What is Keylogging?
Keylogging is a type of surveillance software or hardware that records every keystroke made on the system its installed on. Keyloggers can secretly record and spy on what people are typing on their keyboards, where this can include usernames, passwords, credit card information, personal identifiable information, company network login information and other sensitive information.
Why Do Some People Defend the Practice?
There are some positive arguments for using key loggers. For example, using a keylogger to monitor your child’s screen time. The reality is if you have kids you end up giving them a screen to buy you some peace of mind. Some devices have parental controls, however as a former young person I found a way to bypass my High Schools computer lab PCs security and learned to browse the internet freely. Applying this same logic, a key logger would help keep a parent informed of what their offspring online activity. Companies also use keyloggers to monitor employee productivity. If the company owns the devices, this is legal however they must inform their employees. Lastly, ethical hackers may use key loggers when performing a companywide penetration test.
Why Are Some People Against Keylogging?
According to an article written by the cybersecurity EDR company Sophos, “ethical concerns associated with keylogger use: Privacy Invasion, Data theft, Consent and Transparency, Abuse of Trust, Security Risks, Legal Implications, Potential for Misuse, Unintended Consequences.” A bad actor who uses keyloggers maliciously against an individual can wreak havoc on a person, business, or government for that matter. Other examples of keylogger misuse, include being used for espionage like a government agency, cyberbullying, using a remote computer as a RAT (a remote access trojan, which is malware that lets an attacker control a computer from somewhere else). A RAT for example can be used to control another person’s computer and do illegal online activity all the while the PC owner is unaware and is set up for a crime they did not commit. The argument against why people are against keyloggers raise grave concern for everyone.
In Summary
Overall, keylogging to me falls within the ethical arena, and I believe we should pass laws against the free use of keyloggers. If for example a company is to use keyloggers like modern day MDM (mobile device management, software that lets an IT team manage company devices) solutions which currently allow IT depts. to remotely control computers, turn on a random employee’s cameras, mic, and or monitor employees’ computers. These companies must meet strict compliance regulations before being allowed to deploy such a software. This would protect individuals at organizations from being spied on by employees. With the passing of laws for using keyloggers that would set a standard for the legitimate use for them and if someone is caught using a keylogger without abiding by these laws; there should be grave consequences. Keyloggers go against a human’s rights for privacy and should be used for legitimate purposes only, misuse of keyloggers should be banned in my opinion.
Related reading: Secure Operating Systems: Tails, seL4, and Qubes OS, which covers tools that help people avoid surveillance.
Leave a Reply