-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 08/12/2010 13:40, Julien Reveret wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Hi list, >> >> Is anyone familiar with the firefox addon KeyScrambler? According to >> developers this encrypts keystrokes. >> > > What if the attacker uses a firefox plugin such as ffsnif[1] to get user's > credential ? > As Dan said, I guess this plugin will only fool some keyloggers, but not all. > > [1] http://azurit.elbiahosting.sk/ffsniff/ >
Thanks for the link. Looking through the code of ffsniff was an eye opener. I would hope that such an addon would be instantly recognised as malicious by Mozilla. I am a curious hobbyist and pretty much a noob when compared to real professionals. Perhaps in five years or so I might actually be able to contribute to the community :-) Thanks for your response regards Dave -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEVAwUBTQCvzbIvn8UFHWSmAQIibwgA4XwD9OmqEmogqG4oqrMPsGMML5Wnw7HC H3kYfXbRVJWMoWHHAcKwP6qSmddCGBLl+In3sifoybyEJvh0ceu92o9GpDJVytbi adOP5jnlJWu595Ff2tPY6tRuLOb4YVH7GkhPL5N3Lj340JR4rlTzYKuisqC6OPyk 1qzf05XtZZRDqdr9XrYzFdEcfbFQJ+/zGGhfWiSU38d2bYRjo56ujcfo4asb5ojb QpgCUo9wP5OlSHz+A+pCcDKcFjPCeNV2i2Qqgx1DVFHlrEafdAQ2sFKoewxPW4oX Tm1zrYeRsW1rmVrWgbEjJZOQRCLMsVqunhjQ4Jp2klU4eRX+fGCOzw== =C9qt -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
