News for hackers. Stuff that matters.

A comment on The paranoid #! Security Guide.

Re:The paranoid #! Security Guide by drKarl on Sunday July 14, 2013 @09:22AM (#6040810)
I was wondering... would using a different keyboard layout like Colemak or Dvorak defeat keyloggers? I mean, what does keyloggers capture, the interrupts of the keyboard or the keystrokes? Would it get the keys pressed on the keyboard even if those translate to different keys on the keyboard layout or they would capture the keys as if using Qwerty, so the passwords captured would be different?
[ Parent | on HN ]
Re:The paranoid #! Security Guide by venomsnake on Sunday July 14, 2013 @09:28AM (#6040827)
It won't because by the non password text entered I will be able to derive the layout and have good aproximation of the layout used.
[ Parent | on HN ]
Re:The paranoid #! Security Guide by drKarl on Sunday July 14, 2013 @09:31AM (#6040834)
Good catch
[ Parent | on HN ]
Re:The paranoid #! Security Guide by unimpressive on Sunday July 14, 2013 @10:46AM (#6040984)
Even if you only had the text of the password, one of the first things that you'd try if your keylogged password didn't work would be to see if the characters map to a different layout. (There are only so many after all.)

If you want an excuse to try switching to Dvoraks, how about not having the semicolon on the home row?

[ Parent | on HN ]