music_man

Hi,

This is an onscreen keyboard written in js to help against keyloggers.

http://williamparry.com/scripts/formSecurity/index.html

Feedback appreciated.

Cheers

Please register or log-in into NamePros to hide ads

__________________
Self-service
My homepage

DeViAnThans3

Looks nice! For sites which require or want a high security, this could be quite suitable!

What I'ld do additionally, is making sure that people can't type anything in there (onkeypress javascript). Or are at least warned that they should use the onscreen keyboard for their own safety.

Note though that this form of security only can handle keyloggers. Network sniffers will still find the information very easily.

__________________
Useless is cool!
Work From Home Opportunities -
1 link ... 1 month ... 5 NP$ ] Real bargain! Limited to 1 month.

maximum

William, thanks for sharing. Nice idea

Originally Posted by DeViAnThans3

.... What I'ld do additionally, is making sure that people can't type anything in there (onkeypress javascript). Or are at least warned that they should use the onscreen keyboard for their own safety. ....

Good idea to add this, IMHO.

Originally Posted by DeViAnThans3

Looks nice! For sites which require or want a high security, this could be quite suitable! .... Note though that this form of security only can handle keyloggers. Network sniffers will still find the information very easily.

Wouldn't such be smart to be using SSL, etc., as part of the site's overall "high" security?

__________________
Show a soldier you care: The Gratitude Campaign
WhoIs search from the root registries

gamescoper

great script brilliant idea for online banking as well and if you can set it that the user cannot change the security level even better

music_man

Thanks for the feedback!

Your right that it doesn't prevent network sniffing, but as maximum said, SSL should cover that (and SSL encryption is better than any JS encryption).

gamescoper - it was originally designed to have the security setting set only by webmaster but I thought that if the user wants something easier to use (but less secure) then they can set it themselves.

Perhaps I should add a variable in the embed script that states whether the user can set their own security?

Cheers

William

__________________
Self-service
My homepage