trojan problem (password protection)

[Tristan Wibberley]

Michael T. Richter wrote:
> On Fri, 2006-27-01 at 14:05 +0100, Matthias Heiler wrote:
> 
>> If you have a trojan logging your keystrokes you give away _all_ of
>> your complicated, strongly encrypted passwords at once.
> 
> 
> How do you figure?  Unless the trojan is doing a whole lot more than
> keystroke logging, it ain't getting the contents of the vault (seeing as
> how that file is on a USB stick which is only plugged in for use and
> then removed and kept on my person).

When you try to use that password database, you will type your password. 
The trojan now has your password and can immediately get more passwords 
from the database.

-- 
Tristan Wibberley