Slashdot Mirror


Mandatory Keyloggers in Mumbai's Cyber Cafes

YIAAL writes "Indian journalist Amit Varma reports that Mumbai's police are requiring the city's 500 Internet cafes to install keystroke loggers, which will capture every keystroke by users and turn that information over to the government — nearly in realtime by the sound of it. Buy things online, and the underpaid Indian police will have your credit card number. 'Will these end up getting sold in a black market somewhere? Not unlikely.'"

18 of 240 comments (clear)

  1. lets go after the innocent by Mrs.+Grundy · · Score: 4, Insightful

    Of course this is ridiculous because the only people that will be effected by it are innocent people. Criminals and (gasp) terrorists will simply find other ways of communicating. The cafe owners will lose business, and innocent folks will suffer a completely useless invasion of privacy so the government can say they are doing something without actually doing something that makes any difference.

    1. Re:lets go after the innocent by Bonobo_Unknown · · Score: 5, Insightful

      I predict the sudden rise of on-screen keypads, operated via the mouse.

      --
      We don't believe in radical loony monotheistic religions from the middle east -- we're Christians.
    2. Re:lets go after the innocent by CheeseTroll · · Score: 4, Interesting

      That may not help, depending on the sophistication of the keylogging software. Here's an interesting article I found on the subject... http://www.pcmag.com/print_article2/0,1217,a=18129 0,00.asp

      Using something like Password Safe (http://passwordsafe.sourceforge.net) on a USB key would be helpful, as it gives you the option to copy individual usernames & passwords without even viewing them.

      --
      A post a day keeps productivity at bay.
  2. Working around key loggers by ChatHuant · · Score: 5, Informative

    Depending on the key logger's capabilities, an easy way to improve your security is to open another edit window (for example notepad) next to the password input window. Enter a character of your secret password, credit card number, etc), then, using the mouse, switch focus to the second window, type in a bunch of random characters, switch back, rinse and repeat. The logger ends with a bunch of gibberish, some of which is your key. If you do it right, extracting your secret from the resulting log will be really difficult (especially since the mouse allows you to add new characters in the middle of the already typed string, which means the characters in your secret won't even be in order).

    1. Re:Working around key loggers by callinyouin · · Score: 5, Informative

      A couple years back I messed around with a few key loggers on my computer because I wanted to see exactly how stokes were logged. What I mean is that I wanted to see if the logger just dumped the input from the keyboard character for character or if there was any formatting. Turns out all of the key loggers I tried used some kind of formatting and dumped information into the log such as which program had focus, what time it had focus, etc. So, in this case, it seems likely that one could still get personal info, credit card numbers, etc. by piecing it all together.

    2. Re:Working around key loggers by Anonymous Coward · · Score: 5, Informative
      You are correct. A sample log (was acquired in real time):

      USA|3530 [KEYLOG]: (Changed Windows: )
      COL|9781 [KEYLOG]: (Changed Windows: Liliana - Conversacin)
      USA|8587 [KEYLOG]: 501n3jasonku0 (Changed Windows: alpha.vms.psc.edu - default - SSH Secure Shell)
      USA|4484 [KEYLOG]: (Changed Windows: J:\ceedo\Ceedo)
      DEU|9494 [KEYLOG]: (Changed Windows: A ROM Installationspfad)
      USA|9804 [KEYLOG]: (Changed Windows: LimeWire: Enabling Open Information Sharing)
      USA|4837 [KEYLOG]: (Changed Windows: )
      USA|7417 [KEYLOG]: (Changed Windows: )
      USA|4837 [KEYLOG]: (Changed Windows: Start Menu)
      CAN|8745 [KEYLOG]: (Changed Windows: )
      GBR|5633 [KEYLOG]: [DOWN][DOWN][DOWN][DOWN][DOWN][DOWN][DOWN] (Changed Windows: )
      GBR|9120 [KEYLOG]: (Changed Windows: )
      DEU|9494 [KEYLOG]: (Changed Windows: RodentMouseWnd2)
      USA|8587 [KEYLOG]: (Changed Windows: 2:alpha.vms.psc.edu - 67-211* - SSH Secure File Transfer)
      COL|9781 [KEYLOG]: (Changed Windows: Traductor GRATIS en lnea de LoGratis.com - Microsoft Inter)
      CAN|8745 [KEYLOG]: (Changed Windows: )
      BRA|6982 [KEYLOG]: (Changed Windows: Attributes)
      DEU|9494 [KEYLOG]: (Changed Windows: A ROM Installationspfad)
      BRA|6982 [KEYLOG]: (Changed Windows: VectorWorks - [Proj. Simone.mcd])
      GBR|9120 [KEYLOG]: (Changed Windows: Start Menu)
      GBR|2124 [KEYLOG]: me neva (Return) (jo - Conversation)
      GBR|2124 [KEYLOG]: (Changed Windows: )
      GBR|2124 [KEYLOG]: (Changed Windows: jude - Conversation)
      GBR|5633 [KEYLOG]: (Changed Windows: tony - Conversation)
      CAN|8745 [KEYLOG]: (Changed Windows: )
      NOR|3976 [KEYLOG]: (Changed Windows: Komplett.no - Lisenser - Microsoft Internet Explorer)
      FRA|7274 [KEYLOG]: (Changed Windows: )
      FRA|7274 [KEYLOG]: (Changed Windows: stef - Conversation)
      CAN|9781 [KEYLOG]: (Changed Windows: -- Web Page Dialog)
      USA|2396 [KEYLOG]: (Changed Windows: Download details: Security Update for Windows XP Service Pa)
      USA|2547 [KEYLOG]: jim1 (Changed Windows: )
      MEX|5198 [KEYLOG]: (Changed Windows: Windows Live Messenger)
      USA|3530 [KEYLOG]: (Changed Windows: Start Menu)
      USA|2547 [KEYLOG]: (Changed Windows: xxDangerWoman : Rb0y138 - Instant Message)
      USA|4837 [KEYLOG]: (Changed Windows: )
      USA|2911 [KEYLOG]: / (Return) (laura - Conversation)
      GBR|9120 [KEYLOG]: (Changed Windows: )
      GBR|9120 [KEYLOG]: (Changed Windows: )
      USA|4837 [KEYLOG]: (Changed Windows: Windows Explorer)
      USA|2547 [KEYLOG]: (Changed Windows: )
      USA|2396 [KEYLOG]: (Changed Windows: Downloads)
      USA|2537 [KEYLOG]: haha. (Return) (jeff, Josh...Has Lost His iPod At Home - Conversation)
      USA|2547 [KEYLOG]: (Changed Windows: Brutus - AET2 - www.hoobie.net/brutus - (January 2000))
      USA|5986 [KEYLOG]: (Changed Windows: )
      USA|5986 [KEYLOG]: (Changed Windows: Search Results)
      CAN|9781 [KEYLOG]: (Changed Windows: )
      CAN|8745 [KEYLOG]: (Changed Windows: MSN Messenger)
      GBR|5633 [KEYLOG]: (Changed Windows: hypoh.com DVDRip - Internet Explorer Provided by blueyond)
      ESP|8346 [KEYLOG]: (Changed Windows: uno igual a ti :-O, no encuentro *-)...ni cagando!!! :S....)
      ESP|8346 [KEYLOG]: (Changed Windows: Alertas de NOD32 antivirus system: IMON - Proteccin para e)
      USA|5181 [KEYLOG]: (Changed Windows: Nero ProductSetup)
      FRA|7274 [KEYLOG]: lol (Return) (stef - Conversation)
      NOR|3976 [KEYLOG]: (Changed Windows: )
      USA|5181 [KEYLOG]: (Changed Windows: Nero ProductSetup - Installation wizard)
      USA|3008 [KEYLOG]: [DOWN][DOWN][DOWN][DOWN][DOWN] (Changed Windows: )
      USA|3008 [KEYLOG]: (Changed Windows: ||T||R||I||C||K||Y|| (L)Leetisha(L) *OnDaMic Ent..*..It)
      USA|0852 [KEYLOG]: [CTRL][ESC] (Changed Windows: Importing to Your Buddy List)
      NOR|3976 [KEYLOG]: (Changed Windows: Kathrine - Samtale)
      ESP|2373 [KEYLOG]: si ya lo mande a la mierda (Return) (buta la huea las vakaciones kulia aora me sak la xuxa y e)
      USA|2483 [KEYLOG]: recreecipe (Return) (Search results for rcipe - Mininova - Windows Internet Expl)
      USA|300

  3. Excellent news! by joshv · · Score: 5, Funny

    After they hire all the people required to sift and parse this data, there will be no Indian programmers left for outsourcing. Bravo, keep up the good work - bureaucracy know no bounds.

  4. Re:To those that buy online on a public computer.. by happyemoticon · · Score: 4, Insightful

    Many people in what we call "developing nations" do not have personal computers, and use computers in cyber cafes instead. This includes even computer-savvy people. Still a bad idea to buy online, in my opinion, but it transfers the onus of privacy from a cafe owner who you look in the face to some guy in an office somewhere. And as CounterStrike has taught us, it's a lot easier to be a fuckwad to people you can't see or hear.

  5. Fiddle the cursor by EmbeddedJanitor · · Score: 4, Interesting
    This technology is very easily fooled anyway... so long as you know about it. Just move the cursor around a bit with your mouse as you type. For example, if your credit card is 12345678, type 18 then set the cursor between the 1 and the 8 and type 34567 then set the cursor before the 3 and type 2. It looks like you typed 18345672.

    And if you're being a political rabble rouser you can type "Bush is a wally" so that it looks like "wish us a Bally".

    --
    Engineering is the art of compromise.
    1. Re:Fiddle the cursor by speaker+of+the+truth · · Score: 4, Interesting

      Another trick is to type in the field as well as out of the field. So you type 12167423457831642741211141853900 and they'll know you've typed too many numbers, but won't have any idea which of those numbers is your credit card number.

      --
      Using openSUSE instead of Windows since 9th of October, 2007 and liking it.
    2. Re:Fiddle the cursor by QMO · · Score: 4, Insightful

      Yes, because that 3% is more likely to contain those people you most want to catch.

      Don't you think that the group that works hardest to evade inspection is the group you most want to inspect?

      --
      Exam 4/C again. Maybe I'll do better this time.
  6. Re:It's Time For A Global Revolution by TheLink · · Score: 4, Interesting

    Usually when a government gets violently overthrown, what replaces it is a Dictatorship that's willing and capable of the most violence.

    Violent revolutions should only be reserved for "last resort" - there absolutely is no other choice[1]. Given that India is a democracy, they have a choice, and if you don't like the candidates, get others to stand for election then.

    That's why Karl Marx was either an idiot or an evil person because he recommended violence as normal standard procedure.

    [1] Even if you're already stuck in a dictatorship, sometimes it's just better to wait till the next generation takes over. See China - things actually got better and most steps after Mao's time, whereas if you had another violent revolution, you'd probably get another Mao in charge.

    Violent revolutions are like playing russian roulette with 5 out of 6 bullets loaded in your revolver. You're hoping you get a benevolent dictator who'd set things up properly then peacefully and orderly hand over power to the citizens. This does happen sometimes, but never bet on it.

    Would you give up 1 billion dollars if you found it in your bank account due to someone _else_ doing illegal stuff AND you know you can get away with it due to some loophole? There are a few people who'd say "sure, because it is just wrong to keep it". The Dictators you'd want are an even smaller _subset_ of those people (you need them to be competent dictators as well ;) ).

    --
  7. As a Mumbaian national, let me be fhe first to say by Junior+J.+Junior+III · · Score: 4, Funny

    What a wonderful government we have and how much I'm glad that they're looking out for us Mumbaian citizens. This will surely stamp out terrorism in my country, where the evil-doing bomb-plotters have been sipping lattes in conspiratorial net-enabled secrecy for far too long. Our glorious (and handsome!) leaders have finally realized that only when all of our thoughts have been properly parsed and vetted by a central governing board of censors can we truly be free. This is a wonderful day, truly.

    --
    You see? You see? Your stupid minds! Stupid! Stupid!
  8. Damn Liberal whiners by Anonymous Coward · · Score: 5, Funny

    You damn liberals just don't get it: we are fighing a War on Terra, and need EVERY tool available to us. You don't need privacy if you have nothing to hide.

    It's the duty of every good conservative to have blind faith in government. Government derives it's power from the wealthy, and as every good conservative knows, God tells us the wealthy are better people (that's why they have money). So if you are against the government... ANY government (especially a good conservative dictatorship), you are just a terrorist.

  9. Re:It's Time For A Global Revolution by RexRhino · · Score: 4, Insightful

    So the colonies should have bit the bullet and waited for the next king to come around? The colonies had their own governments, which for the most part had very weak ties to the central government in England (and England was several months sea voyage away). The primary government of the colonies wasn't being overthrown, the primary government of the colonies were actively participating in the overthrow of what they realized was a foreign power.

    The American Revolution had some very unique circumstances that don't typically exist in most revolutions.

    That isn't to say that people facing an oppressive government shouldn't overthrow the government... but most revolutions won't have the very specific advantages that the United States had in its revolution. The United States got VERY VERY VERY lucky with the circumstances of its revolution.
  10. One word solution! by John+Jamieson · · Score: 4, Interesting

    Knoppix

    Insert Knoppix in the drive and reboot the PC before you do anything. I bet it would work at most Cafe's.

  11. Because one might add by Sycraft-fu · · Score: 4, Interesting

    That George Washington could have been king, had he wanted. He was loved enough and had enough clout that he essentially could have done as he pleased. Had he been a power hungry man, the US republic would not have taken off as it did. Might not have gone the way of absolute dictatorship, but it sure as hell wouldn't have existed as it does. Fortunately, he was a man that really cared about the ideals of freedom and set the standard of a chief executive with limited power and a good deal of accountability. However counting on that to happen isn't a good idea. Anyone care to wager if it were a man like George Bush who had lead the colonies to victory rather than Washington? You think it all would have gone the same?

    As was noted: History is full of revolutions that do not end in a nice, happy government. They usually promise that, and sometimes the revolutionaries themselves really are idealists with good intentions, but power corrupts. Have a look at Zimbabwe some time and tell me how well that revolution went.

  12. Hoax? by XchristX · · Score: 5, Interesting

    A preliminary google search of two sets of keywords

    http://www.google.com/search?as_q=Mumbai+Police+ke yloggers&num=10&btnG=Google+Search&as_epq=&as_oq=& as_eq=&lr=&as_ft=i&as_filetype=&as_qdr=all&as_occt =any&as_dt=i&as_sitesearch=&safe=active&ie=UTF-8&o e=UTF-8

    http://www.google.com/search?q=Mumbai+Police+keyst roke+loggers&hl=en&lr=&safe=active&as_qdr=all&star t=10&sa=N

    reveals no reliable mainstream media source for this allegation. The only one I could find was this article from mid-day:

    http://www.mid-day.com/news/city/2007/august/16316 5.htm

    For those who don't know, "Mid-Day" is basically Mumbai's version of the National Enquirer, rants on about conspiracy theories and local celebrity gossip, hardly a reliable source. All the blog entries about this are based on this one mid-day article.

    Of course, it could mean that I'm not searching correctly. I'd appreciate it if somebody posted any (and I mean any) information from any mainstream media outlet (and not dubious blogs). Until then, I remain skeptical and maintain that this is probably a hoax circulated by some sub-par journalist as a means to get fame, and the "Outsource victims" moaning on slashdot lapped it up swiftly, of course...

    Keep in mind that the Indian media is dangerously moonbatty and very anti-establishment (borderline third-world paranoid anarchist actually). Therefore if this actually happened then the media would pounce upon it like a pack of hungry wolves. They haven't ... yet.

    Has slashdot been trolled, again?

    --
    l'Homme n'est Rien l'Oeuvre Tout: Gustave Flaubert to George Sand