Keystroke Logging

Keystroke Loggers are insidious because they can be used to record passwords and other sensitive information as you type.

Who Uses Keystroke Loggers

• Suspicious partners looking for evidence of cheating
• Government agencies conducting surveillance
• Mischevious cracker wannabes
• Criminals trying to victimize you

Untrusted Computers

You are most vulnerable to keystroke logging when you use computers other than your own. Anyone could have a keystroke logger on their system with our without their knowledge as a result of targeted espionage or compromising worms turning their system into part of a crackers' zombie network.

Trust discipline

• Security audit a system before you do somethign risky with it. If you don't trust the system, don't type passwords into it.
• Remember that email passwords can lead a cracker to other passwords that were mailed to the account.

Hardware USB/Serial Keystroke Loggers

The most common form of keystroke logger is a Hardware logger inserted between the keyboard and the USB or serial port of the computer. Always check the ports for an obvious external logger between the motherboard and cable. Avoid using front-mounted ports that leave wiring between the motherboard and the keyboard.

Magic Lantern

Magic Lantern is the code name of the FBI's computer surveillance system.

Black Bag Jobs

Whoever the en