Bitcoin Forum

Hello

If logging into some site that is sensitive to one (like BTC exchange probably for people here is the best example). Is it considered much safer to use a virtual keyboard (which comes with my payed well know/established) antivirus system (instead of using physical keyboard)?

The physical keyboard si suspect to keylogger, the virtual isnt, correct? Also there is not any other common method how to "listen" to virtual keyboard, correct?

The only way would be to "intercept" the outgoing communication through internet, correct?

But there isnt any common way/keylogger for virtual keyboard, so using virtual keyboard should be considered much safer then using normal physical keyboard (while typing passwords to sensitive "stuff" (websites etc.), Correct?

How will a virtual keyboard protect you, if someone is recording your session? { Remote software gives hackers access to whatever is displayed

on your desktop. } The best protection for now is 2FA to a mobile phone, so if the hacker do not have access to your phone, it would be more

difficult for them to acquire your password. Some hackers bruteforce passwords or they hack the database.  >:(

Time when hackers would spread only keyloggers is long gone. Now most common method of stealing your data is by using RAT. Now most of them will recognize your input into password field and save data by that so does not really matter if you use virtual keyboard or not. And even if they don't use that they can see your screen...

I don't think a virtual keyboard (you mean those on screen keyboards, right?) will protect you from anything at all. If you have a keylogger on your machine, the keylogger will get any input data including your on screen keyboard. Even if it couldn't the hackers could simply track your mouse.

If you're concerned about security, try a Linux distro, they are super secure and stable. No need to worry about getting a keylogger onto your machine. You can try dual-booting it.

Only good, if nobody has physical access to your computer, cause then you´re screwed anyway.

I use "KeyScrambler" (among other fences), which encrypts between the physical keystrokes and the actual input on the screen (where the input is blackend out anyway)
But recently, i had a feeling, somebody was peeking over my shoulder, so i always lock the door to my room as well . . .

http://www.qfxsoftware.com/ks-windows/which-keyscrambler.htm (http://www.qfxsoftware.com/ks-windows/which-keyscrambler.htm)

Hackers are not already sticking to the old school of hacking which they do made classical keylogger which are famous in the past and yet this thing should be be aware of on remote software and using virtual keyboard is useless because all you do is been watched or recorded and chances of getting hacked is really high. Setting 2fa is always been advisable because even they bypass the first layer ,they would be stuck on the 2nd verification.

it makes things a bit safer but remember that there are keyloggers that will take a screenshot of your screen and what you are doing. and they can even record a small videro of it.

there are always new ways that we have not yet even heard of. so the best course of action is to enable 2FA on your online accounts and move your bitcoin wallets offline and keep your system clean.

i just opened up a vs project. not touched vs in a couple years..

only a few lines of code and was able to grab all key strokes from plug in keyboard AND onscreen keyboard
this also includes the password field which displays *** but the few lines of code displays what was actually typed

short answer. onscreen keyboard is no help what so ever

You are describing a very old type of keylogger that's very outdated, would never work on any os anymore and is just so obsolete. Modern keyloggers are made much smarter and will be able to see everything you do. I recommend using any live environment to create bitcoin addresses.

Install any Linux distribution you like and forget about this kind of stuff, the only way a key logger is going to be installed in your computer is if you install it yourself, even if you don’t like Linux at least use it for stuff where you are dealing with money.

Go to computer settings and remove the tick for "allow remote connection to this computer". you could also go to advance firewall settings and check out all the incoming and outgoing ports allowed through your firewall. on screen keyboard is only good when a website is providing you with the option and not you just opening the default on screen keyboard. But I don't know what you need saving from in the first place?
If anyone is recording your screen then you should open task manager and record the graphs and charts of Network/HDD/CPU/Memory and see when and where something unusual happened like a port opened or something were being uploaded or spikes in CPU usage and see which program is using the resources when you are trying to insert password.

If they have access to your computer via a keylogger then there is a relatively high chance that they can also see your computer screen, given that the malware is coded in that way and isn't incredibly passive for what it does.
I don't believe that virtual keyboards would be safe since a keylogger -should- just log key inputs that come from any source, but I don't know that because I never learned any of it. It just seems like that's how they would work, if they were to be effective.

I think theres still way that hackers can detect click strokes which virutal keyboard would really comes to useless.Knowing on this hi-tech era all the possible ways on hacking might be already possible which means its not still safe and hardly believing that using Virtual kb would save you.The best thing to do is that when you detected already that you pc is being infected then reformat it and dont use it further more logging in important accounts on that pc to avoid loss.

A virtual keyboard makes no real difference a sandbox might though if you can separate the viruses and key loggers from the main system, unless its already built into the software then its Microsoft :P

I found this to be very useful.

Thank you!

It honestly would not be surprising to me at this point if they had a lot of software techniques that could be used to find out information you're typing or viewing. There have been incredible leaps in the technologies used and at this point they're probably using new concepts we won't hear about for a year and a half. It's truly some fascinating stuff, shame it is used in a malicious manner.

Remote desktop will make it much much less likely your password will be found out. Not many viruses and malware Target onscreen stuff it's almost all loggers since most people don't do what you doing and that is who they mostly aim for so you will be helping yourself alot but doing this. Couple this with other security measures and people are going to have a hard time getting anything

If this is 2010,it may protect you from keylogger and the like
but now,hackers have so many ways to steal data from your computer if you're connected to the internet
i think using 2FA authentication is the best way to protect your account data,the risk is if you lose your phone,then you will have a hard time recovering your account whatever it is

Yes , best security can be using now is 2FA, where all logins access was linked to your phone.
How this going to secure in long time??
Only if we found better way to keep it more secure.

Pretty much this ^. Op if you are really paranoid about your security and service/website you are using has the option to set up 2FA then do it.
It is probably they best way to protect your sensitive data from being stolen by hackers.

I was wondering, if using password managers - the one which type the password for you automatically will help here. Anyone?

I can tell this is true, at least I never got any Bitcoin or anything stolen from here and I am not even that paranoid when it comes to security.

While on Windows, if you click on a mere link on a webpage you can open doors to hackers anywhere; that is the impression I got when reading from Windows users. This is hard to understand.

How to make the virtual keyboard does not create a difference so you separate a virus and key loggers from the main system

This is another option you may try to use a sandbox and by doing that you can avoid most of the viruses on the internet, in fact you should follow that practice every time you install something new in your computer to avoid being infected by viruses.

here is an easy idea: how about instead of bothering that much with Windows and all the headaches of malwares and key loggers, etc move onto linux at least for security stuff such as holding your bitcoins and other important matters.

Virtual keyboards can save you, but it will cause a lot of inconvenience to your work, assuming, if you use the key, you can finish the job in a short time, but if You use the virtual key, you have to perform all operations with the mouse, very inconvenient, and you will spend more money. A very cheap keyboard, you do not need to save on such expenses. Saving is good, but you need to save on time.