Scarfo "keylogger", PGP

Bram Cohen bram at gawth.com
Mon Oct 15 16:05:59 EDT 2001


On Mon, 15 Oct 2001, Peter Fairbrother wrote:

> The other and more worrying "component" picked up the PGP key Scarfo used -
> his father's prison number! - and virtually nothing else.

Sounds like it was software and just recorded everything typed into the
PGP 'enter your password' dialog.

> Could it be remotely installed?

It's a windows box, do you really have to ask?

> Is this a serious security failure in PGP?

Almost certainly not. Applications can't be any more secure than their
operating system.

-Bram Cohen

"Markets can remain irrational longer than you can remain solvent"
                                        -- John Maynard Keynes




---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at wasabisystems.com




More information about the cryptography mailing list