2 ms·
I agree that nothing can save you once your system is compromised. But that is not equivalent to having a keylogger, because physical keyloggers exist (or keylo
by mr_mitm 5y ago
I agree that nothing can save you once your system is compromised. But that is not equivalent to having a keylogger, because physical keyloggers exist (or keylogging via camera, if that suits your definition of keylogger). Clipboard monitoring can also happen accidentally via remote desktop clients or virtual machines.
No matter how you slice it, there are many more scenarios where passwords can get leaked compared to private keys being leaked. If everyone used private keys instead of passwords, the total number of compromised accounts per year would be substantially lower.
- usrbinbash 5y ago> If everyone used private keys instead of passwords The only difference between that and using a pwd manager: using a key-pair requires more infrastructure (namely public key repositories). I'd still have a master key to everything (the symmetric key used to encrypt my priv. key).