Are virtual keywords (on screen for pw entry) more secure? - GoFuckYourself.com

rowan · 02-25-2006, 06:12 PM

My bank recently changed to a virtual keyboard at the login screen for online banking...

I thought at first that it was stupid because it's more obvious where you're moving a mouse to...

Now I've just realised that as you click the number and letter buttons they STAY HIGHLIGHTED until you click something else.

How fucking stupid is that? Anyone peering over your shoulder can easily figure out your pw.

After Shock Media · 02-25-2006, 06:13 PM

That one does sound stupid.

The one ING uses rocks though and I want a copy of it.

Matt 26z · 02-25-2006, 06:14 PM

I'd rather have something like that. It would eliminate the possibility of someone getting your info through a keylogger.

wdforty · 02-25-2006, 06:29 PM

Yeah the ING one is great because the position of the numbers on the screen change.

rowan · 02-25-2006, 06:31 PM

Hmm... wonder which key I just clicked.

biftek · 02-25-2006, 07:17 PM

well i guess your are more likely to notice that someone is shoulder surfing rather then some program running in the background collecting key strokes

rule 1 is you should never access personal stuff at public access terminals

the sms thing the NAB does is good, any internet transaction and they'll SMS you a code to input on the screen for approval

Matt 26z · 02-25-2006, 07:25 PM

I just noticed Microsoft On-Screen Keyboard on my computer. Does something like this prevent trojans from getting login info, or have they found a way to still get it?

I'm always paranoid when entering in bank info or CC numbers.

rowan · 02-25-2006, 07:58 PM

I'm sure someone has already come up with something that saves/sends a screen cap every time you click your mouse. That makes virtual keyboards useless as well.

02-25-2006, 06:12 PM	#1
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	Are virtual keywords (on screen for pw entry) more secure? My bank recently changed to a virtual keyboard at the login screen for online banking... I thought at first that it was stupid because it's more obvious where you're moving a mouse to... Now I've just realised that as you click the number and letter buttons they STAY HIGHLIGHTED until you click something else. How fucking stupid is that? Anyone peering over your shoulder can easily figure out your pw.

02-25-2006, 06:13 PM	#2
After Shock Media It's coming look busy Join Date: Mar 2001 Location: "Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn". Posts: 35,299	That one does sound stupid. The one ING uses rocks though and I want a copy of it. __________________ [email protected] ICQ:135982156 AIM: Aftershockmed1a MSN: [email protected]

02-25-2006, 06:29 PM	#4
wdforty Confirmed User Industry Role: Join Date: Aug 2004 Posts: 1,824	Yeah the ING one is great because the position of the numbers on the screen change. __________________ icq 157542142

02-25-2006, 07:17 PM	#6
biftek So Fucking Banned Join Date: Jan 2005 Location: Victoria, Australia Posts: 1,030	well i guess your are more likely to notice that someone is shoulder surfing rather then some program running in the background collecting key strokes rule 1 is you should never access personal stuff at public access terminals the sms thing the NAB does is good, any internet transaction and they'll SMS you a code to input on the screen for approval Last edited by biftek; 02-25-2006 at 07:18 PM..

02-25-2006, 06:14 PM	#3
Matt 26z So Fucking Banned Industry Role: Join Date: Apr 2002 Location: ¤ª"˜¨๑۩۞۩๑¨˜"ª¤ Posts: 18,481	I'd rather have something like that. It would eliminate the possibility of someone getting your info through a keylogger.

02-25-2006, 06:31 PM	#5
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	Hmm... wonder which key I just clicked.

02-25-2006, 07:25 PM	#7
Matt 26z So Fucking Banned Industry Role: Join Date: Apr 2002 Location: ¤ª"˜¨๑۩۞۩๑¨˜"ª¤ Posts: 18,481	I just noticed Microsoft On-Screen Keyboard on my computer. Does something like this prevent trojans from getting login info, or have they found a way to still get it? I'm always paranoid when entering in bank info or CC numbers.

02-25-2006, 07:58 PM	#8
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	I'm sure someone has already come up with something that saves/sends a screen cap every time you click your mouse. That makes virtual keyboards useless as well.