Attachment uploads are currently disabled. This is a temporary situation and will resume as normal in the coming days.
UNSOLVED
KeyScrambler (2.5) - first impressions
I noticed (on Calendar of Updates) one of the programs updated yesterday was KeyScrambler, by QFX Software.
I had never heard of this program previously... seems it's relatively "unknown" (or perhaps i should say, apparently hasn't gained much popularity).
IF ANYONE HAS FIRST-HAND EXPERIENCE WITH IT, PLEASE FEEL FREE TO REPLY WITH MORE DETAILS.
What it is: KeyScrambler (I'm describing only the FREE/PERSONAL version here) is an add-on for IE and FireFox (and Flock, whatever that is) which purportedly offers a major degree of protection against keyloggers. I say "purportedly", because I am not in a position to confirm just how reliable, or absolute, such a claim is --- I will leave that to others, if they're in a position to elaborate.
What it does: Basically, it "scrambles" anything you type-in at your keyboard, so that any (software) keylogger present on your machine will only intercept the scrambled [garbled] keystrokes. It then unscrambles the keystrokes just in time for IE and Firefox to properly understand them.
How it works: The theory is that KeyScrambler installs a system driver at the kernel-driver level, allegedly before any (known) software keyloggers can gain access to your original keystrokes --- so that by the time a keylogger "sees" anything, it's already encrypted. Note that such protection is intended to combat a software keylogger, but not a hardware keylogger that's physically installed on your system. However, hardware keyloggers tend to be rare, so...
Moreover, it's theoretically possible that newer software keyloggers may someday be developed that place themselves even deeper into your system, before KeyScrambler can do its job. While there allegedly aren't any at present, this is certainly a caveat to keep in mind.
Here's some more detailed/technical information from QFX: "We have tried to encrypt the keystrokes as early as possible and decrypt them as late as possible. This means that keyloggers are deprived of all the usual channels that they use for snooping on keyboard traffic. That's why KeyScrambler works against keyboard hooking, window message hooking, kernel API hooking, DirectX snooping, GetKeyState, GetKeyboardState, GetRawInput, and many other less well known methods".
Why is this important/valuable?: Anyone doing any sensitive transactions over the internet --- buying/selling, accessing bank / credit card accounts --- is [hopefully now] protected against their information being intercepted by a keylogger.
Video Presentation: Watch their video by scrolling-down toward the lower left section here: http://www.qfxsoftware.com/index.html
Download: the FREE/PERSONAL version from http://www.qfxsoftware.com/Download.htm
[ Supports Windows 2000, 2003, XP, Vista (32-bit and 64-bit) ]
Installation: Was direct and simple. In my case, it determined that I had IE and Firefox (but not Flock) on my PC, and pre-selected these two browsers to continue its installation. It places a BHO (Browser Helper Object) in Internet Explorer, and prepares to place an add-on in Firefox --- which the user must confirm. A reboot is required.
Running: I was concerned about KeyScrambler auto-booting, as is described in some of their documentation. Perhaps that applies to the paid versions. Suffice it to say, KeyScrambler PERSONAL does NOT auto-boot with Windows... neither as a program nor any service. However, whenever you open either IE or Firefox (or Flock), a "K" icon will appear in your system tray. Initially yellow while IE or Firefox is loading, it will turn to green to show these programs are protected. All keystrokes typed ANYWHERE into these browsers --- whether at the address bar, Search field, or elsewhere --- including typing-in a post like this at Dell, or composing your e-mail --- are scrambled. [Mouse clicks and movements are apparently not... and I have no idea whether or not it masks "paste"-operations.] Upon closing that browser, KeyScrambler knows to shut itself down (i.e., its icon is removed from your system tray).
Note: If, while IE or Firefox is still open, you switch to another application (for example Opera or Word), the "K" icon will switch from green to yellow, indicating that KeyScrambler is NOT protecting you in this other application. It will turn green when you go back to your IE/Firefox window. [If, for whatever reason, you wish to "turn off" keyscrambler while these browsers are open, the "K" icon will indicate this by turning red.]
Appearance/Options: Keyscrambler is potentially noticeable in two ways: There's a "K" icon in the system tray. And when you begin to type, a "Keystroke Encryption" bar appears in one of the four corners of your screen (user choice which corner); the bar will fade/disappear after 4 seconds of inactivity. You can access the options in 3 different ways: either 1) by RIGHT-clicking on the "K" icon in your system tray and selecting OPTIONS, or 2) by LEFT-clicking on the "wrench" icon while the encryption bar is displayed, or 3) via the TOOLS menu in IE/Firefox. The most valuable option screen is the DISPLAY, which allows you to place the "encryption bar" in the corner of your choice --- or to suppress it entirely (by selecting the tray icon only).
Invasiveness: If you opt for only the tray icon, it's completely non-invasive. The encryption bar, if used, is only minimally invasive (small corner), and as stated above, can be placed in the corner of your choice, to minimize such invasiveness.
My testing so far: I've just installed it on a Win XP SP3 system [running Avast antivirus, and Comodo 2.4 firewall], in both IE8 and Firefox 3.5.2 , without noticing any slowdowns, complications, unexpected side-effects, nor crashes in these applications (at least not so far). In short, nothing negative to report.
My thoughts: As for any "positive", the fundamental question still remains: does it really do what it claims, or is it all a bunch of hype --- offering only a false sense of security??? IF (and that's a really big IF) it really does what it claims --- scramble your keystrokes BEFORE a keylogger can access them --- then this would seem to be a wonderful security addition to your IE/Firefox browsers --- even if it turns out that it protects against only "many" (but not all) keyloggers. I'm hoping BB (or some other security expert) might be able to offer some insight here. For what they're worth, here's a link to some other reviews/testimonials: http://www.qfxsoftware.com/press_makingnews.htm#reviews
Another caveat: While this program might be helpful in "defeating" keyloggers, I have no idea whether or not it offers comparable protection against tracking of your wirelessly-transmitted data, especially if you're using a non-secure public wi-fi access point... that is to say, will a (wireless) hacker also see only the encrypted keystrokes, or will he/she have access to your original keystrokes???
Final comments: there are two paid versions ["Professional" and "Premium"], which offer protection in other programs (e.g. WORD, MONEY). But I am not considering/trying paid versions here. For those who wish to see the additional products covered by these, see: http://www.qfxsoftware.com/products.htm
