How can I be sure my actions aren't being logged on this computer I'm using?

I hate to burst your bubble, but you can’t.

Things are bad enough on your own computer, where you have some
semblance of control, but when you use someone else’s computer –
especially a public computer – all bets are off.

]]>
<![CDATA[

The only way to really, truly know that a computer is exactly what you think it is, and nothing more, is to control that computer completely.

As we’ve seen with spyware and other forms of malware, even when the computer is our own, that’s not always possible to achieve. Each time you open an attachment, or even install a program or operating system, you’re placing some amount of trust in whomever provided that software. In a sense, you’ve giving up a little bit of your control.

The same actually applies to hardware, though it’s less vulnerable in general, since physical access would be required to do something to it that you didn’t authorize.

When you consider public computers, as I said, all bets are off for both software and hardware. You have no control, and in fact no idea what has, or has not been installed on that computer. It might very well have keyloggers installed recording every keystroke and mouse movement you make, along with corresponding screenshots to fully detail exactly what you’ve been doing.

When we think of keyloggers we instantly think of spyware, but that needn’t be the case. It’s also quite possible that monitoring software has been installed on purpose by the computer’s owner. They might do a great job of keeping the computer malware free – and yet install parental control or other monitoring software to keep track of how the computer is being used.

I heard a recommendation the other day that you perhaps have and use a Linux Live CD and boot the system (if you can) from that CD instead of running whatever is installed. The premise is that this then replaces all the software you don’t know with software that you control; the software on the live CD.

The problem with this is that it’s not always just about the software. There are, in fact, hardware keyloggers out there. Installed somewhere perhaps in the keyboard plug, or even inside the computer itself, these devices are software independent, and can still capture the keystrokes you type. They might be installed maliciously, or once again, by the computer’s owner.

If it’s not your computer, you just don’t know.

Now, I don’t want to come out sounding all paranoid, because honestly I’m not. Most public computers are probably just fine, as far as they go. Depending on how they’ve been set up and maintained it’s quite possible that they’re perfectly safe to use for certain types of activity. I definitely wouldn’t go checking my bank accounts on a public computer, but I’d feel fairly safe benignly surfing the web or maybe accessing one of my throw-away free email accounts.

The bottom line problem is simply that you don’t know what’s on someone else’s computer. And there’s no way to know. Not for certain.