Tilted Forum Project Discussion Community - View Single Post - Is it safe to do online transactions over wifi?

aurigus · 08-02-2004, 09:47 AM

Mr Mephisto: Very well thought out and typed post; pretty much says what I was going to say but much, much better.

I would try to avoid using such information as credit card numbers and log in information in public hotspots. But, in a pinch they would work and very likely you would never have any problems with it.

If someone every audited how much public info is divulged in plain text over the network (wired or wireless) it would probably be a very scary thing. Even for me, and I'm knowledgable about proper security practices.

Just one example, you log into TFP over an insecure WiFi network. The username and login you use for TFP is the same as your email address. In your webmail account; a lot of private information is usually stored -- bank login information, insurance login information; etc.

I believe the rules that apply to real life apply online as well. If someone really wants to break into your home; they can check the door every night to see if it's left unlocked. Some night, you will probably leave it unlocked. The same with CC information. If someone wants to get it enough; they can probably get it. But society usually frowns upon that sort of thing; so the chances of it happening are pretty slim.

I actually had my first fraud charge the other week on my check card. No idea how they got the info; I'm pretty protective with this information. I don't think I ever went to the bank that fast after it happened. It was small (9.95) but still scares me that someone had that number.

Just one other piece of advice - Use the one-time-number generators that a lot of credit cards come with these days. My CitiCard account comes with a feature that you can generate a CC number for each purchase. I use this for any shady or small company websites I order from; likewise if I ever ordered froma HotSpot I would use this number generator as well.

08-02-2004, 09:47 AM	#6 (permalink)
aurigus Insane	Mr Mephisto: Very well thought out and typed post; pretty much says what I was going to say but much, much better. I would try to avoid using such information as credit card numbers and log in information in public hotspots. But, in a pinch they would work and very likely you would never have any problems with it. If someone every audited how much public info is divulged in plain text over the network (wired or wireless) it would probably be a very scary thing. Even for me, and I'm knowledgable about proper security practices. Just one example, you log into TFP over an insecure WiFi network. The username and login you use for TFP is the same as your email address. In your webmail account; a lot of private information is usually stored -- bank login information, insurance login information; etc. I believe the rules that apply to real life apply online as well. If someone really wants to break into your home; they can check the door every night to see if it's left unlocked. Some night, you will probably leave it unlocked. The same with CC information. If someone wants to get it enough; they can probably get it. But society usually frowns upon that sort of thing; so the chances of it happening are pretty slim. I actually had my first fraud charge the other week on my check card. No idea how they got the info; I'm pretty protective with this information. I don't think I ever went to the bank that fast after it happened. It was small (9.95) but still scares me that someone had that number. Just one other piece of advice - Use the one-time-number generators that a lot of credit cards come with these days. My CitiCard account comes with a feature that you can generate a CC number for each purchase. I use this for any shady or small company websites I order from; likewise if I ever ordered froma HotSpot I would use this number generator as well.