full-disclosure - Wireless ISPs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: geggam692000 at yahoo.com (D B)
Subject: Wireless ISPs

I'm not real sure how to post this, nor am I sure of
the scope. I am still learning about computers.

All transactions done via secure websites are secure,
however the auto mailing feature to confirm orders
sometimes contains sensitive data. When the customer
is on a wireless connection, be it ISP or home LAN
that data is broadcasted in the clear for anyone
within range to eavesdrop. A wired internet connection
limits the number of people who have access to this
data simply by the nature of the internet putting it
within acceptable risk.

It is legal according to US law to eavesdrop on
wireless connections. 

http://www.usdoj.gov/criminal/cybercrime/wiretap2510_2522.htm

The only solutions I can offer are one of two things. 

1. Quit sending auto confirmations with sensitive data

2. Encrypt all wireless transmissions at least making
someone who gains access to this data prosecutable. 

Please direct all flames to /dev/null

Dan Becker

__________________________________
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs  
http://hotjobs.sweepstakes.yahoo.com/careermakeover