Defending against keyloggers

[deepsand]

The problem with USB flash memory is two-fold :

• It scan be scanned by malware.
• The credential data there stored is copied-pasted via the Windows Clipboard, which many keyloggers do read.

You might take a look at Alpin Software's free Neo's SafeKeys 2008 . INGDirect Bank uses the same technique for their account holder log-in screen.

[Chuckmiser]

I agrree that they will go after low hanging fruit. Why bother a house that has a dog and security system when the identical house next door has the back door open?

[Mikeantony]

Nice tips but i think on screen keyboard is also effective...

[deepsand]

Do you mean such as was suggested at http://www.webproworld.com/security/...tml#post468060 ; or, something else?

[Doc]

The problem with the Neo's Safekeys you mentioned there is still that you're copying the password to the clipboard, and most loggers can read and capture it there.

[deepsand]

Per the application's description, "Nothing is stored in the clipboard."

[Doc]

per the application's description, "nothing is stored in the clipboard."

ah - so!

[deepsand]

That's all you've got to say for yourself?

[Doc]

That's all you've got to say for yourself?

This is a family-rated board... gotta keep it clean.

Although, I'm not a big fan of things like Neo's Safekeys. I prefer some solid antivirus/antimalware protection to keep it at arm's length to begin with. I guess if you have to sit down at a strange computer, it's not a bad idea.

[deepsand]

This is a family-rated board... gotta keep it clean.

You mean that we're not all family here?

Although, I'm not a big fan of things like Neo's Safekeys. I prefer some solid antivirus/antimalware protection to keep it at arm's length to begin with. I guess if you have to sit down at a strange computer, it's not a bad idea.

Agreed; when uncertain, use at least some protection, even if it's Saran wrap.