I think you meant his private strings are on the _blacklist_ instead of the _whitelist_.

Anyways, cool project :P

Posted at 12:49 pm on Jul 1st, 2009 by Frank Groeneveld

i was just about to write the same. but now that you was first, i guess the next step is on me: ’smartass!’ ^^.

Posted at 1:03 pm on Jul 1st, 2009 by nimrod

Yeah, blacklist for “safe”/filtered words :)

It could be cool to make some Windows API calls to find out what the current app in focus is, and only tweet messages from specific programs (e.g., skype, aim, etc.) That’d almost be “useful”, though, and I was aiming more for “ridiculous” :)

I also posted the binaries if you’d like to try it out without compiling things. http://kylemcdonald.net/

Posted at 1:12 pm on Jul 1st, 2009 by Kyle McDonald

what is the point of it? why would anyone want to log their keystroke and upload it online?

Posted at 1:13 pm on Jul 1st, 2009 by yu

@yu: it’s not really a “practical” app, it’s more of an experiment for exploring the difference between “private” and “public” information. I’m also curious about why people post to twitter in the first place. Maybe it’s comforting to think that our random thoughts are worthwhile? I’m trying to understand these questions better, too.

Posted at 1:16 pm on Jul 1st, 2009 by Kyle McDonald

this is nothing more than a keylogger. i mean… cmon, just because it twitters doesnt mean it deserves a spot on hackaday….

lame.

Posted at 1:57 pm on Jul 1st, 2009 by sunjester

@sunjester: I feel like hacking our expectations and beliefs (about things like privacy) can be just as essential as technically/scientifically interesting hacks. I agree, because it tweets doesn’t mean it belongs on hackaday :) [ditto with anything using an Arduino] But I submitted this project because I though hackaday readers might enjoy an old idea (a keylogger) used in an unusual way: to share “private information” on purpose.

Posted at 2:07 pm on Jul 1st, 2009 by Kyle McDonald

Interesting project! Thanks.

Posted at 4:07 pm on Jul 1st, 2009 by chris

Yeah interesting, but I cant really see how it could be taken ‘forward’ to some other practical project, not to say it shouldn’t have been tried in the first place.
One thing, make sure the blacklist file is at least encrypted strongly if its to hold passwords to filter out. Perhaps a more robust solution would be to not have the pwd in a text file, but compare keystrokes against the Windows SAM database hashes. Maybe. Okay maybe not! ;-)

Posted at 4:37 pm on Jul 1st, 2009 by Stu

oh no,the two greatest evils in the world combined!

Posted at 7:21 pm on Jul 1st, 2009 by Thomascpp

ill be so happy when this twitter phenomenon is over

there is just a limit to the amount of information that we need to know about you. facebook and myspace abutted the line but twitter has just completely blown it away.

Posted at 8:14 pm on Jul 1st, 2009 by anon

@anon: I totally agree.

Posted at 8:43 pm on Jul 1st, 2009 by Kyle McDonald

wow, that’ll make so many important new tweets, and raise the overall quality of new twitter posts worldwide SIGNIFICANTLY.
XD

Posted at 10:03 pm on Jul 1st, 2009 by Dennis

So, not only does the keylogger grab whatever he types, greatly increasing the chances of that “Oooops” moment … he also hardcoded important critical information into a blacklist? Please tell me he at least hashes the stuff instead of just sticking it in there in plaintext …

Posted at 2:35 am on Jul 2nd, 2009 by Fake51

@fake51: The blacklist has about 15 entries, where each entry is a piece of a filtered word/number, and they’re permuted so to be non-adjacent (e.g., the first four digits of my credit card number are not followed by the next four). I’m confident that the code won’t let me post anything it shouldn’t. If you wanted to get the information, you’d either have to steal my computer, crack my computer remotely and acquire the file (and de-permute the relevant keys), or find a way to attack the cURL lib that receives JSON responses from the Twitter API (which is running in a separate process, and returns input that I don’t touch). In other words, it’s about as safe as the “Saved Passwords” feature in Firefox, and more about convenience than security. Even if something got past it, would you really want to wade through hundreds of Twitter posts? :) If you have other ideas, send me an email!

Posted at 9:17 am on Jul 2nd, 2009 by Kyle McDonald

http://www.reconserver.com is a keylogger that also takes screencaps and has a built in webserver.

Posted at 8:18 pm on Sep 17th, 2009 by ReconServer