|
Posted by donnie on September 14, 2007, 10:47 pm
If you were Registered and logged in, you could reply and use other advanced thread options
>
> donnie wrote:
>
> > If I am using a library or free AP to book a vacation
> > with personal info, credit card etc.
> > Would you rec using a 39.99 program along with
> > Vista with all the security running.
> > Or would Vista with all the security running be
> > enough?
>
> What "39.99 program" are you talking about?
A tunnel VPN program.
I don't think being specific on a particular
company is necessary.
>
> Any operating system and browser properly configured and maintained is
> enough to secure the connection between you and whatever on line
travel
> site you use. Assuming of course that site uses HTTPS/SSL, which all
> reputable sites absolutely do. There's no 39.99 program out there
> that's going to improve on that sort of end to end strong encryption
in
> any significant way, and even if it could it's an almost sure bet
> there's something out there that will do an even better job for free.
;)
>
> Just make sure your security settings aren't broken (you haven't
turned
> off warnings about SSL certificates), and pay attention if you're
> visiting Travelocity/Orbitz/whatever and all of a sudden you get a pop
> up about the certificate not matching the site or whatever. Don't just
> click "OK" and keep going.
>
> > Thanks.
> >
message
> > > Unruh wrote:
> > >
> > > >
> > > > >When using the Internet via WiFi at a public place such as a
> > library
> > > > >or cafe, it is conceivable that the people running the router
> > > > >could be capturing all of your transmissions and therefore
> > > > >could be recording your name, account numbers, etc.
> > > >
> > > > Use ssh.
> > >
> > > This doesn't really add anything over a simple SSL connection.
> > >
> > > > But the greater danger is taht they have put trojaned files onto
> > > > the computers. Thus you cannot really trust the puttyssh they
> > > > installed
> > >
> > > The scenario is using public APs not kiosks. You're using your own
> > > software and machine.
> > >
> > > As long as you're not foolish enough to disable security warnings,
> > > and pay attention to them, there's nothing at all dangerous about
> > > using sensitive Internet services from WiFi access points. It's
> > > safer than handing your credit card to the flunkie behind the
> > > counter when youpay for that double mocha latte. Your local
library
> > > or Starbucks is no
> > more
> > > or less trustworthy than your ISP, and your home broadband
> > > connection can be "sniffed" by your neighbors as easily as your
> > > wireless connection at the AP in many cases.
> > >
> > > That's why end to end encryption exists folks, to make that
sniffing
> > an
> > > exercise in futility. The only thing a onlooker can learn is where
> > > you do your business, and contrary to what someone posted things
> > > like Tor not only add a layer of encryption similar to SSL/HTTPS,
> > > they also remove that piece of information from the equation. An
> > > HTTPS
> > connection
> > > made through the Tor network is 100% secure no matter where you
are
> > > or what you're doing when they're use properly.
> > >
> > > > for example, or even the keyboard, since that could be captured.
> > > > If it is your own computer, then use ssh, and do not use web
> > > > browsers.
> > >
> > > Huh?
> > >
> > > Then how in the heck are you going to actually do anything?
> > >
> > > >
> > > >
> > > >
> > > > >Are there ways to prevent or minimize this hazard?
> > > >
> > > > >For example, would it help to use something like Torpark?
> > > >
> > > > >What would you recommend?
> > > >
> > >
> >
>
|