News

  • Home > News

        Protecting Windows-based kiosks from user tampering

        Jonathan | Date: Jul 30, 2007 | Comments: 1



        A post on the Windows XP Embedded team blog describes how to prevent Windows XP Embedded-based kiosks from being tampered with. As Jim Medding, a software developer for the test team, notes, a security problem can result from the use of StickyKeys, a feature intended to help users with disabilities.





        (Click for larger view; source: Microsoft)

        StickyKeys allows users to generate Shift, Ctrl, and Alt modifiers without having to press two keys on a keyboard at once.

        "One way to enable (and disable) StickyKeys is via the shortcut of pressing the Shift key five times," writes Medding. However, it also gives users "access to the Start menu which is not necessarily a good thing."

        Once at the Start menu, the user can potentially run unauthorized programs or shut down the kiosk. Therefore, to eliminate this potential security problem, Medding's post discusses how to turn off the Shift-key shortcut for StickyKeys by changing an entry in Windows XP Embedded's registry.

        Of course, as Medding points out, people with disabilities also need to use kiosks, so another method of enabling StickyKeys should be provided.

        To read Medding's entire blog post, go here. Further information about StickyKeys is available on Microsoft's website, here.



        Related stories: