perjantai 23. tammikuuta 2009

How to capture keystrokes?

Yubikey is the one and only one time password generator hardware that acts as a keyboard. It's great for application logins but for this kind of application it's not so good: My PC has to autologon, my application must be running in interactive mode or I must be able to capture all windows keystroke events. I'm not sure if windows even sends keystroke messages if you haven't logged in. So I needed a autologon solution.

DR-log:
Question : How to autologon into OS?
Alternative 1 Windows registry based autologon
+ Free
+ Unsafe -- Logon username and password is stored into registry uncrypted
Alternative 2 Commercial product: LogonExpert
+ Encrypts password
+ Robust solution
+ Ctrl+Alt+Del, a shutdown event, administrator’s banners, or any other window appearing before logon is bypassed automatically.
Comments :
Decision #2: LogonExpert

(Just another Yubikey development idea: If Yubikey would act both as a keyboard and serial port, it could be used more robustly also in this kind of applications. It could even act as a "license dongle" sitting in back of a server, providing one time password through serial interface)

Ei kommentteja:

Lähetä kommentti