NetTeller Disable Virtual Keyboard · Jun 30, 10:17 by Shannon Wynter

Disables the virtual keyboard on several credit union net banking sites run by NetTeller (EG: QTCU)

I hate those virtual keyboards.

The bank says statistically less accounts get hacked into with virtual keyboards, statistically they may be right – perhaps simply because ‘evil’ people haven’t gotten around to using screen readers – or even simple hidden cameras.

Face it, on an LCD screen – a camera is all you need to read someone’s login, failing that VNC...

I work in a workplace with cameras so I’d rather NOT be using a method where people can follow my every move on screen.

Here is the outcome.

1. // ==UserScript==
2. // @name           QTCU Disable Virtual Keyboard
3. // @namespace      http://fremnet.net/  
4. // @description    Disables the virtual keyboard on QTCU
5. // @include        https://netteller*.tsw.com.au/*/ntv45.asp?*
6. // @include        https://netaccess*.qtcu.com.au/*/ntv45.asp?*  
7. // ==/UserScript==  
8. // Our callback for keypress  
9. function dokeypress(e) {  
10. if (e.which==0) return true;  
11. if (e.which==8) return true;  
12. if (e.which==13) return true;  
13. if (e.which==32) return true;  
14. key='`1234567890-=qwertyuiop[]\\asdfghjkl;\'zxcvbnm,./~!@#$%^&*()_+QWERTYUIOP{}|ASDFGHJKL:"ZXCVBNM<>?';  
15. n=key.indexOf(String.fromCharCode(e.which));  
16. e.target.value += unsafeWindow.skx.charAt(n);  
17. e.preventDefault();  
18. return false  
19. }  
20.   
21. // Eradicate the annoying functions from the page.  
22. unsafeWindow.kpinit = function() {}  
23. unsafeWindow.defocus = function () {}  
24. unsafeWindow.recallkp = function() {}  
25.   
26. // Use their own scripting against them  
27. ft = document.getElementsByTagName("INPUT");  
28. for (var i=0; i<ft.length; i++){  
29. if (ft[i].type.toLowerCase() == "password"){  
30.   // Clean it up...  
31.   if (window.location.href.match('wci=entry') && ft[i].name=='PWD') {  
32.   ft[1].parentNode.parentNode.parentNode.childNodes['2'].cells[0].innerHTML = 'Access Password:';  
33.   ft[1].parentNode.parentNode.parentNode.deleteRow(2);  
34.   }  
35.   ft[i].removeAttribute('onfocus');  
36.   ft[i].addEventListener('keypress',dokeypress,true);  
37. }  
38. }  
39.  
40. Download this code: qtcudisablevirtualkeyboa.user.js (Downloaded 179 time(s))

Comments

your_ip_is_blacklisted_by sbl.spamhaus.org