It is stated in;
http://www.governmentattic.org/4docs/NSA_AmerCryptColdWarBk4_1999.pdf (around page 11 in the PDF)
That the CIA in the 1980’s found an early version of what was basically a keylogger in US Typewriters (IBM Selectrics), it was suspected that these had been installed by KGB during their way through Russian or Polish customs, data collected from the typewriters was collected and emitted via radio transmissions.
With that in mind, I am afraid to think what is possible today with the technology we have now 🙂I just stumbled across this lately, it’s a piece of software you install that should insert itself as a driver between the keyboard and the OS and encrypt all keystrokes – the idea would be that it would foil keyloggers.
An interesting concept, however I’m not fully convinced – I guess that I don’t fully understand how this works – but I tried installing it on a test machine and it did no harm – so I guess it won’t do any harm installing it. There is a free version that works with IE and other popular browsers – to make it work with everything you need the pro (payed) version – IE is fine but just how do you test a product like this? Install a keylogger yourself *lol* well let’s see…
a couple more detailed reviews here (although they did also omit installing a keylogger to test the software ;-));
http://www.brighthub.com/computing/smb-security/reviews/27606.aspx
http://www.vikitech.com/830/protect-yourself-from-keyloggers-with-keyscrambler
I am working on a script to create the directory structure for our new file servers, one of the steps is to create the shares which is easy enough;
net share <snarename>=<path> /grant:<user>:FULL (for full access obviously, but as file rights are controlled by NTFS this is less important).
Anyway one thing popped up, how about ABE (Access based enumeration) on a Windows 2008R2 box? On Windows 2003 it was a ‘patch’ that needed downloading how about Windows 2008? Well simple enough it’s as expected embedded and can be found under the advanced settings for the share in the “Share and storage management” mmc. Sadly enough there does not seem to be any switch for the “net share” command that will enable this, the default for “net share” is ABE = off so you have to enable ABE manually afterwards 🙁
BTW; ABE is basically a feature that tell the server “only show the user the files he/she has access to” so the users will not see the “Top Secret” folders etc.
Read more and see the nice guides etc here;
http://blogs.technet.com/b/hugofe/archive/2010/06/21/windows-2008-access-based-enumeration-abe.aspx