Thursday, April 26, 2007
Software key logger countermeasures reviewed
via Rootsecure, Informatica review of programs designed to block software keyloggers. This isn't about detection and removal, as a typical antimalware package would do. These are programs that encrypt or hide keystreams so that any keylogger that gets installed sees nothing or sees a scrambled stream of keystrokes.
Interestingly, several products limit their scope to protecting keystrokes in web browsers.
Interestingly, several products limit their scope to protecting keystrokes in web browsers.
Good review of hardware keyloggers
The Iron Geek reviews PS/2 and USB keystroke loggers.
Since the days of the keystroke recorder that looks like an RF suppressor in the cable, there's been a new generation of USB devices that, with varying and sometimes configurable stealthiness, sit on the USB bus and record keyboard traffic as it goes by.
There's no real defense except for physical security.
Since the days of the keystroke recorder that looks like an RF suppressor in the cable, there's been a new generation of USB devices that, with varying and sometimes configurable stealthiness, sit on the USB bus and record keyboard traffic as it goes by.
There's no real defense except for physical security.
Untappable fiber?
If you know much about the physics of optical fiber, you know that there are ways to make light leak out without breaking the fiber.
That news is now widely known, since The Register has published an article about optical fiber eavesdropping with Exfo's FCD-10B coupler. I'm skeptical about the description of a "simple clip-on" device, given the amount of sheathing and armor on fiber lines, but Infoguard alleges that someone found an eavesdropping device on a Verizon fiber line in 2003.
Who's Infoguard? They sell encryption solutions for high-speed fiber.
That news is now widely known, since The Register has published an article about optical fiber eavesdropping with Exfo's FCD-10B coupler. I'm skeptical about the description of a "simple clip-on" device, given the amount of sheathing and armor on fiber lines, but Infoguard alleges that someone found an eavesdropping device on a Verizon fiber line in 2003.
Who's Infoguard? They sell encryption solutions for high-speed fiber.
