0

Is it possible to perform secure keyboard entry (similar to what is offered in the OS X Terminal app) using only web technologies and/or Flash?

If not, is there any way to more broadly guarantee exclusive/isolated access to input devices, or to check whether or not a device has been read or manipulated by external processes since start of observation?

I assume this is impossible with JavaScript alone, however I am not familiar with Flash and have heard of more extensive capabilities being offered (usually hear about them being abused) than JS would permit.

Improve this question
1
  • I suppose this probably would not be available since the abstraction would be more troublesome to maintain across platforms than would be justified by the few benefits it would yield.
    – AJAr
    Commented Feb 8, 2015 at 1:03

1 Answer 1

Reset to default
2

No, since that would imply that Flash or JavaScript does have access to raw hardware, outside of its sandbox.

Think opposite, that if a flash applet or JavaScript applet would have this access, it would be possible to build a keylogging website that remained Active across tabs.

If you need to protect against keyloggers, I would suggest some sort of 2FA. Then it wont matter if the password does fall in the wrong hands, as long as the token does not fall in the wrong hands.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .