Comments for Will using an on screen keyboard stop keyboard loggers and hackers?

Comment from Michael Steiner on 2010-11-04

2010-11-04T22:39:48Z

One method that DOES defeat keyloggers (correct me if I'm wrong) is moving the cursor mid-password by clicking it in a different location or even outside the password field.

For instance, if your password is "12534," first type "1234," click the mouse after the second character, and type in "5." The keylogger will record "12345" but the browser will send your correct password to the server. To further thwart the attacker, after typing "5" click the mouse anywhere outside the field and type "67"; then, click the mouse in the password field again and hit Enter. The keylogger will record "1234567," which is nowhere near the real "12534" password.

It should go without saying but, for this to work, you HAVE to use the mouse and not the arrow keys on the keyboard!

This will not defeat keyloggers. Keyloggers often log much more than keystrokes, and include mouse movements, clicks and even screen shots.

05-Nov-2010

]]>

A comment on: Will using an on screen keyboard stop keyboard loggers and hackers?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Graham on 2010-02-14

2010-02-14T19:07:23Z

I am by no means an expert in these matters, however I have to agree that keyscrambler is an effective tool against keyloggers. I added the plugin to Firefox and downloaded trial versions of 2 commercial keyloggers that work invisibly at the kernel level.

When I input data into any website, the keyloggers recorded either nothing or gibberish.

Perhaps you don't want the keyloggers named on your site, but I would be happy to provide the names on request.

]]>

A comment on: Will using an on screen keyboard stop keyboard loggers and hackers?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from David on 2010-02-04

2010-02-04T16:04:21Z

On-screen keyboard doesn't defeat keyloggers, i use a keylogger on my own computer. so i can tell when people have been using it while i'm gone. It records everything the on-screen does

]]>

A comment on: Will using an on screen keyboard stop keyboard loggers and hackers?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Tom Hoffman on 2009-05-27

2009-05-27T15:15:09Z

There is an interesting comparison of approaches at http://kyps.net/home/comparison what do you think?

]]>

A comment on: Will using an on screen keyboard stop keyboard loggers and hackers?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from greater good on 2009-01-17

2009-01-17T15:29:06Z

i guess it is the responsibility of websites to establish a security layer. they should ask for partial passwords and not full password. For example, a user has 8 character password. The website should display lesser than 8 boxes and ask the user to, say, enter 1st, 4th, 6th and 7th character of password. every time user tries a login, these places should be randomized so that every time, the website ask for different characters of password of the same user.
This can reduce password thefts to a significant extent, but not 100%.

]]>

A comment on: Will using an on screen keyboard stop keyboard loggers and hackers?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from fastfreddie1959 on 2009-01-15

2009-01-16T04:05:07Z

Once again i can offer what i use to defeat
keylogging.
A program called KeyScrambler.
It's a great program.
Works in firefox and IE browsers.

And once again I'll express my extreme skepticism at any software that you have to install as being able to defeat a sufficiently sophisticated keylogger. IMO: it can't be done, and these utilities are a waste of time.

- Leo
16-Jan-2009

]]>

A comment on: Will using an on screen keyboard stop keyboard loggers and hackers?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from amitpoddar on 2009-01-15

2009-01-15T18:47:01Z

There is a much better option than using the onscreen keyboard. To defeat keyloggers, i used to carry my login ids and passwords in my usb pen drive and copy and PASTE them into place, NOT TYPE them. This will defeat hardware key loggers. Passwords are entered as ****** in most cases which will defeat image capturing keyloggers.

Unless, of course, the keylogger is also watching the clipboard for anything you might copy/paste. VERY easy for a keylogger to do.

- Leo
16-Jan-2009

]]>

A comment on: Will using an on screen keyboard stop keyboard loggers and hackers?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.