<div dir="ltr">A tool like the Steps Recorder built into windows since Vista would defeat this - it takes a screen shot with time stamp and pointer location, and some other details, every time there is a mouse click event. <div><br></div><div>--Damian</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jul 2, 2015 at 1:05 AM, Tom Storey <span dir="ltr"><<a href="mailto:tom@snnap.net" target="_blank">tom@snnap.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">It also moves around the screen* so you cant even record macros to<br>
repeat mouse input later on.<br>
<br>
* either per "key press" or when it first appears, been a while since<br>
I used it, but I did notice that.<br>
<div class="HOEnZb"><div class="h5"><br>
On 25 June 2015 at 23:30, Ivan Jukic <<a href="mailto:ijukic13@gmail.com">ijukic13@gmail.com</a>> wrote:<br>
> Granted it uses 6 digits, silly I know in the conventional sense. However,<br>
> correct me if I am wrong. You need to enter the password using a floating<br>
> virtual keyboard. So keystroke logging and brute force/dictionary attacks<br>
> should not be an issue...<br>
><br>
> On 26 June 2015 at 08:23, Scott Howard <<a href="mailto:scott@doc.net.au">scott@doc.net.au</a>> wrote:<br>
>><br>
>> You forgot to mention :<br>
>><br>
>> Westpac - maximum 6 digit passwords for Internet Banking. No special<br>
>> characters allowed. No upper/lower case distinction. (But at least it's<br>
>> better than their 3 digit phone PINs)<br>
>><br>
>> SSL is pretty much the least of Westpac's problem when it comes to<br>
>> Internet Banking security...<br>
>><br>
>> Scott<br>
>><br>
>><br>
>><br>
>> On Thu, Jun 25, 2015 at 3:14 PM, Matthew Moyle-Croft <<a href="mailto:mmc@mmc.com.au">mmc@mmc.com.au</a>><br>
>> wrote:<br>
>>><br>
>>> We've all been distracted by the large scale crazy of site blocking, meta<br>
>>> data retention and whatever else the Australian Government is doing.<br>
>>><br>
>>> But need to focus on some basics:<br>
>>><br>
>>> SHA-1 is on it's way out (see<br>
>>> <a href="http://googleonlinesecurity.blogspot.com/2014/09/gradually-sunsetting-sha-1.html" rel="noreferrer" target="_blank">http://googleonlinesecurity.blogspot.com/2014/09/gradually-sunsetting-sha-1.html</a>).<br>
>>><br>
>>> Friend got a warning for his bank (not Australian) from Chrome about bad<br>
>>> SSL configs, so I went and had a quick look at the big 4 banks in Australia<br>
>>> to see what's up.<br>
>>><br>
>>> Commbank - got it right - no SHA-1 for home page or Internet Banking, no<br>
>>> TLS 1.0<br>
>>> ANZ - no SSL on home page, TLS 1.0 and SHA-1 for internet banking (oh<br>
>>> boy!)<br>
>>> NAB - no SSL on home page, TLS 1.2 and SHA-1 for internet banking<br>
>>> Westpac - no SSL on home page, TLS 1.2 and SHA-1 for internet banking<br>
>>><br>
>>> Anyone here who can influence good internet crypto for the 3 that aren't<br>
>>> quite there?<br>
>>><br>
>>> MMC<br>
>>><br>
>>> _______________________________________________<br>
>>> AusNOG mailing list<br>
>>> <a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
>>> <a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
>>><br>
>><br>
>><br>
>> _______________________________________________<br>
>> AusNOG mailing list<br>
>> <a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
>> <a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
>><br>
><br>
><br>
> _______________________________________________<br>
> AusNOG mailing list<br>
> <a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
> <a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
><br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</div></div></blockquote></div><br></div>