WebApp Sec: RE: keyloggers?

From: Griffiths, Ian <Ian.Griffiths_at_liv-coll.ac.uk>
Date: Wed, 6 Apr 2005 12:09:27 +0100

Best practise - don't.

There would be no sure way of knowing that a machine is not logging
keystrokes. You could probably take a look at task list and see what is
running and find out that it is, but the opposite is a lot more
difficult to prove.

Ian

-----Original Message-----
From: SB [mailto:vidyabalaji_at_gmail.com]
Sent: 01 April 2005 20:48
To: webappsec_at_securityfocus.com
Subject: keyloggers?

Hi!

Any recommendations of Best Practices when accessing your Online Banking
account from an Internet Cafe? Assuming your bank does not provide two
factor authentication, are there any specific checks you can do, tools
you can run on a machine to ensure it is not Logging keystrokes,
caching UID/pwds etc

Any suggestions or advice in this area is greatly appreciated

Thanks

SB
Received on Apr 06 2005