[dm-crypt] avoid keyloggers: enter password with mouse?(virtual?keyboard)

Heinz Diehl htd at fancy-poultry.org
Tue Oct 4 20:48:09 CEST 2011


On 04.10.2011, Jan wrote: 

> You have a fully encrypted system on your USB stick like privatix 
> (see http://www.mandalka.name/privatix/index.html.en ) and you are 
> sitting in an internet cafe. There's a hardware keylogger installed 
> on that the PC you use. You lose your USB stick, maybe you even 
> forget it in the internet cafe (this happens)! 
[.....]

Privacy on a machine outside of your control is a no-go.
There are by far more options to get access to your data if
somebody other than yourself has admin/root access to the machine
you're using. A simple script which does a copy of anything inserted
will do it. Or the admin himself logged in from another machine, and
many more...





More information about the dm-crypt mailing list