how to beat keystroke logging??
Page 1 of 2 12 LastLast
Results 1 to 10 of 19

Thread: how to beat keystroke logging??

  1. #1
    Junior Member
    Join Date
    May 2003
    Posts
    2

    Exclamation how to beat keystroke logging??

    ok here's the deal: Im planning on travelling around the world and my only connection to my financial institution would be via web access - primarily using cyber cafes. I've read that there are possibilities of admin's running keystroke logging on these boxes. How can you beat something like that to prevent them from getting my login/passwd for my bank accounts? I've though about simultaneously opening a notepad and cycle keystrokes between the cgi and notepad to jumble the logs but can those loggers log mouse movements or button clicks? Another possible security risk would be screen monitoring - how to beat or how to recognize someone's watching you? Anyhow - I would hate to find out in the middle of my 6 month trip that someone just cleaned out my bank account!! any ideas would be appreciated

  2. #2
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,325
    Bring your own computer (laptop) and link into they cyber cafe networks or hotel, etc.

    Just get a really good list of all the places that have WIFI, or allow you to access...

    OR... get an AOL account. Don't they have servers all over the world? You can just change the dial up numbers...

    Make sure to get the adapters for the power plugs all over...

    Other than that... I'm not sure.

    Have a pre set list of passwords to your online account and have someone you TRUST (like your mom... or etc) change the passwords every tuesday. Only access your account on monday... the password will change next day or monday night?

    Really don't know...

    Why can't you use touchtone banking and calling cards?
    Quitmzilla is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.

  3. #3
    Senior Member
    Join Date
    Nov 2003
    Posts
    107
    I've heard that a good way to defeat a lot of keyloggers is to type in a bunch of garbage, then, highlight and delete the parts you don't use. Example:

    Say the password was: 3ct0

    You could type in 3658li
    Then, highlight everything after the 3, and hit backspace.
    Next, type in a4c0et
    Highlight the a and 4 and hit backspace. Then, highlight the 0et and hit backspace.
    Then, type in 576t0kjle
    Highlight the stuff before, hit backspace. Highlight the stuff after the t0 and hit backspace.

    Most keyloggers will see that you typed in a bunch of characters and that you hit the backspace key. Some keyloggers, (not any free ones that i've seen, but possibly commercial ones) will log the mouse actions too. But, unless it logs everything (including the point the mouse is at, and all the other events), you're pretty safe using this method.

    Other than that, if you are allowed to use some type of diskette or CD, store a file with the password in it, then c/p to the password box.

    Of course, that won't work if the logging software cuts a copy to the HD for later inspection or if it just watches what goes through the clipboard. Maybe a combination of this method with the CD and the above method would work well.
    Is there a sum of an inifinite geometric series? Well, that all depends on what you consider a negligible amount.

  4. #4
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,325
    FlamingRain: Thats a really good idea. A pain in the a$$... but good none the less.

    Just hopefully, they aren't using screen capture software too...
    Quitmzilla is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.

  5. #5
    Antionline's Security Dude instronics's Avatar
    Join Date
    Dec 2002
    Posts
    901
    hmmm, arent passwords masked most of the time, so any screen capture or over the shoulder peeking would just see a bunch of ********.
    Ubuntu-: Means in African : "Im too dumb to use Slackware"

  6. #6
    Flaming Rain probably has your best solution - that is if you must use these public systems to do your work... Although phishphreek80's suggestion to bring your own laptop (either yours or one you borrow from someone) would obviously be the better choice if its an option for you...

    Otherwise, for in general beating them there is 'anti-keylogger' software that I've heard works to prevent most any keylogger from working properly... The only problem with it is, on most of these 'public like' system - you don't have the ability to download and install software.

    It can be found here, incase you want to take a look at it anyway:
    http://www.newfreeware.com/search.php3?q=combat

    RRP

  7. #7
    Senior Member
    Join Date
    Feb 2003
    Location
    Memphis, TN
    Posts
    3,747
    Well it depends instronics.

    I've used keyloggers on several of my friends computers when they type their password in I can still open up the logs and find it. Because this keylogger only captures text it sees what you typed in.

    Also the keylogger I used told me what windows this stuff was being typed into.

    So even though it only shows as a bunch of ***** the text keylogger will still capture it.
    =

  8. #8
    Member
    Join Date
    Sep 2003
    Posts
    76
    I've seen some keylogger that pick up anything, if you backspace once, itll remove the last character, so they could still get your password even if you did the backspace thing i believe. I guess the best way is to just bring your own laptop.

  9. #9
    Senior Member
    Join Date
    Nov 2003
    Posts
    107
    Yeah, i used to use jthAbcKeylogger on my machine just to see what people did (family computer). It dumped out the window name and what people typed in and all, but it had a sucky check rate. (Anything that i typed at above 40wpm was essentially missing every other letter). It was nice and stayed somewhat stealthy when i was running explorer as my shell, but as soon as i loaded geoshell instead, it was plainly visible in my window tiler.

    I have yet to see any truly powerful and free logger. (ie, stores applications, mouse actions, keystrokes, and even screen captures.) It'd be difficult to get around one of those unless you manage to disable it somehow to begin with.
    Is there a sum of an inifinite geometric series? Well, that all depends on what you consider a negligible amount.

  10. #10
    Member
    Join Date
    Dec 2001
    Posts
    31
    you should also check to see if there are any hardware key loggers and remove them if there is one. they are little electronic devices that go in between the keyboard cord and the computer's ps/2 port.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •