RE: keyloggers?

["Griffiths, Ian" <Ian.Griffiths () liv-coll ac uk>]

Best practise - don't.

There would be no sure way of knowing that a machine is not logging
keystrokes.  You could probably take a look at task list and see what is
running and find out that it is, but the opposite is a lot more
difficult to prove.

Ian

-----Original Message-----
From: SB [mailto:vidyabalaji () gmail com] 
Sent: 01 April 2005 20:48
To: webappsec () securityfocus com
Subject: keyloggers?


Hi!

Any recommendations of Best Practices when accessing your Online Banking
account from an Internet Cafe?  Assuming your bank does not provide two
factor authentication, are there any specific checks you can do, tools
you can run on a  machine to ensure it is not Logging keystrokes,
caching UID/pwds etc

Any suggestions or advice in this area is greatly appreciated 

Thanks

SB