How to defeat spyware

[Declan McCullagh]

It seems pretty clear from the court documents that the Scarfo keyboard
logger only recorded keystrokes. We don't have details ("classified,"
"national security," "CIPA") but the exhibit introduced as evidence
shows backspaces, up-down arrows, and other functions you'd normally
associate with keyboard entry only.

-Declan


On Mon, Jan 07, 2002 at 05:42:11PM -0800, Tim May wrote:
> A technical question for anyone: If I store passphrases (and keys, for 
> extra security) on a flash-based USB drive dongle, and then use 
> cut-and-paste to access them and paste them into PGP, is it possible for 
> a keystroke logger to see them? In the Mac at least, pasting from a file 
> or from the clipboard does not of course go through the keyboard. So a 
> straightforward intercept of the keyboard driver at the BIOS level 
> should not see the pasted material. I realize that "keystroke logger" 
> can mean more than just logging the keyboard, however.