WebApp Sec mailing list archives

Re: Defeating Citi-Bank Virtual Keyboard Protection


From: F Lace <flace9 () gmail com>
Date: Mon, 15 Aug 2005 11:33:35 +0530

This itself is not enough in providing security to the keys typed - so
a quick transformation of the keystrokes to another format that is
more secure(eg., MD5-ing if possible) is highly desirable for storage
in memory and also for transmission. 

* I mean "A Virtual keyboard" when I said "This itself".


Current thread: