Does an running client weaken security?

[achim]

I have a really long and strong password for the NXT client. What possibilities does a hacker have to still steal my coins?

If he managed to have a keylogger running on my machine, he could probably read my password, ut that would also be possible with the bitcoin client.

What happens if I leave the client open for mining? If he gained control over my machine, he wouldn't even have to enter a password to do a transaction, right?

I'm sure the devs thought this through, so what didn't I get? Or is the second scenario improbable anyway?

[Come-from-Beyond]

If u webpage is closed then only scanning java process memory can retrieve ur passphrase. For rootkits this is not a problem at all.

[opticalc]

If u webpage is closed then only scanning java process memory can retrieve ur passphrase. For rootkits this is not a problem at all.

unless the rootkit has a keylogger

[Come-from-Beyond]

Rootkits live in ring 0, they have access to the whole memory, no need to log keypresses.

[opticalc]

Rootkits live in ring 0, they have access to the whole memory, no need to log keypresses.

sorry, i misread the intent of your previous message