Also on AOL
- Autos
- Technology
- Lifestyle
- Gaming
- Finance
- Entertainment on AOL
- Lifestyle on AOL
- Sports on AOL
- Travel on AOL
- More on AOL
Featured Galleries
Joystiq
© 2013 AOL Inc. All rights Reserved. Privacy Policy | Terms of Use | Trademarks | AOL A-Z HELP | About Our Ads

Reader Comments (Page 1 of 1)
2-05-2009 @ 5:33PM
Hard8 said...
Simple
Scan for Spyware/Virus...clean?
Great now make a txt doc on your desktop with a random name and type your password in there.
Now just copy & paste it into WOW everytime your login
sometime later....
oh no you got a virus/spyware....keylogger?
Well they wont get your password because you never type it in
just a long log of CTRL+C, CTRL+V
Reply
2-05-2009 @ 5:44PM
Lephturn said...
Sigh, NO copy/paste will NOT prevent your password from being logged and stolen.
Although they might be called simply "key loggers" these malware programs are a lot more sophisticated than that.
Also re: quest helper... I switched to Carbonite Quest - MUCH lighter on resources than Quest Helper anyway.
2-05-2009 @ 5:44PM
shadowwolf007 said...
Wrong.
Any application can read from the clipboard at any time. It's a global thing, not a per-application thing ( how else do you get your text from Word in to your favorite chat application ).
Clipboard text is stored in plain text, so it's easily readable by any application on the system. Thus explains this security policy implemented in IE7: http://msdn.microsoft.com/en-us/library/bb250473(VS.85).aspx
Clipboard text is grabbed through a standard API call that is the same on nearly every Windows OS. This means all you have to do is copy out clipboard contents whenever someone pastes something in and parse. Within a few seconds you can figure out if it's text and, if so, whether it's a password.
And hey, a sample application for how this can be done is available on MSDN:
http://msdn.microsoft.com/en-us/library/ms649016(VS.85).aspx
So not only can I do this, but I can do so writing not even 1 line of my own code.
*PLEASE* stop spreading this misinformation. It doesn't matter where you heard it: This advice is wrong.
Read more on the clipboard here:
http://msdn.microsoft.com/en-us/library/ms649012(VS.85).aspx
2-05-2009 @ 5:45PM
JohnC said...
thats technically not true, viruses can do many things, one of which is take a screenshot of youre screen at a particular time, so having youre password written plainly in a text document will mean it can be easily taken.
2-05-2009 @ 5:52PM
Erthshade said...
Congratulations, you have managed to fool the most literal interpretation of keylogger. Now, how about the ones that sniff your outgoing packets or examine your clipboard contents whenever they change or get pasted?
2-10-2009 @ 9:36AM
Sinogasan said...
This is bad advice.
You should never write your password down, never mind putting it in a text file on your desktop - why not tape it to the monitor, or place it on a post-it under the keyboard?
There are malicious websites that can copy the contents of your clipboard. If you're truely paranoid, turn off javascript and don't use IE (ActiveX).
Memorize your password, run a virus scanner (that is up to date), use a spyware utility regularly - Malwarebytes is a good one, so is SpyBot. Change your password regularly. Passwords should be non trivial and not contain dictionary words and be at least 10 characters in length.