Computer security question.

[Hassin Bin Sober]

I have a friend who recommends creating a Word Doc for credit card information.

He creates the Doc by copying and pasting numbers from a list 1-9. From there, he copies and pastes the number in to a box where the number is required.

The idea is to create and paste the Doc by never using the keys on the keyboard.

The goal is to defeat key-logging virus/mal-ware.

As I type this, I'm not sure if he saves the CC info or discards it without saving it. Obviously, saving the info on a Doc has its own risks but it seems the bigger risk is a key-logger virus (versus a full on hack).

Does this make sense?

What do the DU experts think? Dummies, like me, are welcome to chime in too!

The reason I ask is I just received a new debit/atm card and the bank is requiring me to re-enter EVERYTHING including PIN to access on-line banking. I've had to do this before as I seem to lose a card about once a year. The bank's website is known to me (this isn't a fishing scam as I did, in fact, lose a card and received a new card).

My partner has had his info stolen a few times in the last several years. We both do online banking. The only variable between the two of us is he does banking on his phone. AND he plays World of Warcraft on his computer - I always assumed WoW is the culprit.

[Xipe Totec]

1. Computer Security is an Oxymoron

Anybody who's installed key-logging mal-ware on your computer has already scanned your hard drive for credit card information and passwords.

[Ohio Joe]

2. Well...

In theory that would defeat a key-logger... If you do not have a key-logger on your PC when you make the document. The problem with this method is that you now have a handy dandy document with all of your credit card information ripe for the taking if someone does get into your PC. I'm not certain why you think the key-logger is the bigger issue vs a virus/malware or someone gaining access... I think if you use good anti-virus (I like avast) and malware protection (I use malwarebytes), you will be safer. The big thing in my mind is... Always keeping safety in mind.

As to gaming being a culprit... It could be. Far to many gamers like to cheat and will download anything that they think might help them. Often what they download is a virus/malware, so that could be his issue. Online gaming in and of itself is safe (there have been cases of malware coming installed on game disks but that applies to business software as well and these cases were done not by the company making the product by but crooks along the path to distribution), it's the use of third party software for gaming that is often dangerous.

[Hassin Bin Sober]

5. Shows you how much I know.

[Ohio Joe]

6. oh... And keep java script turned off as much as you can...

It is a pain on some sites if you do not have it enabled but it is so freakin full of holes it's not even funny.

[Warren Stupidity]

3. there are good free "password safe" applications that do all this right.

They keep the data encrypted, for example. By the way the cut'n'paste buffer is an easy target for malware, for example, so focusing on a keylogger is insufficient.

pwsafe is one example of a good password/data encrypted database app, plus it is free on pcs and phones (and not free on Mac, WTF?).

[Hassin Bin Sober]

4. Thanks!

[PowerToThePeople]

7. most secure solution imo

Use a Linux live distro on read only media like a dvd-r. You can boot this up anytime you want to do banking or make purchases online. Use your normal install for regular (non-financial) uses.

(I am not an internet security expert)