Re: Logitech Keyboard Insecurity

From: Paul Cardon (paulat_private)
Date: Thu May 02 2002 - 15:15:54 PDT

  • Next message: richard.fuserat_private: "Re: Logitech Keyboard Insecurity"

    keyboardhackerat_private wrote:
    >  Logitech has been contacted about 1 month ago and they have
    > confirmed it is indeed a problem with their software, but a
    > fix is not yet out. A 'locked' computer should indeed be
    > locked, and not accessible via any means. While this bug is
    > a low risk, it shows how *obvious* flaws go undetected. It
    > totally bypasses GINA (Graphical Identification aNd
    > Authentication), which is supposed to keep the PC secure (to
    > the extend of requireing Ctrl-Alt-Delete to login).
    
    
    Hrrm...  Is the driver signed by Microsoft?  If it is, that seems to be 
    something that Microsoft should be checking from now on before they 
    certify keyboard drivers.
    
    -paul
    



    This archive was generated by hypermail 2b30 : Thu May 02 2002 - 16:29:28 PDT