Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

In private browsing mode, does ff prevent keyloggers/ password collectors?

323 views
Skip to first unread message

V S Rawat

unread,
Jun 11, 2011, 11:07:43 PM6/11/11
to
If we are using ff in private browsing mode, does it prevent
keyloggers/ password collectors etc. installed in a pc from collecting
the username, password and other info typed in the private browsing ff
window?

Thanks.
--
Rawat

Dave Warren

unread,
Jun 11, 2011, 11:13:24 PM6/11/11
to
In message <lJ6dnXfQZIIdsGnQ...@mozilla.org> someone
claiming to be V S Rawat <vsr...@gmail.com> typed:

No. If your system is otherwise compromised, you cannot trust any
software running on the system under any circumstance.

Fox on the run

unread,
Jun 12, 2011, 5:00:22 AM6/12/11
to
On Jun 12, 1:13 am, Dave Warren <dave-use...@djwcomputers.com> wrote:
> In message <lJ6dnXfQZIIdsGnQnZ2dnUVZ_sKdn...@mozilla.org> someone
> claiming to be V S Rawat <vsra...@gmail.com> typed:

>
> >If we are using ff in private browsing mode, does it prevent
> >keyloggers/ password collectors etc. installed in a pc from collecting
> >the username, password and other info typed in the private browsing ff
> >window?
>
> No.  If your system is otherwise compromised, you cannot trust any
> software running on the system under any circumstance.

As pointed out by Dave, if you have a keystroke logger on your system,
EVERYTHING you type can be captured thus FF safe mode would not
protect you from it. Booting in Safe mode (in Windows) might do the
trick to prevent starting the logger. I suspect that if you were to
run a VMWare appliance to surf (such as Ubuntu appliance seeing it's
free and you can use VMWare Player for free to run it) that the
keystrokes in the appliance would not be captured by the logger.
VMWare appliances are suppose to be fully independent from one another
and thus isolated from malware that has infected another appliance or
the host. However if the keystroke logger is a hardware device (which
would require someone having physical access to your computer to
install it - such as a rogue local tech support person) then no matter
if you are in a VM, or boot to a second or third OS, every keystroke
(including your system login) is subject to being captured.

JB

Ralph Fox

unread,
Jun 12, 2011, 6:16:47 AM6/12/11
to

A hardware keylogger is certainly not going to be stopped by software.

<http://www.keyghost.com/>
<http://en.wikipedia.org/wiki/Hardware_keylogger>


--
Kind regards
Ralph

Christoph Schmees

unread,
Jun 29, 2011, 10:02:56 AM6/29/11
to
Am 2011-06-12 11:00, schrieb Fox on the run:
> On Jun 12, 1:13 am, Dave Warren<dave-use...@djwcomputers.com> wrote:
>> In message<lJ6dnXfQZIIdsGnQnZ2dnUVZ_sKdn...@mozilla.org> someone
>> claiming to be V S Rawat<vsra...@gmail.com> typed:
>>
>>> If we are using ff in private browsing mode, does it prevent
>>> keyloggers/ password collectors etc. installed in a pc from collecting
>>> the username, password and other info typed in the private browsing ff
>>> window?
>>
>> No. If your system is otherwise compromised, you cannot trust any
>> software running on the system under any circumstance.
>
> As pointed out by Dave, if you have a keystroke logger on your system,
> EVERYTHING you type can be captured thus FF safe mode would not
> protect you from it. Booting in Safe mode (in Windows) might do the
> trick to prevent starting the logger.

NO. If one has caught e.g. ALUREON, there is no esccape. See
<http://en.wikipedia.org/wiki/Alureon> and <http://alureon.net/>
and for rootkit in general <http://en.wikipedia.org/wiki/Rootkit>
(ALUERON is mentioned here as well).

I suspect that if you were to
> run a VMWare appliance to surf (such as Ubuntu appliance seeing it's
> free and you can use VMWare Player for free to run it) that the
> keystrokes in the appliance would not be captured by the logger.
> VMWare appliances are suppose to be fully independent from one another
> and thus isolated from malware that has infected another appliance or
> the host.

NO. see above.

Summary: If your system is infected, there is NO trust at all and
no means of escape except purging and new installation from scratch.

> ..
> JB

Christoph

--
email:
nurfuerspam -> gmx
de -> net

0 new messages