Foolproof way of communicating without fear of keyloggers

[remotemass]

For those with fear that they may have a keylogger on your pc you can open paint paste all chars that you need to type. Then select and copy each letter crafting your message letter by letter, pasting each letter in the right place. Then crop it and save.
Then encrypt the file with TrueCrypt and send the key for decryption using PGP and the encrypted file in another email.

[1715342455]

1715342455

[1715342455]

1715342455

[1715342455]

1715342455

[1715342455]

1715342455

[bitpop]

Virtual keyboard is a billion times faster

[Gestas]

http://msdn.microsoft.com/en-us/library/windows/desktop/ms649039(v=vs.85).aspx

[greyhawk]

For those with fear that they may have a keylogger on your pc you can open paint paste all chars that you need to type. Then select and copy each letter crafting your message letter by letter, pasting each letter in the right place. Then crop it and save.

Write stuff on paper. Scan paper.

[sounds]

http://msdn.microsoft.com/en-us/library/windows/desktop/ms649039(v=vs.85).aspx

In case you missed that -

getClipboardData() is a common feature. Even if you're not on Windows it can still be done.

This is a feature that lets any program see what is in the clipboard. It's necessary so that things like Copy/Paste work properly.

I haven't heard of much spyware that records everything in the clipboard. That's not what this is about, though. If someone installed a hardware keylogger on your PC then they probably installed spyware on it too. Once there's spyware installed, it can record more than just what you type. Since the last step in this foolproof method is to copy/paste the message, then the spyware just records what you pasted.

[Fuzzy]

Virtual keyboard is a billion times faster

Is that better than copy paste? Can't the virtual kb be solved by looking at the position of your clicks?

[nimda]

Screenshots are easy; partial screenshots (say 20x20 centered around the mouse) can be done as well (Windows: see the GDI+ documentation).
Getting the clipboard data in text, image, or binary format is easy.
Capturing files (e.g. scans) is easy (Windows: OpenFile documentation).

All of the above can be done even with UAC on its highest setting. Getting around firewalls is easy too (see: Teamviewer Portable)

Physical proximity:
Hardware keyloggers
Camera behind your head
Beyond that, keylogging can be done with a microphone 20m from the keyboard, since each key makes a distinct sound. (see: http://www.inf.ed.ac.uk/publications/thesis/online/IM100855.pdf)
Electromagnetic emissions? (see: http://en.wikipedia.org/wiki/Tempest_(codename) )

Also beware of OEM backdoors.

[ElectricMucus]

For those with fear that they may have a keylogger on your pc get another operating system. Or better reinstall and learn to use your existing one

FTFY

[wiggi]

If this is not about keylogger that steals passwords en masse but about
someone after you communicating, then...

-buy new computer (in brick and mortar shop)
-which will never be online
-make trusted copy of truecrypt on write only CD (scan CD, check md5)
-communication only leaves offline PC encrypted on CD
 (all CDs bought in brick and mortar shop)
-nothing ever enters offline PC, especially not an USB stick carried back and forth
 between offline and online PC

Should be save (and feel save) to type with actual hardware keyboard now.

[stash]

For those fear their encryption passphrase could be intercept by keylogger can use Keyscrambler in near future.
I've contacted and ask them to support Bitcoin-Qt client on next released.

Code:

Hi,

I would like to suggest keyscrambler to support for Bitcoin-Qt client, It's will scramble keystroke whenever phrassphase enter to decrypt bitcoin wallet.

Thanks for your consideration. 

QFX Software Support
Feb 16 (1 day ago)

to me 
Hi,

Thanks very much for the suggestion. We'll add it to our list of
applications to test for future support. If testing goes well, it'll be
included in an upcoming KeyScrambler update.

Please let us know if you have any additional suggestions or questions.

Best regards,

Qian

atleast we still have last slice of protection when got pawn.

[stash]

Great news  new version KeyScrambler 3.2 now support Bitcoin Wallets (Bitcoin-Qt, Armory, Electrum, Multibit).

KeyScrambler Premium in addition adds protection to two new categories: Cloud Storage (Dropbox, Google Drive, Microsoft SkyDrive) and Bitcoin Wallets (Bitcoin-Qt, Armory, Electrum, Multibit). It also adds several new Encryption Apps (B-Folders, BestCrypt Traveller, File Waster, Folder Lock, Steganos Safe, Steganos Privacy Suite); Networking Apps (FlashXFP, FTPRush, TeraTerm Pro); and Office Programs (Dramatica Pro, FinalDraft, MovieMagic Screenwriter, Outline 4D).

http://www.qfxsoftware.com/download/whats-new.htm

[Kluge]

http://msdn.microsoft.com/en-us/library/windows/desktop/ms649039(v=vs.85).aspx

In case you missed that -

getClipboardData() is a common feature. Even if you're not on Windows it can still be done.

This is a feature that lets any program see what is in the clipboard. It's necessary so that things like Copy/Paste work properly.

I haven't heard of much spyware that records everything in the clipboard. That's not what this is about, though. If someone installed a hardware keylogger on your PC then they probably installed spyware on it too. Once there's spyware installed, it can record more than just what you type. Since the last step in this foolproof method is to copy/paste the message, then the spyware just records what you pasted.

Fwiw, there was once some really clever malware which went around (something associated with the first incarnation of GLBSE -- don't recall specifics). It'd monitor clipboard data and if it detected a BTC address, it would change the address to the attacker's address, so when you paste it in a client to send BTC somewhere, it'd end up going to the attacker unless you were careful about verifying the addresses. It was a great lesson for me (even though I didn't lose anything) to triple-check pasted addresses.

[hany103]

keyloggers is serious threat, as stated before your method is flawed, clipboard could be logged easily.

[zedicus]

I think people dont take computing seriously ... They dont consider their computing environment and they are surprised when they are compromised. The biggest threat is the user. Not a key logger or viruses. ..

I was once asked to fix a computer and i was in shock by the amount of malware it had on it. I was really surprised it was still working at all.. The user spent most of the time on the computer browsing porn sites. When i asked when did he start having issues? He replied its been 6-7 months but he thought it would go away.

The quad core computer was working so slow i just cant even explain how slow. The amount of 30-day trial software on the computer was unreal. Practically everything.. and everything was prompting to upgrade constantly. The task bar functions were disabled and the wallpaper was hijacked and right clicking anywhere was disabled..

I looked at the offending user and i said this might take a while! He replied back, he just needed the printer and internet to work  ..



He also happened to be the CEO of the company. Really tho he represented the usage and computing intelligence of most people .. Bitcoin and some aspects of technology in general is rather unforgiving for people who dont verse themselves in their environment, computing or otherwise.

 
Everyone doesnt have to be an expert so to speak but at least do your windows updates and keep youre services packs and drivers up to date. The third party apps/plugins like flash, java, silverlight, air ..need updates too!  As well as a good antivirus and firewall package and back that up with a good anti malware program and subscription.. Now back that up with tools like no script, ghostery, keyscambler, do-not-track, adblock! Also consider vmware if you have a newer computer with lots of resources. Quarantine youre work and nonsense from one another. Use lastpass / keepass and secure youre passwords.. Learn to get youre 2 factor authentication on... most importantly separate youre computing environment from OTHER PEOPLE!

If you have a computer that is being used by 5 people in a household.. all the above wont matter because they might not care about what sites they frequent or if the sites they are visiting is infecting the computer. Maybe they dont have bank accounts or bitcoins, or maybe they dont do online banking because they are kids!!

They call them "personal computers" for a reason.  

Its time people take a lil more responsibility..

 I have a club, dash cam and wheel locks and a viper alarm with a kill switch, blinking led and a 2way keyfob with a proximity sensor, tilt sensor and gps for my car.  Im not an expert but i have a general understanding of how the stuff works on my car so that i can protect it better. Sometimes stuff cant be helped! A house guest once brought over photos on a thumb drive and while i was in another room .. They plugged it into my laptop .. luckily it was just photos but...


It really sucks to be a victim so lets not help the bad guys so to speak! I once recovered some photos from a hard drive for a co-workers friend and i handed over the laptop and stuck my hand out for payment and i got a really big hug before the cash! She said the wedding photos were on it and they were priceless! I recovered the files by using the old freezer trick on the failing hard drive. The couple had no idea how lucky they were!


Not everyone is so lucky! Specially in the world of bitcoin.