Can a key logger capture sound and clicks....

[RavenWinterHawk]

Here is a thought.
You tech guys give me the yes or nos.

A key logger captures key strokes.

Can a key logger capture mouse clicks that would tell them what was being selected.

Can a key logger capture sounds on mouse overs but no clicks.

SUPPOSE A GAME COMPANY's LOG IN WAS MOUSE DRIVEN or SOUND DRIVEN.

Mouse idea

The alphabet, numbers and key board symbols show up in leet say 4 by 15 grid on you log in screen. The grid is always randomized when you log in. So grid 1,1 might be an A. Log out and back in grid 1,1 is now Z. So the grid you select from is now completely random.

I would use my mouse to click my screen name and password verses typing as I am now. I think this method would prevent most keyloggers from working.

They would be no typing and the selection grid would always randomize.

Sound idea

Have 25 sound icons that are pretty self evident that also randomize on a grid.

STORM ICON = Thunder
RAIN ICON = Rain Falling
GUN = Gun Shot

So 25 icons. Your third level password would be 4 sounds. You would mouse on them too but not click. Just mousing over them make them sound. The icons would be in a singe row so you would just mouse over each one.

The icons themselves would randomize so a TROJAN could just look for a symbol. The STORM ICON would come in 25 different icons. Obvious to us.
Like you could have a GUN ICON but it might be a gun, rifle, cannon. Only one representative icon would appear per log in. Each time you logged in something else might appear. (I KNOW its not really the sound that triggers the password, but just the icon selection. BUT SOUND is good for memory)

 

[Shamus Turlough]

I have been a network engineer for thirteen years. Most people I have dealt with have a hard enough time remembering a 4-5 letter plain text password. This sounds like they would have to remember a password that sounds like an indian spirit healers name...

In short, I don't think this would work. And yes, some key-loggers can detect mouse clicks with x-y coordinates on screen. Also this new password interface you speak of would be a downright horror to encrypt and make safe... believe it or not, keystrokes are much harder to detect over a data stream than most people think.

 

[Basara]

Don't forget, there are also deaf people that play UO.

 

[feath]

my online banking uses a drop down box, with random letters of your password asked for. they promoted it as being undetectable by key loggers.
would that work?

 

[Pickaxe Pete]

Malicious websites can record sound (and conversations) through your connected microphone via flash, java, or activeX.

 

[envinyatar]

my online banking uses a drop down box, with random letters of your password asked for. they promoted it as being undetectable by key loggers.
would that work?

My online banking uses a keypad that changes the letters that correspond to the displayed number so you are never entering the same letter/number combination (or you can just click on the buttons to enter your password).

 

[Gildar]

Yes, even some very basic keyloggers capture mouse movement and clicks. Any keylogger created specifically against a game that had some fancy sound-based login could capture that as well. Same with graphics, or anything else really.


The best defense is to not let the keylogger get on your system in the first place.

 

[Tek]

I see 3 things about this –

1 – Some users would find it confusing to use.
2 - Possible for someone in the same location to find out your password by looking at your screen / listening to the sounds emitted.
3 – There is software that can record anything you do on a computer whether it is key logging, screen captures, sound recording or any combination of them.