Techniques to prevent Key-loggers

Ertugrul Söylemez

On Mon, 11 Feb 2008 16:12:31 +0100
mak <mak@nospam.com> wrote:

> > This is particularly a problem at my workplace. I cannot trust
> > anyone here.
>
> I am sorry, but you should find another job.
> how much fun is *that* ?

That's the price of working independently, but it's not that bad. I
just don't want anyone here to mess around with my data. And I can
imagine that some would be interested in it.

Most of them lack the technical knowledge to mount an attack, but I hate
making such assumptions.


Regards,
Ertugrul Söylemez.

comment

On Mon, 11 Feb 2008 04:32:55 -0800 (PST)
Hakako <1001webs@gmail.com> wrote:

>> > Still the cable can be cut apart to install a logger right
>> > inbetween, or a camera could be installed to intercept my typing.
>> > Connected USB storages may be intercepted through hardware. Or even
> > the entire Machine could be replaced, while I'm at home sleeping.
>>
>> Yeah right, and even the entire office could be vandalized or even
>> demolished while you are away on vacation.
>> Gimme a break, will yah?

>This threat is real for some people. In my case, it's not that bad, but
>for some the possibilities I mentioned must be considered.
>
FFS I thought the Third Reich was defeated in 1945.

--
This poast was encoded using ROT 0

Ertugrul Söylemez

On Mon, 11 Feb 2008 15:30:47 -0000
"comment" <comment@some.com> wrote:

> > This threat is real for some people. In my case, it's not that bad,
> > but for some the possibilities I mentioned must be considered.
>
> FFS I thought the Third Reich was defeated in 1945.

I mean the threat that someone may be interested in my data enough to
try to steal it.


Regards,
Ertugrul Söylemez.

Hakako

On Feb 11, 5:03 pm, Ertugrul Söylemez <e...@ertes.de> wrote:
> On Mon, 11 Feb 2008 15:30:47 -0000
>
> "comment" <comm...@some.com> wrote:
> > > This threat is real for some people. In my case, it's not that bad,
> > > but for some the possibilities I mentioned must be considered.
>
> > FFS I thought the Third Reich was defeated in 1945.
>
> I mean the threat that someone may be interested in my data enough to
> try to steal it.

And why bother with all that gadgetry?
If they are really SO interested it would be easier for them to just
kidnap you and beat the shit out of you until you sing The
Traviatta ...

Hakako

On Feb 12, 3:43 am, Hakako <1001w...@gmail.com> wrote:
> On Feb 11, 5:03 pm, Ertugrul Söylemez <e...@ertes.de> wrote:
>
> > On Mon, 11 Feb 2008 15:30:47 -0000
>
> > "comment" <comm...@some.com> wrote:
> > > > This threat is real for some people. In my case, it's not that bad,
> > > > but for some the possibilities I mentioned must be considered.
>
> > > FFS I thought the Third Reich was defeated in 1945.
>
> > I mean the threat that someone may be interested in my data enough to
> > try to steal it.
>
> And why bother with all that gadgetry?
> If they are really SO interested it would be easier for them to just
> kidnap you and beat the shit out of you until you sing The
> Traviatta ...

BYW, that technique is called "Brute Force" Password cracking ...

Ertugrul Söylemez

On Wed, 13 Feb 2008 19:15:16 -0800 (PST)
Hakako <1001webs@gmail.com> wrote:

> >>>> This threat is real for some people. In my case, it's not that
> >>>> bad, but for some the possibilities I mentioned must be
> >>>> considered.
> >>>
> >>> FFS I thought the Third Reich was defeated in 1945.
> >>
> >> I mean the threat that someone may be interested in my data enough
> >> to try to steal it.
> >
> > And why bother with all that gadgetry?
> > If they are really SO interested it would be easier for them to just
> > kidnap you and beat the shit out of you until you sing The Traviatta
> > ...
>
> BYW, that technique is called "Brute Force" Password cracking ...

Or rubber hose cryptanalysis.


Regards,
Ertugrul Söylemez.

Carlo Seddaiu

Hi Hakako,

The best way to stop a key logger is feed the key logger desinformation.
Feed it for example fake logins in fake websites and monitor the logs to
see who is logging in from what ip's with those fake credentials. The
best way to stop key loggers is to catch the people who use them.

Ciao,
Carlo


Sebastian G. schreef:
> Hakako wrote:
>
>
>> Use an automatic form filler program that prevent keylogging since
>> they're not using the keyboard.
>
>
> What exactly stops the malicious program from simply reading the data
> from the form?
>
>> Any other ideas for protection against keyloggers?
>
>
> Very simple: Don't install any.

Sebastian G.

Carlo Seddaiu wrote:

> Hi Hakako,
>
> The best way to stop a key logger is feed the key logger desinformation.
> Feed it for example fake logins in fake websites and monitor the logs to
> see who is logging in from what ip's with those fake credentials. The
> best way to stop key loggers is to catch the people who use them.


The question is about the mysterious step between "monitor logins" and
"catch the people", and which kind of magic for implementing it.

coment

"Sebastian G." <seppi@seppig.de> wrote in message
news:634v55F25r2gpU1@mid.dfncis.de...
> Carlo Seddaiu wrote:
>
>> Hi Hakako,
>>
>> The best way to stop a key logger is feed the key logger desinformation.
>> Feed it for example fake logins in fake websites and monitor the logs to
>> see who is logging in from what ip's with those fake credentials. The
>> best way to stop key loggers is to catch the people who use them.
>
>
> The question is about the mysterious step between "monitor logins" and "catch
> the people", and which kind of magic for implementing it.
>
It's just amatter of having a pentagon with the right arcane symbol in it on
your ram chips and then reciting the correct incantation at exactly the same
moment the key logger is triggered. I think most business schools have a course
covering this.

Dustin Cook

"coment" <some@com.net> wrote in
news:022364d4$0$16191$c3e8da3@news.astraweb.com:

> "Sebastian G." <seppi@seppig.de> wrote in message
> news:634v55F25r2gpU1@mid.dfncis.de...
>> Carlo Seddaiu wrote:
>>
>>> Hi Hakako,
>>>
>>> The best way to stop a key logger is feed the key logger
>>> desinformation. Feed it for example fake logins in fake websites and
>>> monitor the logs to see who is logging in from what ip's with those
>>> fake credentials. The best way to stop key loggers is to catch the
>>> people who use them.
>>
>>
>> The question is about the mysterious step between "monitor logins"
>> and "catch the people", and which kind of magic for implementing it.
>>
> It's just amatter of having a pentagon with the right arcane symbol in
> it on your ram chips and then reciting the correct incantation at
> exactly the same moment the key logger is triggered. I think most
> business schools have a course covering this.
>
>

Doesn't the season still come into play? or the moons current position or
something? hehehe.


--
Regards,
Dustin Cook - http://bughunter.it-mate.co.uk
BugHunter v2.2e AntiMalware Removal Utility