On-Screen Keyboard

[Encore?]

My friend told me that "if" I had a keylogger that they wouldn't be able to get my password if I used the on-screen Keyboard to put the password in, is this true? I'm puting this in here because the password I'm talking about is for Habbo. Thanks.

[Hecktix]

It doesn't make a difference. Because the keylogger doesn't log what buttons you press, it logs what the computer is being told to do.
It affects inside the PC, not your keyboard.

The only difference between typing a letter on the keyboard and doing it on onscreen keyboard is that one requires a mouse click.. it still registers as the same with the computer though.

To clarify: It is NOT safe.

[Encore?]

Thanks for the Info


Keyloggers come up in virus scans right?

[Duck Hunt]

ofcourse they do :)
i advise AVG it removes viruses when its done scanning (D/l at own risk its save for me but idk)

[Hecktix]

It should come up as spyware.

[Encore?]

ofcourse they do :)
i advise AVG it removes viruses when its done scanning (D/l at own risk its save for me but idk)

I got Norton Anti-Virus

[Hecktix]

That's good. It picks up keyloggers anyway xP

Run a scan x)

[Dentafrice,]

Keyloggers (KEY) logs keystrokes.

When a keylogger lets a click it puts in the log

[Left-Mouse click]
or
[Right-Mouse click]

NOT

[Left clicked on A in onscreen keyboard]

so yes its safe :)

[Hecktix]

Keyloggers (KEY) logs keystrokes.

When a keylogger lets a click it puts in the log

[Left-Mouse click]
or
[Right-Mouse click]

NOT

[Left clicked on A in onscreen keyboard]

so yes its safe :)

The computer recieves EXACTLY the same information if you type the letter "A" than if you click it on the onscreen.

[Encore?]

The reason I am worried is because my friend used my laptop to try a retro, he didn't use the same account name/password/email could I still be at risk? We did not have to download anything just log in.

[Hecktix]

the only unsafe thing about retros is that they can see your password.

so if you use another name and password to that of your Habbo you are fine.

[Hecktix]

the only unsafe thing about retros is that they can see your password.

so if you use another name and password to that of your Habbo you are fine.

[Dentafrice,]

the only unsafe thing about retros is that they can see your password.

so if you use another name and password to that of your Habbo you are fine.
Actually it doesn't.

I have played around with many keyloggers and they only recieve keys. Clicks are recorded as clicks. It doesn't recieve informatino on what your clicking.

[Hecktix]

retros are safe.

the only unsafe thing to do is type in your password that you use on habbo cause they can see this.

&& @ dentafrice.. it must be dependant on keyloggers then. Cause the ones I downloaded could read the onscreen keyboard.

[Encore?]

the only unsafe thing about retros is that they can see your password.

so if you use another name and password to that of your Habbo you are fine.


Thanks again.

[Barmi]

Actually it doesn't.

I have played around with many keyloggers and they only recieve keys. Clicks are recorded as clicks. It doesn't recieve informatino on what your clicking.
You've played with some primitive keyloggers then. What I was going to say can aptly be summed up by this excerpt from the Wikipedia article on keyloggers.

Program-to-program (non-web) keyboards
It is sometimes said that a third-party (or first party) on-screen keyboard program is a good way to combat keyloggers, as it only requires clicks of the mouse. However, this is not true, because for most on screen keyboards (such as the onscreen keyboard that comes with Microsoft Windows XP), a keyboard event message must be sent to the external target program to type text. Every software keylogger can log the text sent as typed characters from one program to another with an on-screen keyboard, and additionally, some programs also record or take snapshots of what is displayed on the screen. (Screenshot recorders are a concern whenever entire passwords are displayed; fast recorders are generally required to capture a sequence of virtual key presses.)

Web-based keyboards
Web-based on-screen keyboards (written in Javascript, etc.) may provide some degree of protection. At least some commercial keylogging programs do not record typing on a web-based virtual keyboard. (Screenshot recorders are a concern whenever entire passwords are displayed; fast recorders are generally required to capture a sequence of virtual key presses.)
Notably, the game MapleStory uses, in addition to a standard alphanumeric password, a 4-digit PIN code secured by both on-screen keyboard entry and a randomly changing button pattern; there is no real way to get the latter information without logging the screen and mouse movements; another MMORPG called RuneScape makes a similar system available for players to protect their in-game bank accounts with.

On another note - "retros" or private servers are (more often than not) unsafe, totally pointless, and quite frankly illegal. There is no chance in hell I would trust one, especially when considering how malicious (and childish) some Habbos can be in the pursuit of "furnizzzzzzzzzzzz". It is the community aspect of Habbo which is most entertaining, and some irony tends to show itself; those who boast about the fact "omgz you can get any furni you want" are usually the ones moaning to other Habbos about how sad they are for liking the legal Hotel.

[Duck Hunt]

i USED to own a retro so heres some info

retros can see:

Pass for the acc
Email you typed
DOB
Username
Furni in your room * hand
credits
hc days

Pretty much everything.

The only way retros can log you is if theres a session stealer put into the site (idk if theyre patched its possible though)

[Revivalry]

The whole point of a KEYlogger is to log the KEYS pressed, not the computers actions otherwise the log would produce hundreds of lines of cmd code.

The on-screen keyboard can be used but if the keylogger engine was created to log mouse clicks it will show co-ordinates in which a real good screen mapper can work out which keys you pressed on the on-screen keyboard

[Shawnstra]

The whole point of a KEYlogger is to log the KEYS pressed, not the computers actions otherwise the log would produce hundreds of lines of cmd code.

The on-screen keyboard can be used but if the keylogger engine was created to log mouse clicks it will show co-ordinates in which a real good screen mapper can work out which keys you pressed on the on-screen keyboard

But how would the logger know where the on-screen keyboard is placed?

[Barmi]

The whole point of a KEYlogger is to log the KEYS pressed, not the computers actions otherwise the log would produce hundreds of lines of cmd code.

The on-screen keyboard can be used but if the keylogger engine was created to log mouse clicks it will show co-ordinates in which a real good screen mapper can work out which keys you pressed on the on-screen keyboard
Nono, a software keylogger doesn't record keystrokes. It records the keyboard event messages that are sent as a result of typing on a keyboard. Keyboard event messages are also produced from the (non-web based) on-screen keyboard, so there is no added safety benefit. Read the excerpts from Wikipedia which I posted above. Web-based on-screen keyboards provide some layer of protection though, that's why I think Habbo should adopt MapleStory's extra login feature, in addition to standard password.

[dannyisnotamazing]

Actually it doesn't.

I have played around with many keyloggers and they only recieve keys. Clicks are recorded as clicks. It doesn't recieve informatino on what your clicking.

Some also take screenshots as well, so I wouldn't be surprised if they could log mouse clicks..