On Tue, 16 Jan 2001, Criptyk Hayz wrote:

> As Mike Stay helped point out, multiple hooks are chained. So the last hook
> to be installed is the first one to receive the keystroke.
> That application can then pass the keystrokes on or keep the other hooks
> from receiving them.
>
> The authors of PGP *might* have installed the hook to keep other
> applications from logging the passphrase.. this is easy enough to test if
> someone has a keylogger... ;-) Anyone want to try it?

The other alternative is they are using keystrokes and mouse movements for
an entropy pool.

Do these routines get installed in the version with source? Has anyone
disassembled the routines to find out what they do?

>
> ----- Original Message -----
> From: Riad S. Wahby <rswMIT.EDU>
> To: <coderpunkstoad.com>
> Sent: Tuesday, January 16, 2001 5:46 PM
> Subject: [jyapipeline.com: Re: keyboard loggers.]
>
> Surely Network Associates/PGP have no connection to the
> snoopers, but why scan keyboard and mouse?
>
> Keyboard Wbhook32.dll WEBSCANX.EXE
> CBT Pgphk.dll PGPTRAY.EXE
> Mouse Wbhook32.dll WEBSCANX.EXE
>
>

alanctrl-alt-del.com | Note to AOL users: for a quick shortcut to reply
Alan Olsen | to my mail, just hit the ctrl, alt and del keys.
    "In the future, everything will have its 15 minutes of blame."

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]