4 ms·
Any operating system-level measure to prevent keyloggers logging secure input fields is bypassed when input masking is disabled in the browser, except where the
by steve_taylor 7y ago
Any operating system-level measure to prevent keyloggers logging secure input fields is bypassed when input masking is disabled in the browser, except where the browser natively provides a Show password feature.
- explodingcamera 7y agoWhat low level measures? Afaik if you have untrusted software running that can globally listen to your keyboard you're f'ed.
- im3w1l 7y agoWould be pretty neat if we could establish a trusted path from the keyboard to the server using crypto-magic. Like the keyboard could encrypt using the servers public key or something.
- ljcn 7y agoThe keyboard itself could encrypt the keystrokes before sending them to the OS? That could work. Moves the threat to attacking the keyboard firmware.
- steve_taylor 7y agoMacs prevent keylogging of designated secure inputs at the BIOS level.