WebApp Sec mailing list archives

Re: Citi-Bank Virtual Keyboard (is useless)


From: Saqib Ali <docbook.xml () gmail com>
Date: Sun, 14 Aug 2005 10:41:54 -0700

Virtual Keyboards (ala Citibank.co.in) are not very useful. They provide absolutely no protection whatsoever against 
keyloggers.

Well I would give 'some' credit to Citibanc for trying. Even though
VKBs can not protect against software based key loggers, it does
provide a fairly good mechanism for protecting against hardware based
sniffing, using devices such as a KeyGhost < http://www.keyghost.com/


-- 
In Peace,
Saqib Ali
http://www.xml-dev.com/blog/
Consensus is good, but informed dictatorship is better.


Current thread: