Reader Comments (rss)

(Flattened / Threaded)

1.  

   Hardware device?

   

   Nonesuch, Mar 23rd, 2004 @ 11:38pm

   
   

   It's not entirely clear that the "keystroke logger" was software, and not a physical hardware device installed inline between the keyboard and the PC,

   If it was a physical "keycatcher" device, then physical access would normally be necessary to view the logs.

   I say "normally" because the fifty buck consumer versions simply dump the log out to the PC when the user-selectable password is typed -- there are rumors of higher end products (some embedded in keyboards) with IR/RF/PCS transmission capability...

   N

   
   (P.S. I have no affiliation or affiliate kickback relationship with CyberGuys.)

   [ reply to this | link to this | view in thread ]

2.  

   Re: Hardware device?

   

   Matt, Mar 24th, 2004 @ 12:18am

   
   

   Reading through this Techdirt entry, it didn't even cross my mind that it was a software logger until the very end - I had assumed it must have been one of those hardware loggers.
   
   Would make more sense if it were hardware - surely even the sloppiest insurance companies would prevent their employees from installing unauthorised software?
   
   ...or maybe not :p

   [ reply to this | link to this | view in thread ]

3.  

   Re: Hardware device?

   

   Brian J., Mar 24th, 2004 @ 6:26pm

   
   

   I'm with you guys. Sounds like hardware.
   Especially the bit about the charge being an electronic bugging device.

   [ reply to this | link to this | view in thread ]

4.  

   Keystroke Loggers

   

   JonnyRo, Mar 24th, 2004 @ 10:28pm

   
   

   It is a very valid concern from an IT professional's point of view to be worried about users having keystroke loggers, physical or otherwise, installed on their systems. Many users are non-technical and might operate for years without ever noticing a keystroke logger, heaven forbid they are duped into installing it themselves.
   
   
   One way to catch such antics in an always networked environment would be to monitor outgoing internet traffic on weekends when no one is in the office to build a list of external sites that are connected to from internal computers to external addresses. As for the hardware loggers there really isnt much of anything that can be done, aside from maintaining a trusted computer behind a locked door that is used for extremely confidential stuff.
   
   
   The problem with that approach is that you are increasing the effort required to use a resource, thereby reducing it's utility. If you dont strike the right balance users will simply abandon/ignore secure operating practices.

   [ reply to this | link to this | view in thread ]

5.  

   Which law?

   

   Anonymous Coward, Mar 26th, 2004 @ 9:08am

   
   

   I've read on many occasions that federal bugging laws only apply to voice communications. Hence, hidden cameras that did not record sound were OK, whereas hidden microphones were not. If that's true, then how do federal bug laws apply to a keyboard logger? Can anyone here tell me exactly which law he is charged with violating?
   
   

   [ reply to this | link to this | view in thread ]

6.  

   Re: Which law?

   

   Sweetsuzee, Mar 27th, 2004 @ 11:59am

   
   

   "Illegal wiretapping" includes any and all violations involving phone wires. The keyboard logger is more akin to wiretap than videography.

   [ reply to this | link to this | view in thread ]

Add Your Comment