Keylogger prevention

[aridash]

Originally Posted by Amlin

wiki writer was right. Read that article again from beginning to the end. That article isnt about EU or smt, so it covers more that is related there. So one of keylogger type is hardware device. Or another that uses sounds... In these cases switching language WILL help.
EDIT: the only defense is knowledge, lots of knowledge and proper use of that knowledge.

sry, i was going to let it go, but its such crap and poor advice.

if someone has attached a hardware logger to your machine, we must assume they have access to the machine. they could either take a copy of the HD with all settings/config or just return to the machine when you are not present and apply the logged detail. net effect? owned.

if someone has a software logger on your machine they can simply read from the memory and therefore have the ascii string no matter what language/layout you use. net effect? owned.

such low level security is about as usefull as an alphabet cipher, they will protect against only the most basic and crude attempts to hack but anyone with any real knowledge and skill will easily defeat. get AV/spybot/firewall software. if you are using a communial PC, dont for anything financial or otherwise significant (some people check thier bank balances at cyber cafes... oh dear )

sound? you got me there, im not sure i beleive that, sounds like a theortical attack, most voice software has trouble training to learn speach let alone the subtle differences between a 't' and a 'y' key press. a sophisticated attack by someone who wouldnt fall for you using a dvorak layout.

[Amlin]

Yes, my advice may be crap, with this thread i wanted to know ways to prevent keyloggers. And all this discussion about language switching was arrised because i wish to protect Wikipedia article writer. It may not be usefull for us, but there may be people who may use this info, so this is a way to prevent keylogging. If the problem is with my post then i dont care - i may just edit my first post or do whatever you think is right. At the moment of thread starting i tought that keyloggers catch keyboard interrupt and log keyboard sended codes. This is OS who interprets these codes in the way we see. If keylogger is working at OS level, after it interpreted keyboard codes to symbols depending on language then it wont help. But in any earlier level it will help.

[Hola]

http://www.comodo.com/boclean/boclean.html

and it's totally free! Use it or die.....

[Omnedon]

If you're worried about hardware keyloggers, check the back of your PC for any strange devices plugged in between the PC and keyboard.

Otherwise, the best practical security is a dedicated machine to run EU on, nothing else, ever.

[Death]

What about the possibilty of EU on Playstation 3 or Xbox? Bipass all the messeging and email programs all together.No one will have to upgrade pc's to handle the cryengine either....Just a thought.....

[Death]

Originally Posted by Omnedon

If you're worried about hardware keyloggers, check the back of your PC for any strange devices plugged in between the PC and keyboard.

Otherwise, the best practical security is a dedicated machine to run EU on, nothing else, ever.

Exactly, Run 2 pc's here one strickly for EU and other gaming...

[Tseng]

Originally Posted by Amlin

It may not be usefull for us, but there may be people who may use this info, so this is a way to prevent keylogging. If the problem is with my post then i dont care - i may just edit my first post or do whatever you think is right. At the moment of thread starting i tought that keyloggers catch keyboard interrupt and log keyboard sended codes. This is OS who interprets these codes in the way we see. If keylogger is working at OS level, after it interpreted keyboard codes to symbols depending on language then it wont help. But in any earlier level it will help.

Imho this tips (but the one with the gold card) are all useless and would just create an illusion of saftely (which is as worse as not knowing of the threat).

The usual tips were already posted once by Kerham (exculded #1, which is a very stupid one imho lol, sorry Kerham :P).

Basicly:

1. Have a good anti-virus/computer protection software installed (i.e. Kaspersky Internet Security 7.0 is pretty good in it)
2. That software shouldn't only detect virus/trojans/keylogger by signature but also have a proactive defense system (i.e. detecting suspicious activities, such as an installation of a global hook or memorymodifications or changing of system settings in registry etc.)
3. Your security software should be cappable of keeping MD5 hashes of executable files. If the file got changed, it warns you and prevent the exe from being started (until you agree). This prevents you from starting infected/modifed exe files (i.e. if a keylogger replaces or modifies your Entropia.exe)
4. Don't open every shit blindly
5. Keep your windows updated
6. Keep your anti-virus software updated
7. Don't use windows with an administrator account, always use an account with limited privilegues (keyloggers usually can't install themselves permantly on non admin accounts (Well there are some ways if they use a security leak, but buy using Vista this risk is lowered pretty much))
8. Other than that (not directly against keyloggers attacks): Use strong passwords (mixed lower-, uppercase letters, numbers and special characters)
9. Don't use same login for EU and forums/other accounts (i.e. same login for EU and your mail account or Entropia forum etc.)

Dunno i ran out of ideas. If you're a completly paranoid freak, you could also manage to run Entropia under the SYSTEM account/privileges under Vista (which is bit tricky), which will effectivly prevent any (software) keylogger to log your EU login (even if the key logger was started with admin privileges), because lower privileged processes can't write in higher privileged processes (unless the keylogger is installed as a driver or system service, which again means, you haven't followed the list posted above and you run a program which you shouldn't have)

[Tussi]

Originally Posted by Omnedon

If you're worried about hardware keyloggers, check the back of your PC for any strange devices plugged in between the PC and keyboard.

In case you have a hardware keylogger then you'll have a bigger problem anyway.

Originally Posted by Kerham

I have an "exceptional" safe way of running my comp:

1. Fromatting and reinstalling every 5-6 months (Windows needs it anyway).

Try an image or HD-Guard

3. Don't visit warez, free porn & co sites.

Interestingly the most problems come through 'normal' sites.

5. Use some AV and firewall, there are plenty of them, to prevent simple sniffers.

Use brain.exe - that'll help against most problems.

I am not a computer savvy, but I believe there are dudes able to bypass almost any kind of protection. Those dudes won't endanger their asses for a measly whatever account.

Yes. At least regarding to Windows (standard install) and users of internet explorer and outlook (which are like swiss cheese).

So a regular usage of computer, with average caution, like don't visit this or that and don't download this and that ain't a matter of advanced science of computers, is about common sense.

Yep.

Tussi

[DiMeNsIoN-47]

So i can do either all of the above or...

Cut grass for 1-3 hours and buy a gold card...

Instead of buying a computer for EU strictly and all the hassle of the above

Am i correct?

[Acronoid]

Get a firewall (even a software one like zonealarm). If you don't give any programs permission to access the net you don't know you are alot safer anyway.