4

Do you trust public terminals?

If you need to check your email, and you have no other option then to use public terminal near by, would you still use it?

Is there any way to protect your self from any viruses, keyloggers, "evilware" to not steal your personal data on it, namely username and password you input?

4 Answers 4

7

Most keyloggers only log keys, not mouse clicks, so I enter my username and password simultaniously while also clicking in empty areas of the webpage and typing arbitrary charicters or clicking where I already am. This will work if the keylogger does track mouse clicks but not location or if the keylogger does not know the location of the login controls on the webpage. This is probably one of the safest ways of logging in, because it is difficult to track even on the off chance that the keylogger expected it.

For example, suppose my username is User and my password is Pass. Then, I would type the U or the US in user, then click off the control and type something arbitrary, then I'd start on my password, then I'd click in the username box and type another letter, then I'd click again and finish my user name, etc.

2
  • 1
    Your scrambled credentials would still be captured in plain text, but if you aren't being personally targeted, they'd be more likely to skip your account and use the next sucker's credentials.
    – echo on
    Feb 18, 2010 at 17:38
  • 1
    Right. Because I have nothing worth specifically stealing, I assume that making things slightly harder for the bad guys will make them go to the next sucker. Not good security practice (they could spend the time easily), but again, I have nothing worth stealing, and I have good backups.
    – Daniel H
    Mar 29, 2010 at 15:20
1

It depends.

My work e-mail. No, not unless it was a true emergency.

My gmail account. Yes, if I'm travelling, but it has a different password than anything sensitive. Really, every account should have a different password, but how many of us are guilty of using the same throwaway password on 20 different accounts. However, I'd likely change it the next time I got to what I considered a secure system.

1

I would suggest running an on screen keyboard. If its a Windows 7 Kiosk, then see if you can access it:

  1. Choose Start
  2. Control Panel
  3. Ease of Access
  4. Ease of Access Center.

I would not worry about malware nailing your computer, as most kiosks are designed to run in protected memory mode. I would however worry about keyloggers, as you never know if someone has placed on on the kiosk. If you can not access that, then make sure you change your passwords frequently and use non alphanumeric characters as part of your password.

As for Evilware, we are more interested in news than your files.

0

I always VPN to a safe site (work, home, etc) before doing anything that requires personal or private information to be entered. Trusting a public terminal to be safe is like trusting a conman.

1
  • 3
    Of course VPN'ing (and remoting) does little to prevent keylogging or recording sessions.
    – BIBD
    Jul 15, 2009 at 15:52

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .