| Packet sniffing on Trusteer Rapport and more I'm not sure what to think about all this ? Both good reports and questions raised ! If someone from here could Packet sniff etc Trusteer Rapport it "could" be quite revealing ?
*
Trusteer or no trust 'ere...
...that is the question. Well, I've had more of a look into Trusteer's Rapport, and it seems that my fears were justified. There are many security professionals out there who are claiming that this is 'snake oil' - marketing hype for something that isn't possible. Trusteer's Rapport gives security 'guaranteed' even if your machine is infected with malware according to their marketing department. Now any security professional worth his salt will tell you that this is rubbish and you should run a mile from claims like this. Anyway, I will try to address a few questions I raised in my last post about this.
»blog.rlr-uk.com/2009/05/trusteer···ere.html
Keylogging Trusteer's Rapport
It's quite simple really, but requires a special setup. Rapport hooks onto the keyboard driver to prevent keylogging. However, if you invoke the remote desktop feature in Windows then a different keyboard driver is invoked, which Rapport cannot hook onto.
»blog.rlr-uk.com/2010/02/keyloggi···ort.html
Trusteer Rapport password leakage problem
Password leakage
One of Trusteer Rapports security measures is to warn you if you enter a known password onto a new site. This is a security measure to protect against the password for one site being stolen by another sites phishing attempt.
This is all good stuff. However they have created a new potential problem in the way they have implemented the warning message. If you use the same password on multiple sites (as most people do), and someone discovers your password, then they can use Trusteer Rapport to get a list of other sites that you have asked Rapport which use the same password.
»www.reviewmylife.co.uk/blog/2010···problem/
Trusteer's Response to Issues with Rapport
I have been getting a lot of hits on this blog relating to Trusteer's Rapport, so I thought I would take a better look at the product. During my investigations, I was able to log keystrokes on a Windows 7 machine whilst accessing NatWest. However, the cause is as yet unknown as Rapport should be secure against this keylogger, so I'm not going to share the details here yet (there will be a video once Trusteer are happy there is no further threat).
»blog.rlr-uk.com/2010/02/trusteer···ith.html
Series of Demo Videos of Trusteer's Rapport
I am currently producing a series of videos demonstrating the anti-spyware capabilities of Trusteer's Rapport. So far I have looked at keylogging software and screen capture. Specifically, I have demonstrated it with Zemana ScreenLogger, Zemana KeyLogger and SpyShelter. I will be adding more videos over the next few days. The first two videos are embedded below. (Edit: 17/05/10 - I have now added three more videos covering Zemana SSL Logger, AKLT and Snadboy's Revelation V2.)
»blog.rlr-uk.com/2010/05/series-o···ers.html |
