Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fake password entry window problem #19

Open
roman-modelist-dev opened this issue Jun 22, 2018 · 0 comments
Open

Fake password entry window problem #19

roman-modelist-dev opened this issue Jun 22, 2018 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@roman-modelist-dev
Copy link
Contributor

Attacker can grab pass secret by displaying fake password entry window for user. User will pass secret to the fake window and attacker will can to grab secret.

We need to implement protection mechanism like alt+ctrl+del in windows OS. User must enter specific keyboard shortcut, that attacker can not capture. If attacker will try to print fake pass entry window user will press a key combination. Our service will capture this keyboard shortcut, kill fake pass entry window and display truly pass entry window.

We must to figure out how to implement this protection mechanism on Windows, Linux and MacOS.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants