How does KeePass insert the encrypted passwords into the other apps? It would be trivial to add a clipboard watcher to a keylogger...

And Dominik would like to see his methods challenged. Note that this is for KeePass 2.x, KeePass 1.x lacks any kind of protection against keyloggers if you rely on AutoType.

Personally, I wouldn't use public computers for anything more than casual browsing these days, unless you know the computers are properly maintained and/or configured (public computers shouldn't be running an account with administrator rights by default), or they have some kind of rollback method. Once you log out, everything you've done disappears.

ghacks has a nice article on this issue today:
http://www.ghacks.net/2010/06/15/how-to-protect-usb-sticks-and-the-data-on-them/#more-26616

Here in Australia most public 'puters are set up with limited rights i.e. not admin so you can't actually launch apps from a usb. Similar in the USA /Europe?

there are even physical monitoring devices that can capture your username and password... and who's to say that if the computer is fine that the network itself isn't vulnerable?

point blank, it's risky to use nearly any public connection or computer, no matter how safe you are. it's like having sex with a hooker, they could be clean, or they could be dirty and you might be ok with a condom, or you might use a condom and manage to get an STD anyway. no matter how you slice it, it's risky business.

i do think that probably one of the safest ways you can use a public computer is to remote connect to your home/work deskop and work from there, and plan on changing the password when you return home.  that minimizes the risk pretty much.. and means that only if someone sniffs the password you used to log in to your remote computer and uses it to connect to your remote computer are you at risk, which is pretty low risk, especially if you're away for a short time.

now, this immediately suggests that an extremely useful feature for a vpn/remoteconnect tool would be the use of one-time pads, single-use passwords, hardware key ids.  anyone know of any vpn/remote desktop that supports this?

with such a setup, you would remote connect to your desktop, do everything through your encrypted connection to your home/work pc.  you would assume that the local pc is compromised and keylogging everything you type.  but the password they sniff would no longer get them in.  only by keeping a list of single-use-logins with you in your pocket will you be able to log in.

you could just use a program that can calculate hashes of the files.

actually that would make a very nice portable app -- a program which when run scans the drive and creates hashes of all files found, and compares to previous set of saved hashes, reporting any differences and new files.  bonus if it also did this on boot records.  goal would be to make it super easy to use with no real options, just run it and wait for it to tell you nothing has changed most of the time.. or report on new files.  on rare malware infection it will report the changing of some files.  (be smart if it flagged changed exe's more dramatically than changed .txt files).

could be extremely useful for portable file use.

in fact, it might very well make sense to run it immediately after inserting a drive to see if any malware wants to try to infect any executables on your usb, kind of like a honeypot.

this would make a great NANY 2011 project for someone..

Oh, I wasn't worried about the hash-checking program intentionally having it's checking functionality disabled - but along the lines of the program getting infected on one machine, and when running on the next spreading the infection. If the infection was with a nasty piece of self-hiding code, the hash-checking would be ineffective without having been explicitly targeted.

I know this is a week-old thread, but aren't you guys missing something?  Just put the hash checker on the read-only part of the drive!  Tell me if my idea is flawed..But I'm pretty sure it's doable.  You just have to preload the hashes into the read-only part of the USB before you go anywhere.

Quote from: Cyeb on June 29, 2010, 02:39 PM

I know this is a week-old thread, but aren't you guys missing something?  Just put the hash checker on the read-only part of the drive!  Tell me if my idea is flawed..But I'm pretty sure it's doable.  You just have to preload the hashes into the read-only part of the USB before you go anywhere.

If you have an USB drive with separate read/only and read/write parts, sure - never came upon one like that myself, though.

That is easy using something like Truecrypt to make your file work as a read-only disc. Don't know if that would really make it work though - requires more thought...

http://www.hak5.org/w/index.php/USB_Switchblade#Files_4

^ Read on it.  If you search around, there's an application to hack things onto the read-only part of any u3 drive.

Except the link I provided is for recovering information on an unsuspecting user's hard drive.  Fighting evil with evil? 

I don't understand hash checkers but just hypothetically speaking are portable apps safer than say a cellphone with some encrypted device?

Technically that's like remote PC usage correct or am I mistaken? (assuming it has security apps)