Keyloggers

File: 1484931492723.gif (1MB, 217x217px) Image search: [Google]

1MB, 217x217px

>>58899410
>wincucks have to worry about this

>>58899410
Yes. That's why banks use it on their web sites. But there are some malware that also takes a small picture around your mouse pointer every time you click something.

>>58899410
if you suspect you have a keylogger you should probably just format

>>58899410
The included onscreen keyboard in Windows directly emulates the physical keyboard so it's vulnerable.
Just remove System32 from the windows directory, there's where all malware resides nowadays

>>58899570
luckily I don't suspect it, just interested in the question

>>58899564
Thanks. What if instead of entering your password by keyboard, you open up a script which takes control of your mouse and clicks your password on an onscreen keyboard? You could easily do it with choosing the (x,y) position of a letter of your on-screen keyboard relative to, say, the upper-left close [x] button (assuming the size of the keyboard stays the same).

>>58899607
I'm not that new...

>>58899410
>windows on-screen keyboard
>protect against keyloggers

>>58899621
>>58899564
>>58899607
On second thought, how about you have some standard text document which seems like say, the first 2 pages of Harry Potter, but contains all the characters that occur in your password. You then write a script that copies and pastes exactly your password, character by character into the password field. That still wouldn't solve the issue of keyloggers taking mini-screenshots whenever you click something but it would be very safe against the majority of (conventional) keyloggers right?

>>58899410
No it doesn't protect against it.

Most Windows keylogger are hook based, and the virtual keyboard generates virtual keys which are still passed through the global window message's.

>>58899659
It's not hard to hook the clipboard too, and copy all contents copied into it. In fact, any half decent keylogger should be monitoring CTRL (down) + V (down), and appropriately copy the clipboard contents.

>>58899680
damn it :/

>>58899729
Just use Linux and stop worrying about stupid stuff like this.
Or use a live distro for your online banking if you're that concerned.

>>58899820
Terrible advice. Linux keylogger are less detectable than Window's ones.

Better advice is to use a clean and snapshotted VM when banking and such and revert on fresh transaction, hence keyloggers would only ever pick up on characters in that Window (VMware, VirtualBox), but can't identify the e.g. browser page title.

Live distro is fine too, but a bit tedious.

>>58899820
>>58899882
Thanks for the advice!

>>58899621
Doesn't help against hardware keylogger.
Maybe try arrow buttons to move mouse cursor around virtual keyboard?

>>58899410
>Windows 10

File: 1456269595126.jpg (376KB, 720x720px) Image search: [Google]

376KB, 720x720px

>>58899820
I'd just like to interject for a moment. What you're referring to as Linux, is in fact, GNU/Linux, or as I've recently taken to calling it, GNU plus Linux. Linux is not an operating system unto itself, but rather another free component of a fully functioning GNU system made useful by the GNU corelibs, shell utilities and vital system components comprising a full OS as defined by POSIX.

Many computer users run a modified version of the GNU system every day, without realizing it. Through a peculiar turn of events, the version of GNU which is widely used today is often called "Linux", and many of its users are not aware that it is basically the GNU system, developed by the GNU Project.

There really is a Linux, and these people are using it, but it is just a part of the system they use. Linux is the kernel: the program in the system that allocates the machine's resources to the other programs that you run. The kernel is an essential part of an operating system, but useless by itself; it can only function in the context of a complete operating system. Linux is normally used in combination with the GNU operating system: the whole system is basically GNU with Linux added, or GNU/Linux. All the so-called "Linux" distributions are really distributions of GNU/Linux.

>>58899564
>Yes. That's why banks use it on their web sites.

pardon my ignorance but what do banks use? On screen keyboards? I've never seen them in my country.

>>58899516
THIS