What you need to know to keep your online accounts safe
stavros.io
stavros.io
As for taking a screenshot - that wouldn't help either with something meaningful like a password. Not to mention that doing screenshots totally changes the dynamic of a "key logger" and exponentially raises the amount of storage needed and makes it even more difficult to glean useful data from it.
I think you're trying to stretch to make this countermeasure "easily defeated" when it really isn't.
Some of them require a little bit more of research by the user, but the advices are practical all of them.
Nowadays there are many more treats, entry points (hint: browser setup and plugins), and more authentication methods than "passwords".
We have even evidences of major upstream compromises.
In resume: for me the article is a little bit short in scope.
But that you cannot defend yourself of NSA, until you're in an enemy country or something like, does not mean, that you cannot protect yourself against all the rest of the world.
Using a master password, implies the clipboard (on average). Does anybody trust desktop browsing over linux, assuming that clipboard usage on Xorg is in some way safe? it's convenient, but not safe.
If I try to tell best-practices to a user of mine, I try to group all my experience and knowledge, before compile to user slang.
Even if for casual users, short in scope (for my personal taste).
And maybe too many prose, a more direct style maybe better to stamp on the user mind a list of best practices.
1) ...
:-)
If you want a more serious response, at least, talk to the user about attacks that remains exposed, and keywords to the solution, if I resume too much.