Surveillance technology: are you being watched?

There are a lot of tools out there that allow for computer monitoring.

Hardware:

Besides basic chat features and video conferencing, webcams are more frequently being used for security purposes. Webcams can be external, but are coming out embedded in many new model models and laptops. Products are available that allow computers connected to webcams to monitor movement and sound—and to record when they are detected. These recordings can be 1) stored on the computer, 2) uploaded onto internet sites, 3) emailed to a selected address.

In a recent story, a burglar was caught in the UK by a computer savvy homeowner. The webcam caught pictures of the burglar's face as he was stealing the computer... even one with him reaching for the webcam (a bit like the Grinch who stole Christmas). Talk about being caught red-handed.

Hardware key loggers:

A hardware key logger is usually inserted between the keyboard port and the keyboard. These are also available as USB inserts. Key loggers are able to record all user keystrokes to its internal memory. Because these devices can be spotted by an alert user (should they look in back of their computer), manufacturers are now offering hardware key loggers which are disguised as baluns and also create keyboards with hardware key loggers built-in. These devices can be extremely helpful when needing to backtrack and find information that you have previously entered into your computer. They can also lead to a breech of privacy if they got into the wrong hands.

Software:

Software key loggers:

A software key logger is a stealthier version of surveillance. It ideally uses very little memory and CPU attention. It may not appear on the computer's Task List nor Uninstall List. Essentially, a good key logger is invisible to the person being monitored.

If the person who installs the software can capitalize on an existing software vulnerability, configuration error, or user gullibility, a software key logger may be installed remotely (that is, not from the computer that is monitored).

If this is the case, the person may be able to remotely retrieve keystroke logs, including user-sensitive data (e.g. usernames and passwords).

Many software keystroke loggers are integrated with other stealth recording software, such as screen capture software, remote control software, or audio and video recorders.

Some Trojan horses can allow hackers to activate a computer's camera without the user's knowledge, providing the hacker with a live video feed from the unfortunate user's camera.

Cameras such as Apple's iSight include lens covers to thwart this. Other webcams, such as the Logitech Communicate STX, have a built-in LED that lights up whenever the camera is active.

So what can you do to protect your privacy?

One of the most important things you can do to protect your privacy is to become familiar and comfortable with your computer: monitoring what programs are running and knowing what they do

Besides that, you need to take protective measures on your computer. You should be using recent versions of:

Anti-virus software
Anti-spyware software
Firewall- enabling a firewall does not stop keyloggers per se, but can possibly prevent transmission of the logged material over the net.
Network monitors- Network monitors are also known as reverse-firewalls. They can be used to alert the user whenever an application attempts to make a network connection. This will prevent the keylogger from relaying your information back to its "home base."
Anti-keylogger software- Many anti-keylogger software products use "signatures" from a list of all known keyloggers. The software subscriber can then periodically run a scan from this list, and the software looks for the items from the list on the hard-drive. One drawback of this approach is that it only protects from keyloggers on the signature-based list, with the PC remaining vulnerable to other keyloggers.

Some ideas on how to fool the keyloggers:

This might be more than you are willing to do, unless you are really paranoid. The vast majority of keyloggers can be fooled by alternating between typing the login credentials and typing characters somewhere else in the popup/current window. Similarly, one can move their cursor using the mouse during typing, causing the logged keystrokes to be in the wrong order. One can also use context menus to remove, copy, cut and paste parts of the typed text without using the keyboard.

Comments

Anonymous

September 25, 2007 at 9:58 AM

What about hidden cameras???

Rate this article

Questions about this topic? Ask them on our Contact Us page.

Bookmark this page