WebApp Sec: Re: keyloggers?

[Augusto Paes de Barros <apbarros () gmail com>]

Some trojans/backdoors do not capture key strokes but form field
contents. In these cases I believe that Roboform won't help to avoid
the password to be stealed.

Regards,

Augusto.

On Apr 5, 2005 7:14 PM, Louis Baumann <louis () baumanns net> wrote:
> You can use a program like Roboform portable on a usb drive that fills in
> passwords with a few clicks of the mouse.  That way there's no keys to
> capture. ;)
>
> - louis
>
>
> ----- Original Message -----
> From: "SB" <vidyabalaji () gmail com>
> To: <webappsec () securityfocus com>
> Sent: Friday, April 01, 2005 12:48 PM
> Subject: keyloggers?
>
> > Hi!
> >
> > Any recommendations of Best Practices when accessing your Online
> > Banking account from an Internet Cafe?  Assuming your bank does not
> > provide two factor authentication, are there any specific checks you
> > can do, tools you can run on a  machine to ensure it is not Logging
> > keystrokes, caching UID/pwds etc
> >
> > Any suggestions or advice in this area is greatly appreciated
> >
> > Thanks
> >
> > SB

-- 
Augusto Paes de Barros, CISSP
http://www.paesdebarros.com.br