Does U3 have another method of entering ones password without entering it via the keyboard? The threat of keyloggers makes using a keyboard to enter ones master password a risky venture. I would hope that they have a GUI where one could "click-enter" their password in order to fool the keylogger threat. Thanks.
- Derek
P.S. I realize that one could change ones password after use on a compromised system, but I keep forgetting all the new passwords I create
It's keyboard-only. Since the password is before the U3 launchpad even comes up (and before the data partition is accessible), support would have to be built into the Launchpad itself.
Sometimes, the impossible can become possible, if you're awesome!
On Windows Xp computers, you can use the accesibility feature, on-screen keyboard.
Start>All programs>Accesories>accesibility>Onscreen keyboard
I dont trust it somehow, but I plan to test it on my VmWare.
"What about Love?" - "Overrated. Biochemically no different than eating large quantities of chocolate." - Al Pacino in The Devils Advocate
A keylogger picks an on-screen keyboard up just as easily as typing.
Sometimes, the impossible can become possible, if you're awesome!
So I was right not to trust the OnScreenKeyboard-plugin on the Keepass page.
"What about Love?" - "Overrated. Biochemically no different than eating large quantities of chocolate." - Al Pacino in The Devils Advocate
thats true, wasnt thinking.
What other alternative would thier be to enter the password though?
Those are the only keyboard things I know of:
The real thing
and the on screen one..
A writing-pad (touch-screen) with handwriting recognition?
----
Ryan McCue
Cube Games
Life is like a sewer. What you get out of it depends on what you put into it.
(Tom Lehrer)
"If you're not part of the solution, you're part of the precipitate."
But somehow, the info which letter you typed (no matter in which way) must reach the system and the system has to recognise the letter. So if the programm gets the info at this point, I dont think we have a chance to bypass or fool it because the system would be fooled too.
"What about Love?" - "Overrated. Biochemically no different than eating large quantities of chocolate." - Al Pacino in The Devils Advocate
(DQM) I think the system handles the keyboard, while handwriting recognition is handled on the software side.
----
Ryan McCue
Cube Games
Life is like a sewer. What you get out of it depends on what you put into it.
(Tom Lehrer)
"If you're not part of the solution, you're part of the precipitate."
Yeah, I have thought of this before - would be good if you could somehow incorporate a RSA public/private key system - for instance, the files are only accesible if you have a file on avaliable with the key in on the host PC or something like that... Kind of like the way that SSH works with keyless logins...
You should upgrade to a usb drive protected by a fingerprint scanner!
for exemple:
http://www.sandisk.com/Products/Catalog(1066)-SanDisk_Cruzer_Profile_USBFlash_Drive.aspx
but they make it only in 512 mb or 1gb.
sorry this one is not U3 , bad exemple.