggers?

Hi!

Any recommendations of Best Practices when accessing your Online
Banking account from an Internet Cafe?  Assuming your bank does not
provide two factor authentication, are there any specific checks you
can do, tools you can run on a  machine to ensure it is not Logging
keystrokes, caching UID/pwds etc

Any suggestions or advice in this area is greatly appreciated

Thanks

SB





-- 
Augusto Paes de Barros, CISSP
http://www.paesdebarros.com.br


Current thread: