OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Andrew Jenks (ajenksmicrosoft.com)
Date: Wed Jan 17 2001 - 13:58:14 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Means you re-make the CD when a new crack comes out :-)

    -----Original Message-----
    From: Ben Laurie [mailto:benalgroup.co.uk]
    Sent: Wednesday, January 17, 2001 8:50 AM
    To: Peter Fairbrother
    Cc: David Honig; Hayz; coderpunkstoad.com
    Subject: Re: Keystroke Sniffer Detection.

    Peter Fairbrother wrote:
    >
    > on 16/1/01 4:20 pm, David Honig at honigsprynet.com wrote:
    > [snip]
    > >> This is my question: Does anyone have any ideas on getting another
    > >> application to detect keyboard hooks? I think this would be very
    valuable
    > >> to the crypto community. :-)
    > >
    > > On some OSes you should be able to enumerate these on a running system.
    > > Problem is, the tool you use to report them might be compromised, the
    > > sniffer could be elsewhere in the OS. But worth trying, especially
    > > if you had a copy of the tools the TLAs use.
    > >
    > > Other approaches include using a trusted PDA + keyboard as input devices
    > > and trusting the PC for only transport.
    >
    > You could take the m-o-o-t route and put everything on an actively
    verified
    > CD that boots the machine. Doesn't work for hardware bugs tho'...

    "actively verified"? What does that mean?

    Cheers,

    Ben.

    --
    http://www.apache-ssl.org/ben.html
    

    "There is no limit to what a man can do or how far he can go if he doesn't mind who gets the credit." - Robert Woodruff