Solution to wallet security

[truthcracker]

1) Bitcoin client encrypts wallet on startup
2) Virtual keyboard option where the password is entered on a scrambled keypad with a mouse - no key-logger virus possible


How can that be hacked? Much simpler than getting a computer and running a geek os.

Damn that was an actual attempt at being constructive.....

[1713877202]

1713877202

[1713877202]

1713877202

[1713877202]

1713877202

[Alex Beckenham]

As soon as you enter your password, the contents of the wallet are decrypted so your private keys could be read from RAM.

[julz]

2) Virtual keyboard option where the password is entered on a scrambled keypad with a mouse - no key-logger virus possible
How can that be hacked? Much simpler than getting a computer and running a geek os.

A virus could use the Remote Frame Buffer protocol (the protocol used in VNC) to capture the pad entry.  The virus might be smart enough to at least identify which window to capture - even if it just packages up the info to send to a human to read off the actual numbers that were input.

I don't doubt there are other ways too.

[mouse]

unless you only keep it there for a fraction of a nanosecond, and you use memory layout randomization, and, and, etc

Still possible, but progressivly more unlikely

[truthcracker]

As soon as you enter your password, the contents of the wallet are decrypted so your private keys could be read from RAM.

XLNT point

[truthcracker]

2) Virtual keyboard option where the password is entered on a scrambled keypad with a mouse - no key-logger virus possible
How can that be hacked? Much simpler than getting a computer and running a geek os.

A virus could use the Remote Frame Buffer protocol (the protocol used in VNC) to capture the pad entry.  The virus might be smart enough to at least identify which window to capture - even if it just packages up the info to send to a human to read off the actual numbers that were input.

I don't doubt there are other ways too.

Hmmmm ok what about a keypad that you hover over that changes letters in a separate window like big [A B C] when you click THAT letter hits?

[compro01]

2) Virtual keyboard option where the password is entered on a scrambled keypad with a mouse - no key-logger virus possible
How can that be hacked? Much simpler than getting a computer and running a geek os.

A virus could use the Remote Frame Buffer protocol (the protocol used in VNC) to capture the pad entry.  The virus might be smart enough to at least identify which window to capture - even if it just packages up the info to send to a human to read off the actual numbers that were input.

I don't doubt there are other ways too.

or just simply take a screenshot via triggering the print screen key every time the mouse is clicked and bitcoin.exe is running.