Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



WebApp Sec: Re: keyloggers? - dont doit

Re: keyloggers? - dont doit

From: Alvin Oga <alvin.sec_at_Virtual.Linux-Consulting.com>
Date: Wed, 6 Apr 2005 05:23:23 -0700 (PDT)

hi ya

> You've asked for best practice when accessing your online bank from an
> Internet Cafe ? Here it is:
> Don't.

dont do it .. even if it is using https .. ssl can be broken
        - anything sent over the internet is sniffable from
        anywhere in the world

        - even if its your own laptop at the cafe, you do not
        know what other spyware and sniffing hardware toys they
        have on their network

        touch screens and usb will not help, as the end result
        is still sent the same ole fashion way on the ethernet cables

- but if yu dont like to be told/recommended, don't do it,
  please try it and see how long it takes before someone
  empties your bank acct

c ya
alvin
Received on Apr 06 2005

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]