3 ms·
The layout of the PIN keyboard at my last bank was randomized for each logon. I always thought this paranoid, but it's now looking prescient...
by to3m 14y ago
The layout of the PIN keyboard at my last bank was randomized for each logon. I always thought this paranoid, but it's now looking prescient...
- ygra 14y agoSlightly tangential to the overall discussion, but I always wondered ... wouldn't even randomisation have to make sure that the key labels are readable with assistive technologies (e.g. not use images without alt attribute or even an image map for the complete keypad) and in that case be accessible to any input logger that bothers to log what controls are clicked? Or are they actually allowed to shut out users with disabilities altogether?
- to3m 14y agoAs I recall, the buttons looked like just ordinary text links in a coloured table, presumably with javascript callbacks for the clicks. So I suppose they'd have been screen reader-friendly enough for use by the blind and so on, while still being random enough by default to defeat mouseloggers, and keyboardless enough by default to defeat keyloggers.