WebApp Sec mailing list archives
Re: Citi-Bank Virtual Keyboard (is useless)
From: Saqib Ali <docbook.xml () gmail com>
Date: Sun, 14 Aug 2005 10:41:54 -0700
Virtual Keyboards (ala Citibank.co.in) are not very useful. They provide absolutely no protection whatsoever against keyloggers.
Well I would give 'some' credit to Citibanc for trying. Even though VKBs can not protect against software based key loggers, it does provide a fairly good mechanism for protecting against hardware based sniffing, using devices such as a KeyGhost < http://www.keyghost.com/
-- In Peace, Saqib Ali http://www.xml-dev.com/blog/ Consensus is good, but informed dictatorship is better.
Current thread:
- Citi-Bank Virtual Keyboard (is useless) mike (Aug 14)
- Re: Citi-Bank Virtual Keyboard (is useless) intel96 (Aug 14)
- RE: Citi-Bank Virtual Keyboard (is useless) Debasis Mohanty (Aug 14)
- Re: Citi-Bank Virtual Keyboard (is useless) Neil Rowland (Aug 14)
- Re: Citi-Bank Virtual Keyboard (is useless) Bipin Gautam (Aug 14)
- Re: Citi-Bank Virtual Keyboard (is useless) Saqib Ali (Aug 14)
- RE: Citi-Bank Virtual Keyboard (is useless) Debasis Mohanty (Aug 14)
- Re: Citi-Bank Virtual Keyboard (is useless) Cory Foy (Aug 15)
- Re: Citi-Bank Virtual Keyboard (is useless) Andre Ludwig (Aug 15)
- <Possible follow-ups>
- Re: Re: Citi-Bank Virtual Keyboard (is useless) mike (Aug 14)
- Re: Citi-Bank Virtual Keyboard (is useless) intel96 (Aug 14)