Friday, July 13, 2007

Psst! If you use encryption, use a virtual (on screen) keyboard to avoid keystroke loggers.

Over at News.com, Declan McCullagh has been following a recent court case that offers a rare peek into how some fed agents conduct digital investigations when a suspect uses encryption> First, break into the suspect's home or workplace, then implant keystroke-logging software on their computer, then step back and spy.


It seems that spyware and key loggers are far more advanced and commonplace today than they were six years ago, as are anti-spyware tools. I wonder if the FBI could seek a court order requiring an anti-spyware company not to report fedware (as in, fedware would be whitelisted if detected and the customer would not be alerted).

This article about keyloggers has a section about preventing keystroke capture that suggests virtual (on screen) keyboards may be a way to prevent capture.

No comments: