a website can serve you a keylogger client and no one will ever know most likely, harder to do with binaries/sources