What you need to know to keep your online accounts safe

Re:What you need to know to keep your online accounts safe by 300bps on Saturday September 28, 2013 @08:19AM (#6461632)

Didn't see a lot of practical advice. For example: they say there aren't really defenses against keyloggers but that is not true. One defense to protect a web password is to inject characters into the key logger that are ignored by the browser. One method of doing this is to click in the password text box, type one character of your password then click on the background of the page and type a bunch of gibberish then repeat. The keylogger will be filled with random gibberish instead of your password.

[ Parent | on HN ]

Re:What you need to know to keep your online accounts safe by StavrosK on Saturday September 28, 2013 @08:36AM (#6461664)

Most keyloggers include the window title (and the really advanced ones take screenshots as well), so this countermeasure is easily defeated.

[ Parent | on HN ]

Re:What you need to know to keep your online accounts safe by 300bps on Saturday September 28, 2013 @11:54AM (#6462080)

I'm not sure if you understood what I was saying because the window title would remain the same (i.e. the browser). You would just be clicking inside and outside of a textbox within the same browser.

As for taking a screenshot - that wouldn't help either with something meaningful like a password. Not to mention that doing screenshots totally changes the dynamic of a "key logger" and exponentially raises the amount of storage needed and makes it even more difficult to glean useful data from it.

I think you're trying to stretch to make this countermeasure "easily defeated" when it really isn't.

[ Parent | on HN ]

Re:What you need to know to keep your online accounts safe by txutxu on Saturday September 28, 2013 @09:17AM (#6461735)

Well, in my opinion, the advices are practical.

Some of them require a little bit more of research by the user, but the advices are practical all of them.

[ Parent | on HN ]