[guardian-dev] Android 4.3 has built-in keylogger support

[Daniel McCarney]

Following up on Tom's post. The old method of building keyloggers using keyboard
applications is well documented. This post might be of interest:

http://www.android-app-development.ie/blog/2013/03/06/inserting-keylogger-code-in-android-swiftkey-using-apktool/

On 07/25, Michael Rogers wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 25/07/13 13:56, Tom Ritter wrote:
> > On 25 July 2013 07:46, Michael Rogers <michael at briarproject.org>
> > wrote:
> >> "Starting in Android 4.3, accessibility services can observe and 
> >> filter key events, such as to handle keyboard shortcuts or
> >> provide navigation parity with gesture-based input. The service
> >> receives the events and can process them as needed before they
> >> are passed to the system or other installed apps."
> > 
> > I don't think this is anything you couldn't do before by just
> > building your own keyboard and replacing the system one.  Which
> > requires double opt-in as Mark mentioned.
> 
> Thanks, that's good to know. On a more optimistic note, Android 4.3
> also has support for hardware-backed key storage. Does anyone know
> which devices, if any, support this?
> 
> Cheers,
> Michael
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
> 
> iQEcBAEBAgAGBQJR8Ss6AAoJEBEET9GfxSfMqEAIAJjspjeVDn+v3UjzrtiYTGby
> jhbrUhPFeN0ppvLY7l1ytpfoxrs86kyd8wTBvqW3xeyI4V6ZMczHpFD2wMT00+Df
> vm1M4zB1ZzP6jBpr2oBXyJZQsJCFydEmEtDQ3ud1e5aTo3SDCQXVgIDphue/jm19
> 22o/y7SUotvQmPMP3LXlFI0zqmNyYTrNnmkhzmORDtEIXV/okFtb2VCxSXnNQPU6
> Ppgh+P9gOKoGs011ihhY9bxDzqfhGoD234zPMWFKKJJR+KOLXlt1CSiJ6wBb+h25
> MG1rnTaJ75hUQyORn7e8g5npjekJmgx6PyAdoarHuRWA9xrhMRC1LLrbh0VwHiE=
> =6WnY
> -----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: Digital signature
URL: <http://lists.mayfirst.org/pipermail/guardian-dev/attachments/20130725/c6af3ccb/attachment.pgp>