4 ms·

And it's simple to run a keylogger after a brower/flash/pdf/java exploit to grab your password, isn't it? Not even admin/root access is needed.

• Groxx 15y ago
  Not if you have a secure means of input in your OS. OSX does, for instance, you can turn it on in the Terminal application and no loggers will see what you type. Unless they install as a kernel extension, then you're screwed. But that requires a password.
  • trotsky 15y ago
    or a bog standard privilege escalation bug
    • Groxx 15y ago
      of course. But now we're talking something significantly more complicated than a keylogger, and more fragile as it probably relies on glitchy behavior.