4 ms·
re virtual keyboards: thwarts physical keyloggers. it thwarts kernel keyloggers too, but if you have a kernel keylogger kernel mitm is also a possibility (minus
by matthewaveryusa 5y ago
re virtual keyboards: thwarts physical keyloggers. it thwarts kernel keyloggers too, but if you have a kernel keylogger kernel mitm is also a possibility (minus bandwidth costs.) eons ago I had an hsbc card with random digits sent to me. the hsbc login asked for a random subset of the digits on the card + password which would thwart short-lived mitms — thinking back, that was pretty clever
- jamie_ca 5y agoSounds like what Canada Revenue Agency has up now as well, their 2FA setup gives you a 5x5 grid of random 3-letter combos, and when logging in they'll ask you for a specific three of them. Honestly it's a PITA (I need to keep said PDF vaguely handy, and it's stored less securely than in my password manager).