<<< Date Index >>>     <<< Thread Index >>>

[IP] more on a query re keylogger





Begin forwarded message:

From: Ross Stapleton-Gray <ross@xxxxxxxxxxxxxxxxxx>
Date: May 23, 2006 3:00:33 PM EDT
To: dave@xxxxxxxxxx, Steve Goldstein <steve.goldstein@xxxxxxx>
Subject: Re: [IP] a query re keylogger

At 11:41 AM 5/23/2006, Steve Goldstein <steve.goldstein@xxxxxxx> wrote:
I have a related
question for the OS experts. Keylogger (http://www.keyghost.com/ keylogger.htm) states:

 Works on any desktop PC & all PC operating systems, including
Windows 3.1, 95, 98, ME, NT, 2000, XP, Linux, OS/2, DOS, Sun Solaris
and BeOS.**
It doesn't mention MacOS.  But, in a more general sense, if we were
to run Windows virtualization applications like VMware or Parallels
on an Intel-Mac, and if a malicious keylogging piece of spyware were
to have invaded the virtual Windows machine running on our Macs,
would it also log the activity on the Mac side as well as on the
Windows side?

NB, KeyGhost's is a *hardware* product, and is, in a nutshell, a memory buffer that traps keystrokes and then spits them out again when fed a particular string. So it really doesn't care at all what O/S the machine it's attached to is running, so long as it is in a position to detect and buffer bytes running from the keyboard to the O/S. (I've not looked at them lately... their original product was just a shim that plugged into the keyboard port, and into which the keyboard cord plugged... looks like they now have some USB port device that perhaps promiscuously listens to the bus?)

This is something different than infectious malware that would compromise the operating system itself... whether or not there's potential for Win/Mac cross infection by that is a question for others.

Ross


----
Ross Stapleton-Gray, Ph.D.
Stapleton-Gray & Associates, Inc.
http://www.stapleton-gray.com
http://www.sortingdoor.com





-------------------------------------
You are subscribed as roessler@xxxxxxxxxxxxxxxxxx
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/