WebApp Sec: Re: keyloggers? - dont doit

[Kyle Maxwell <krmaxwell () gmail com>]

On Apr 6, 2005 7:23 AM, Alvin Oga
<alvin.sec () virtual linux-consulting com> wrote:
>         - anything sent over the internet is sniffable from
>         anywhere in the world
Delurking just to mention that this isn't correct. Online banking (and
other security-sensitive activities) aren't a good idea from shared
sites like a cybercafe for all the reasons others have mentioned, but
this isn't it. From my desktop here, I almost certainly have no way of
sniffing your traffic to your bank, unless I happen to be somewhere
along your path.

I'd also like to know about SSL being broken. I think you mean one of
the common ciphers is broken, which would be substantial news indeed.

Your conclusion is right but your reasoning is completely wrong AFAICT.

-- 
Kyle Maxwell
[krmaxwell () gmail com]