Quote from: bitcoinBull on June 27, 2011, 08:05:09 AM

Quote from: allinvain on June 27, 2011, 08:00:06 AM

Quote from: mouse on June 27, 2011, 07:46:10 AM

Quote from: allinvain on June 27, 2011, 07:32:15 AM

But then the virus would have to just wait longer until you type your password. I favor a "secure keypad" that you input your password via mouse clicks. Next question is how to trick viruses that may take screenshots?

Make the layout of the keyboard different each time, so if the SS it, they cant auto click it in again based on its presumed location.

Hmm, what if the layout changed every 5 seconds or some predetermined time. It would make it a pain in the ass to input your password but hey it's worth it.

None of this can help. Trojans can take screenshots at every mouse click so it knows what the password is because it knows where you clicked. This is already a standard feature in bank theft trojans.

Dang. How about if when the bitcoin client boots up for the first time it gives you the option to print out a crypto pad. This is akin to a cheap form of two factor authentication. Each crypto pad is of course different.