TouchEn nxKey: A keylogging anti-keylogger solution

#1

Post by curling_grad » Mon, Jan 09, 2023, 6:58 AM UTC

TouchEn nxKey: A keylogging anti-keylogger solution
palant.info

Re: TouchEn nxKey: A keylogging anti-keylogger solution

#2

Post by leshenka » Mon, Jan 09, 2023, 8:11 AM UTC

Is two-factor security an alien concept to South Korean banking system? At least via SMS? But either way if they're going to make everyone install an application, why not OTP generator?

Re: TouchEn nxKey: A keylogging anti-keylogger solution

#3

Post by lifthrasiir » Mon, Jan 09, 2023, 8:20 AM UTC

leshenka wrote: post #2

Is two-factor security an alien concept to South Korean banking system? At least via SMS? But either way if they're going to make everyone install an application, why not OTP generator?

Oh, they do have multiple factors. In fact, so much that each factor should be guarded to the maximum extent, which is the crux of actual problems. At least many SK websites now work without anti-keyloggers.

Re: TouchEn nxKey: A keylogging anti-keylogger solution

#4

Post by choeger » Mon, Jan 09, 2023, 8:23 AM UTC

I will bring this up the next time, someone laments about the lack of digitalization compared to other nations.

Re: TouchEn nxKey: A keylogging anti-keylogger solution

#5

Post by kweingar » Mon, Jan 09, 2023, 8:27 AM UTC

I am very grateful for the modern web. It used to be commonplace to install a bunch of executables that interacted with the browser and took instructions from random websites (Flash, Silverlight, Java applets).

I have my reservations with the browserfication of software (and the restriction of browser extensions), but at the same time it is absolutely for the best that normal users just run sandboxed phone apps and browsers these days. Hopefully South Korea will retire this tool soon.

Re: TouchEn nxKey: A keylogging anti-keylogger solution

#6

Post by stargtmail » Mon, Jan 09, 2023, 8:29 AM UTC

All the People I've met in South Korea want Independence day from these disasters. They scream every day including today.

Re: TouchEn nxKey: A keylogging anti-keylogger solution

#7

Post by ThrowAgain » Mon, Jan 09, 2023, 8:30 AM UTC

Between this and https://en.wikipedia.org/wiki/Shutdown_law South Korea sounds like pretty oppressive country to live in.

Re: TouchEn nxKey: A keylogging anti-keylogger solution

#8

Post by pvg » Mon, Jan 09, 2023, 8:47 AM UTC

The first part was discussed on HN a few days ago and provides some background/context:

https://news.ycombinator.com/item?id=34231364

Re: TouchEn nxKey: A keylogging anti-keylogger solution

#9

Post by [deleted] » Mon, Jan 09, 2023, 8:48 AM UTC

stargtmail wrote: post #6

All the People I've met in South Korea want Independence day from these disasters. They scream every day including today.

[deleted]

Re: TouchEn nxKey: A keylogging anti-keylogger solution

#10

Post by wkat4242 » Mon, Jan 09, 2023, 9:00 AM UTC

Wow this is such a fail. It tries to fix a security issue but creates a much bigger hole in the entire system.