I don't think it's even true that keyloggers are any harder to write on say Windows. The only thing they can't trivially get hold of is your password for the machine itself. (Of course, if you write a naive keylogger you're going to get caught by any AV software worth its salt.)
I don't think it's even true that keyloggers are any harder to write on say Windows.
This is false. Windows has a mechanism since Vista (UIPI) that provide some UI isolation (lower privilege processes can e.g. not listen to keystrokes on higher privilege processes):
E.g. web browsers normally run at the 'low' integrity level and cannot eavesdrop on other processes (which are normally at the 'medium' level). It would be nice if someone with knowledge Windows internals could explain UIPI a bit more, I gathered this knowledge a while ago due to being interested in the topic :).
Of course, if users just accept anything at UAC prompts, everything is lost ;).
