Re: First Time Wireless User

In article <BIyuf.9871$oW.484@xxxxxxxxxxxxxxxxxxxxxxxxxx>, "Jonathan L. Parker" <jlparker001@xxxxxxxxxxxxx> wrote:
>Rico wrote:
>> You know I've never been asked for my credit card number by a site that
>> wasn't using secure socket layer (https) that I would even remotely
>> consider giving the number to.
>
>Good for you, friend. Safe bet your parents didn't raise any dumb kids.
>
>>I'm curious could you tell me how you would
>> as network admin get my number out of a secure link? Same applies to my
>> online banking, always https before requesting my password.
>
>I've heard it can be done if the client computer isn't properly secured
>against intrusion-and remember that the sysadmin will have a leg up on
>breaking into the machine with knowledge of its IP address-but this may
>be the verbal equivalent of vaporware from hotspot operators seeking to
>protect themselves from liability for the misfortunes of patrons not as
>careful as you or me ("Lock icon? *What* lock icon?").
>
>Personally, I don't have any qualms about using SSL-encrypted pages over
>an open wireless link, as long as my firewall's running and I know and
>trust the owner of the network the AP's connected to.
>
>> I'm not arguing with your suggestion one be extremely cautious when
>> leeching Internet (bad idea), but I am wondering about all these ID thefts
>> you think are happening in public hotspots etc.
>
>I think the only way to be extremely cautious is *not* to leech
>Internet, especially if one is a newbie like the originator of this
>subthread, and therefore probably not taking all the steps needed to
>secure his or her machine (e. g., turn off file sharing, etc.). As far
>as the threat of ID thefts at public hotspots are concerned, well, there
>are all those dumb kids that other parents besides yours raised, along
>with the "evil twin" phenomenon-rogue access points set up to replicate
>the MAC address and SSID of legitimate ones, and then clandestinely
>positioned or sometimes illegally amplified so that their radiated power
>will swamp out that of the real McCoy. You and I probably wouldn't fall
>victim to one of these even if we logged onto it, but then again, we'd
>also be unlikely to fall for the Nigerian 419 scam either. Obviously a
>lot of other people would, because it's still going strong.

Wait a minute are you saying those emails from Nigeria are a scam and I
won't be getting my share of $100 Billion??!!?? But, I already sent them
the money, my ATM card and PIN.

fundamentalism, fundamentally wrong.
.

Relevant Pages

  • Re: A single page from an existing application under SSL?
    ... If you're using forms authentication over HTTP, ... cookie over HTTPS). ... Since credit card submission would take place after ... a certificate for the "secure" version of the site address, ...
    (microsoft.public.dotnet.security)
  • Re: First Time Wireless User
    ... wasn't using secure socket layer that I would even remotely consider giving the number to. ... as network admin get my number out of a secure link? ... Same applies to my online banking, always https before requesting my password. ... As far as the threat of ID thefts at public hotspots are concerned, well, there are all those dumb kids that other parents besides yours raised, along with the "evil twin" phenomenon-rogue access points set up to replicate the MAC address and SSID of legitimate ones, and then clandestinely positioned or sometimes illegally amplified so that their radiated power will swamp out that of the real McCoy. ...
    (alt.internet.wireless)
  • Re: Is this REALLY a secure site?
    ... >> How can anyone really know if an SSL or HTTPS connection is truly ... Even if it is theoretically secure ... major credit card company wound up making the authorization against my ... > site uses a numerical IP address: those are always bogus. ...
    (microsoft.public.windowsxp.general)
  • Re: Secure an upload page
    ... The most secure way to do downloads might be to use NTFS ... If the upload page ... I am using https ...
    (microsoft.public.inetserver.iis.security)
  • Re: At What Point Does the Security Begin?
    ... All secure forms examine this variable, and if empty redirect to the ... all pages behind the login are posted through SSL. ... in which I understand .NET uses a cookie behind ... not secure (it's called at http, not https) but posts to a page ...
    (microsoft.public.dotnet.security)