I’m a bit on the fence with Keyloggers. There are so many valid uses for them.
Instead of just flagging the keylogger simply because it is a keylogger, I’d prefer the security application to be smart enough to discern the good activity from the bad and flag instead on the malicious behavior. Although as we all know, that’s a pretty tall order!
How does one separate the good keylogger and the bad keylogger? Both can collect usernames and passwords, credit card info, name, address, DOB, SSN’s, etc. Both can send that information to a 3rd party server. etc, etc, etc
I think it’s best to detect them, notify the user, and let the user go in and put it into the exception list if they want to keep it.
Well, you see… That’s the point. There is more to a keylogger than spying on someone…
For example, any program that has a macro recording feature is, you guessed it! A keylogger! It needs to monitor keypresses in order to build the macro. Nothing to do with spying on anyone, and a completely safe and legitimate process…
This is what I meant by my distinction. I wish an application could discern between harmless keylogging such as a macro recorder and those malicious keyloggers that are spying on you.