Will Run As Hide Password From Trojan Horse Software?

  • Thread starter Thread starter Will
  • Start date Start date
W

Will

The Windows 200x style login dialog has an interesting security feature:
the keyboard input is piped directly to the Windows kernel and cannot be
hooked (as easily) by a Trojan Horse that manages to get installed on a
computer. By doing this the password for an account is protected from any
application that might be sniffing all keystrokes made on the computer.
My question is does the Run As command have this same attribute, hiding any
password entered from an application that hooks onto the keyboard and sniffs
for keystrokes?
 
I doubt it but it would be easy enough to test by putting a keyboard sniffer
on a computer and see what happens. If that is a big concern consider
implementing smart cards and user your smart card with runas. --- Steve
 
Back
Top