lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <200405120024.58626.fulldisc@ultratux.org>
From: fulldisc at ultratux.org (Maarten)
Subject: Wireless ISPs

On Tuesday 11 May 2004 21:20, D B wrote:
> Hi Brian
>
> Sit down sometime inside a wireless ISPs area and run
> kismet. You can see someone connect to a service via
> SSL, then immediately after they purchase something
> they check the email. Guess what ? the Credit card #
> and address are in that email.

I've never ever seen that, the full creditcard number. What often happens 
though, is that they print something like 3211.xxxx.xxxx.xxxx. 
Maybe that is bad already, but I doubt it. Even having 8 of the total 16 
digits leaves a lot to be guessed still...

> > Dan, the internet is an unsafe place for sensitive
> > data.  I would suggest some study in different
> > encryption methodlogies to educate yourself.
> > Education leads to positive, well thought out data
> > communication, which leads to peace of mind.

Well put.

Maarten


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ