Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: what is the safest online connection? Cable line or dial-up?  (Read 10843 times)

0 Members and 1 Guest are viewing this topic.

Vonique

    Topic Starter


    Rookie

    what is the safest online connection? Cable line or dial-up?
    « on: January 09, 2009, 04:25:14 AM »
    Hello. I recently started doing online banking and I'm worried about security. I have a cable high-speed but also have another computer with dial-up. I was told once that the dial-up is safer because it's going through a phone line so I'm reluctant to get rid of it and start using the high-speed. Which is the safest method of connection to avoid hackers?

    Thanks, Von

    BC_Programmer


      Mastermind
    • Typing is no substitute for thinking.
    • Thanked: 1140
      • Yes
      • Yes
      • BC-Programming.com
    • Certifications: List
    • Computer: Specs
    • Experience: Beginner
    • OS: Windows 11
    Re: what is the safest online connection? Cable line or dial-up?
    « Reply #1 on: January 09, 2009, 05:24:23 AM »
    Dial-up is considered safer simply because everytime you connect, the ISP gives you another IP address. So, imagining that a Hacker that wanted to break into your computer was like a stalker, it's a lot easier to find you when your staying in one place rather then moving to a new house every week ;)

    With proper security and Ant-Virus software, however, such things become a non-issue. What Anti-Virus software have you installed?
    I was trying to dereference Null Pointers before it was cool.

    soybean



      Genius
    • The first soybean ever to learn the computer.
    • Thanked: 469
    • Computer: Specs
    • Experience: Experienced
    • OS: Windows 10
    Re: what is the safest online connection? Cable line or dial-up?
    « Reply #2 on: January 09, 2009, 09:26:09 AM »
    Are you paying for two Internet services?  When I was using Earthlink as my ISP, I could connect either via DSL or dialup to my Earthlink account.  In such a case, you could use dialup for banking if you want, but I would not pay for a separate dialup service just for banking. 

    As BC_Programmer said, with proper security measures, you should not worry.  That includes a firewall, of course,  You should have at least SP2 if using Win XP, and keep your browser updated also.  If you're using IE 6, i suggest you upgrade to IE7, or the latest version of Firefox.   

    michaewlewis



      Intermediate
    • Thanked: 26
      • Yes
      • Yes
    • Experience: Expert
    • OS: Unknown
    Re: what is the safest online connection? Cable line or dial-up?
    « Reply #3 on: January 09, 2009, 12:21:21 PM »
    the safest internet connection is SSL. When you're doing your online banking make sure that there is an https in front of the web address instead of just an http, and you'll be fine. You can also check the certificates on secure web pages to make sure they're safe.
    If a website is using SSL, that means all data is being encrypted, and third parties cannot view your data enroute.
    Also, make sure you have your virus definitions up to date to make sure you have no malware installed on your computer that can track personal information entered on a website.

    BC_Programmer


      Mastermind
    • Typing is no substitute for thinking.
    • Thanked: 1140
      • Yes
      • Yes
      • BC-Programming.com
    • Certifications: List
    • Computer: Specs
    • Experience: Beginner
    • OS: Windows 11
    Re: what is the safest online connection? Cable line or dial-up?
    « Reply #4 on: January 09, 2009, 01:15:28 PM »
    SSL isn't a Connection Method, it's "Secure Sockets layer", and is implemented by web servers.

    One would still need to have a Internet Connection provided by Dial-up, ISDN, Cable, or DSL etc.

    EDIT: although it is important to note, since any reputable vendor will use SSL.
    « Last Edit: January 09, 2009, 01:35:15 PM by BC_Programmer »
    I was trying to dereference Null Pointers before it was cool.

    soybean



      Genius
    • The first soybean ever to learn the computer.
    • Thanked: 469
    • Computer: Specs
    • Experience: Experienced
    • OS: Windows 10
    Re: what is the safest online connection? Cable line or dial-up?
    « Reply #5 on: January 09, 2009, 01:33:23 PM »
    the safest internet connection is SSL. When you're doing your online banking make sure that there is an https in front of the web address instead of just an http, and you'll be fine. You can also check the certificates on secure web pages to make sure they're safe.
    If a website is using SSL, that means all data is being encrypted, and third parties cannot view your data enroute.
    Good point.  Internet users should know how to recognize when their web browser is in secure mode, i.e. using SSL.  All financial transactions on the Web, whether banking, credit cards, investments (stocks, mutual funds, etc.), and all online buying activity should only be done with SSL enabled-websites, as indicated by https vs. http, and the lock icon in the lower right corner of the browser being in locked mode.

    patio

    • Moderator


    • Genius
    • Maud' Dib
    • Thanked: 1769
      • Yes
    • Experience: Beginner
    • OS: Windows 7
    Re: what is the safest online connection? Cable line or dial-up?
    « Reply #6 on: January 09, 2009, 01:38:44 PM »
    The safest is unplugged unfortunately...any type of connection can be hacked.
    However if you practice safe surfing and common sense along with a decent software firewall and a router you have nothing to worry about.
    " Anyone who goes to a psychiatrist should have his head examined. "

    michaewlewis



      Intermediate
    • Thanked: 26
      • Yes
      • Yes
    • Experience: Expert
    • OS: Unknown
    Re: what is the safest online connection? Cable line or dial-up?
    « Reply #7 on: January 09, 2009, 01:38:52 PM »
    I stand corrected. What I meant was that dialup vs broadband is sort of irrevelent, since either can be hacked fairly easily and are both relatively insecure. However, when using a website using SSL, you don't have to worry about the data being read, diverted or tracked. (assuming there is no spyware on the computer itself)
    I would even feel comfortable doing online banking via SSL on a public network as long as I'm using my own laptop and don't have to install any software to use the network.

    Geek-9pm


      Mastermind
    • Geek After Dark
    • Thanked: 1026
      • Gekk9pm bnlog
    • Certifications: List
    • Computer: Specs
    • Experience: Expert
    • OS: Windows 10
    Re: what is the safest online connection? Cable line or dial-up?
    « Reply #8 on: January 09, 2009, 01:52:40 PM »
    Quote
    what is the safest online connection? Cable line or dial-up?
    No right answer. The question has a wrong presumption.
    Internet security has never been an issue of how you get into your local server.
    That is like asking is it safer to walk alone in a dark hostile war zone using tennis shoes or regular boots.  :P


    Vonique

      Topic Starter


      Rookie

      Re: what is the safest online connection? Cable line or dial-up?
      « Reply #9 on: January 09, 2009, 03:17:50 PM »
      I am using CA Internet Security Suite because it is free with my ISP. I'm just concerned because I keep hearing about identity theft and "war driving" by hackers who may be able to break into my wireless home network. I am using a Linksys network adaptor with WEP encryption which I know is no good, but I don't know what else to use.

      Regarding:

        "However if you practice safe surfing and common sense along with a decent software firewall and a router you have nothing to worry about."

         I  try to practice safe surfing and common sense, do have a firewall and router, but  if the above is true, then why are all these folks getting hacked and suffering from identity theft and all the associated troubles? I know there are other ways to get your identity stolen, but I would love to know how common it is for a wireless network to get broken into and had bank numbers stolen, etc.

      Thanks, Von

      soybean



        Genius
      • The first soybean ever to learn the computer.
      • Thanked: 469
      • Computer: Specs
      • Experience: Experienced
      • OS: Windows 10
      Re: what is the safest online connection? Cable line or dial-up?
      « Reply #10 on: January 09, 2009, 03:44:14 PM »
      Have you tried setting up WPA security for your wireless connection?

      Vonique

        Topic Starter


        Rookie

        Re: what is the safest online connection? Cable line or dial-up?
        « Reply #11 on: January 09, 2009, 05:50:49 PM »
        How do I do that? Is it difficult?


        Geek-9pm


          Mastermind
        • Geek After Dark
        • Thanked: 1026
          • Gekk9pm bnlog
        • Certifications: List
        • Computer: Specs
        • Experience: Expert
        • OS: Windows 10
        Re: what is the safest online connection? Cable line or dial-up?
        « Reply #12 on: January 09, 2009, 06:23:27 PM »
        Quote
        "However if you practice safe surfing and common sense along with a decent software firewall and a router you have nothing to worry about."
        That is wrong!
        Some Greek philosopher once said:
        "All general statements are false,
        including this one."


        soybean



          Genius
        • The first soybean ever to learn the computer.
        • Thanked: 469
        • Computer: Specs
        • Experience: Experienced
        • OS: Windows 10
        Re: what is the safest online connection? Cable line or dial-up?
        « Reply #13 on: January 09, 2009, 06:26:34 PM »
        How do I do that? Is it difficult?
        You have a wireless router, right?  What model is it?

        soybean



          Genius
        • The first soybean ever to learn the computer.
        • Thanked: 469
        • Computer: Specs
        • Experience: Experienced
        • OS: Windows 10
        Re: what is the safest online connection? Cable line or dial-up?
        « Reply #14 on: January 09, 2009, 06:28:22 PM »
        Quote
        "However if you practice safe surfing and common sense along with a decent software firewall and a router you have nothing to worry about."
        That is wrong!

        Elaborate, please.  If you think it's wrong, state why.

        Vonique

          Topic Starter


          Rookie

          Re: what is the safest online connection? Cable line or dial-up?
          « Reply #15 on: January 09, 2009, 06:52:22 PM »
          I have a Linksys Wireless-G router.

          patio

          • Moderator


          • Genius
          • Maud' Dib
          • Thanked: 1769
            • Yes
          • Experience: Beginner
          • OS: Windows 7
          Re: what is the safest online connection? Cable line or dial-up?
          « Reply #16 on: January 09, 2009, 06:59:20 PM »
          I think the Philosopher got it right if you think about it...
          " Anyone who goes to a psychiatrist should have his head examined. "

          soybean



            Genius
          • The first soybean ever to learn the computer.
          • Thanked: 469
          • Computer: Specs
          • Experience: Experienced
          • OS: Windows 10
          Re: what is the safest online connection? Cable line or dial-up?
          « Reply #17 on: January 09, 2009, 07:02:39 PM »

          BC_Programmer


            Mastermind
          • Typing is no substitute for thinking.
          • Thanked: 1140
            • Yes
            • Yes
            • BC-Programming.com
          • Certifications: List
          • Computer: Specs
          • Experience: Beginner
          • OS: Windows 11
          Re: what is the safest online connection? Cable line or dial-up?
          « Reply #18 on: January 09, 2009, 07:03:19 PM »
          unsafe surfing and lack of common sense almost always overcome even the best security solutions.
          I was trying to dereference Null Pointers before it was cool.

          Geek-9pm


            Mastermind
          • Geek After Dark
          • Thanked: 1026
            • Gekk9pm bnlog
          • Certifications: List
          • Computer: Specs
          • Experience: Expert
          • OS: Windows 10
          Re: what is the safest online connection? Cable line or dial-up?
          « Reply #19 on: January 09, 2009, 09:07:05 PM »
          Quote
          Elaborate, please.  If you think it's wrong, state why
          I thought I did that. It is a very broad coverage of a major issue with a few platitudes. Firewall, anti-virus, common sense are all important. But you can not sya "nothing to worry about", as if the danger would be so much less. ANs "safe Surging"? What is "safe Surging"? Is that like "Safe Sex"? Nothing to worry about? Do you tell your children "practice safe sex and you will have nothing to worry about."

          Just one majhor example. DNS Spoof.
          Many have tried hard to tell people about the DNS danger. The IT poeple would just shrug it off  thinking that you will have a warning before it happens. That is like not locking your house at night because your cat will meow as soon as a thief tries the door and you will have time to call 911.
          So we start getting reports from people saying that Google was hijacking. But there was nothing wrong with Google. Their PCs got hijacked.{Don't ask me for the sources, it was in all the IT rags  and is even in the mass-media.} People don't pay attention because they "had a firewall, and anti-virus and use common sense." It is "common sense" that makes people put there house key under the door mat?
          Pardon me for using trivial illustrations. It is much more serious that a thief in you house. This wicked erosion of open communication can undercut the all trust and confidence still left in the world. It can get to the point where you will not ever even know what happened to you.
          Yes,this sounds like a rant. And it is. People are just too complacent. Me too. It is hard to believe it could happen to me. But I have already ad to close one back account, drop one credit card and change the account number on another. And this was related to Internet fraud. My banker told me to close the account, but didn't offer any idea of how to get my money back. The credit cards companies did better, they did give me a refund on part of the fake charges. And these were things that had nothing to to with conventional security measure. These crooks had real, legal SSL and all that stuff. Did not stop them form stealing.
          There is now a large Black Market for tools to defraud people with on-line business of any kind. The organized crime people will sell you proven kits and tools to crack security, get fake SSL, spoof major companies, mislead, deceive, cheat and steal and stay out of jail.

          Take a guess at  how much stuff the very best anti-virus software can find?

          OK, lets make it like a game.

          The is a mine filed the size of a football filed. you have to walk all the way across. you have a mine detector that can detect mines. There are over 400 mines you might step on if you walked a random path across the filed. But your mine detector can warn you and give you an alert. Now then, what level of error would you allow for the mine detector and think that there is "nothing to worry about?" And lest say that you have body armor that will protect most of your body. So one or two hist is allowable. Maybe. OK?  Now what do you want the mine detector to do? What does "common sense" now tell you? 
          Of the 400, or maybe up to 600 mines that you might step on, how many shall the mine detector find? (int, it is not enough for the detector to find mines that you could uncover with just a sharp stick. It has to find the ones you don't know are there.) Pick a number from 100 to 600.  Of course, on average, you would only hit 400. But with a lot of blind luck, just 100. But 600 is the max if you went in a mostly straight line across the filed.
          On my nest post I will give the answer based on the performance level of best bet possible anti-virus software available to the public. And I will give the reference from an authority source. (If anybody cares..) :(


          BC_Programmer


            Mastermind
          • Typing is no substitute for thinking.
          • Thanked: 1140
            • Yes
            • Yes
            • BC-Programming.com
          • Certifications: List
          • Computer: Specs
          • Experience: Beginner
          • OS: Windows 11
          Re: what is the safest online connection? Cable line or dial-up?
          « Reply #20 on: January 09, 2009, 09:23:49 PM »
          not to shamble our metaphor, but a mine detector is just a metal detector. all mines have metal and metal detectors always detect metal.



          basically geek, your saying they should be absolutely paranoid about everything they do anywhere on the internet? If somebody asks their real name, or Date of birth, they should cower in a corner and sob quietly?

          "DNS Spoof" is a form of malware. It infects the computer through the most common vector, as you say, "the carbon based unit".

          This is the common sense /safe surfing.

          Take my search for a particular wireless driver for my laptop. in my search I encountered many sites high up on the rankings, and most of them ended up downloading a 20KB executable for a driver I KNOW should be at LEAST 10MB.

          Running that installer in SandboxIE, I discovered it installed 2 dll's in the System32 directory, added a SVCHOST spoof in system32 with invalid characters in it's name, and then displayed a generic setup error.

          There were MILLIONS of red flags on the site, which piqued my curiousity as to the validity of the site. Mainly the insistence that I install "PC WIZARD" or some driver detective program, by placing links to them high up on the page, forcing me to scroll down to find the "real" download, which was a trojan.

          Trojan software is the most popular attack vector because it is the most successful. Security software helps, but it is only a part of the solution. careful searching and user discretion when downloading foreign executables is the best way to avoid infection, or the secret installation of keyloggers and the like that would be used to steal personal data.


          by "nothing to worry about" I believe he pretty much meant, "nothing you should lose sleep over".
          I was trying to dereference Null Pointers before it was cool.

          Vonique

            Topic Starter


            Rookie

            Re: what is the safest online connection? Cable line or dial-up?
            « Reply #21 on: January 10, 2009, 07:11:43 AM »
            On second thought, geek, maybe I should just go to the bank. Whew!

            Thanks, Von

            Vonique

              Topic Starter


              Rookie

              Re: what is the safest online connection? Cable line or dial-up?
              « Reply #22 on: January 10, 2009, 07:14:45 AM »
              I meant to add, thank you to soybean. I will check that reference as soon as I get over the paranoia I have developed since geek's post.

              Thank you, Von

              Geek-9pm


                Mastermind
              • Geek After Dark
              • Thanked: 1026
                • Gekk9pm bnlog
              • Certifications: List
              • Computer: Specs
              • Experience: Expert
              • OS: Windows 10
              Re: what is the safest online connection? Cable line or dial-up?
              « Reply #23 on: January 10, 2009, 10:19:36 AM »
              Quote
              "DNS Spoof" is a form of malware. It infects the computer through the most common vector, as you say, "the carbon based unit".
              Sorry, My Bad.
              I meant to say DNS Attack, which is hard to detect.
              Even Google does not understand Do 'DNS' and it trys 'DOS of DNS' and gives you another issue. Not the same thing. The precise term is now "Major DNS attack". That means it is just just you, but all the people ib the same ISP are viewing absolute bogus HTML pages at the same period of time that could last a minute or more.
              Sorry I slipped on the terminology. This is an attack on the DNS cache of the server and can not be detected by the corbon-based unit unless he is very wise and has amazing instincts. (He appears to others as paranoid.) This was reported in the mass-media becasue there was such a person who remembered that earlier the Google logo was different and that Google does not change the logo in the daytime. Or something to that effect. It as a sharp eye person who saw it and if was found out. Other times that sort of thing is under reported and there is no way of knowing how much money was made by organized crime. Unless they put it on there tax returns.
              Pardon me. I have hijacked this thread. The original issue of connection speed or PPP method has small bearing on the new context here.

              patio

              • Moderator


              • Genius
              • Maud' Dib
              • Thanked: 1769
                • Yes
              • Experience: Beginner
              • OS: Windows 7
              Re: what is the safest online connection? Cable line or dial-up?
              « Reply #24 on: January 10, 2009, 12:22:26 PM »
              And since you've successfully scared the OP into walking to the bank you may want to give a few suggestions on how secure sites can be managed without issues...
              " Anyone who goes to a psychiatrist should have his head examined. "

              BC_Programmer


                Mastermind
              • Typing is no substitute for thinking.
              • Thanked: 1140
                • Yes
                • Yes
                • BC-Programming.com
              • Certifications: List
              • Computer: Specs
              • Experience: Beginner
              • OS: Windows 11
              Re: what is the safest online connection? Cable line or dial-up?
              « Reply #25 on: January 10, 2009, 12:30:45 PM »
              there is no reason to be paranoid that another party knows what your google-searching, unless of course it is questionable material.

              and no DNS attack will have proper Certificates. It's a completely different IP address being provided by the compromised DNS, but there is no way any certification establishment (verisign, etc) is going to provide it with the exact same credentials as the site it would be trying to emulate. As such, SSL would be out of the question, which means the original suggestion to make sure the sites are using SSL is still 100% valid.
              I was trying to dereference Null Pointers before it was cool.

              patio

              • Moderator


              • Genius
              • Maud' Dib
              • Thanked: 1769
                • Yes
              • Experience: Beginner
              • OS: Windows 7
              Re: what is the safest online connection? Cable line or dial-up?
              « Reply #26 on: January 10, 2009, 12:37:47 PM »
              I guess those details were unimportant in his mini rant on how unsafe the web is.
              " Anyone who goes to a psychiatrist should have his head examined. "

              Vonique

                Topic Starter


                Rookie

                Re: what is the safest online connection? Cable line or dial-up?
                « Reply #27 on: January 10, 2009, 01:38:43 PM »
                I'm not really going to walk to the bank. But I would like to find the safest way to do online banking transactions. It wasn't really geek that got me paranoid. I'm paranoid by nature when it comes to that stuff because I'm a widow and single parent of three small kids and I can't take any chances when it comes to my small nest egg. I hear some awful stories about hackers wiping out bank accounts. It makes me shudder. I've already lost my job and have to protect what I have left until I get another one.

                Thanks everyone who responded. Some really interesting posts going on.

                Von

                patio

                • Moderator


                • Genius
                • Maud' Dib
                • Thanked: 1769
                  • Yes
                • Experience: Beginner
                • OS: Windows 7
                Re: what is the safest online connection? Cable line or dial-up?
                « Reply #28 on: January 10, 2009, 01:50:43 PM »
                A Good Read

                This will get you started on what can be done and there are other precautions to take as well...
                More later.
                " Anyone who goes to a psychiatrist should have his head examined. "

                Geek-9pm


                  Mastermind
                • Geek After Dark
                • Thanked: 1026
                  • Gekk9pm bnlog
                • Certifications: List
                • Computer: Specs
                • Experience: Expert
                • OS: Windows 10
                Re: what is the safest online connection? Cable line or dial-up?
                « Reply #29 on: January 10, 2009, 05:17:55 PM »
                Quote
                and no DNS attack will have proper Certificates. It's a completely different IP address being provided by the compromised
                This is not clear and can be misleading. DNS, IP and SSL are each a topic for discussion. Can somebody explain this to him?



                BC_Programmer


                  Mastermind
                • Typing is no substitute for thinking.
                • Thanked: 1140
                  • Yes
                  • Yes
                  • BC-Programming.com
                • Certifications: List
                • Computer: Specs
                • Experience: Beginner
                • OS: Windows 11
                Re: what is the safest online connection? Cable line or dial-up?
                « Reply #30 on: January 10, 2009, 05:26:57 PM »
                Quote
                and no DNS attack will have proper Certificates. It's a completely different IP address being provided by the compromised
                This is not clear and can be misleading. DNS, IP and SSL are each a topic for discussion. Can somebody explain this to him?




                Sorry my grammar didn't meet your strict standards.

                DNS converts a NAME into an IP address. a "DNS attack" would change the IP address being returned when doing a name lookup for an IP address.


                HOWEVER: this "fake" site will NOT have the SAME SSL certificate as the real site whose  IP address would have been given via a non-hijacked DNS. Almost all browsers display an alert; any "safe surfer" will NOT give such a web-site personal information.


                You cannot talk about a Domain-Name server without talking about IPs, and you cannot talk about SSL without talking about domain name servers.
                I was trying to dereference Null Pointers before it was cool.

                Geek-9pm


                  Mastermind
                • Geek After Dark
                • Thanked: 1026
                  • Gekk9pm bnlog
                • Certifications: List
                • Computer: Specs
                • Experience: Expert
                • OS: Windows 10
                Re: what is the safest online connection? Cable line or dial-up?
                « Reply #31 on: January 10, 2009, 07:20:16 PM »
                Quote
                You cannot talk about a Domain-Name server without talking about IPs, and you cannot talk about SSL without talking about domain name servers.
                Wrong again! One step at a time.
                First learn what DNS is, then we can talk about SSL.

                Look at the address line on this forum. On mine ist says:
                Quote
                http://www.computerhope.com/forum/index.php?action=post;topic=74139.30;num_replies=30
                When I do a trace I get:
                Code: [Select]
                TraceRoute to 69.72.169.241 [computerhope.com]
                I have no way to verify this with SSL with my browser. The connection I had with this server was not SSL. Now he may have verified the information with SSL, but I have to take his word for it. So SSL does not here offer me proof of the validity, trust, safety and accuracy of the information. Nor was I given the choice of a SSL verification. Yet  I believe that the IP address given is that of Computer Hope, because further checking shows that is from the registered name server for computerhope.com and there was no use of SSL o my part to confirm this information.Do you think I should use SSL here just to be sure? Could be a scam! Maybe this is not computerhipe.com and maybe you are not the person who I am talking to because I did not use SSL. Oh My! No SSL! what shall we do!  :o
                Look here:
                Quote
                Retrieving DNS records for computerhope.com...

                DNS servers
                ns2.mrhope.com [69.72.169.242]
                ns1.mrhope.com [69.72.169.241]

                Answer records
                computerhope.com   1   MX   
                preference:   0
                exchange:   computerhope.com
                   14400s
                computerhope.com   1   SOA   
                server:   ns1.mrhope.com
                email:   [email protected]
                serial:   2008110502
                refresh:   86400
                retry:   7200
                expire:   3600000
                minimum ttl:   86400
                   86400s
                computerhope.com   1   NS   ns2.mrhope.com   86400s
                computerhope.com   1   NS   ns1.mrhope.com   86400s
                computerhope.com   1   A   69.72.169.241   14400s

                Authority records

                Additional records
                computerhope.com   1   A   69.72.169.241   14400s
                ns1.mrhope.com   1   A   69.72.169.241   14400s
                ns2.mrhope.com   1   A   69.72.169.242   14400s
                Still no mention of SSL at this level. And no need for it.  Yes, SSL is important and something we can talk about. Bt not together. Unless talking about them tailgater is the topic.  I was talking about "Major DNS Attack" which is not prevented, in whole or in part, by SSL certificates. Now it may be that someday we might have to do all communication with SSL. It might come to that. At the present time, to suggest that we need SLL for all web surfing is paranoiac carping . To say that all DNS is covered by SSL is just not true.
                DNS is not SSL, and SSL is not DNS. Ay least not yet.

                BC_Programmer


                  Mastermind
                • Typing is no substitute for thinking.
                • Thanked: 1140
                  • Yes
                  • Yes
                  • BC-Programming.com
                • Certifications: List
                • Computer: Specs
                • Experience: Beginner
                • OS: Windows 11
                Re: what is the safest online connection? Cable line or dial-up?
                « Reply #32 on: January 10, 2009, 08:28:37 PM »
                TCP/IP can only connect to an IP address.

                a Domain Name Server converts a more human-readable symbol (URL) into the corresponding IP address.

                there are two DNS hijack methods. One on the client, which simply changes the HOSTS file so that attempts to connect to the intended target site (say, www.tdcanadatrust.com) don't even get to the point of resolving via DNS since the HOSTS file explicitly states a IP address to connect to instead, which turns out to be the phishing site, which looks exactly the same.


                a Server based DNS compromise would involve the actual DNS server machine being infected. It could thus be manipulated to redirect ALL traffic from the actual site to the phishing site. Since the actual site will now experience zero traffic, these compromises usually don't last any more then a few hours before being found and solved.


                Now, SSL is of course a method of connecting to these addresses, usually after providing log-on credentials (IE, too late) however, DURING a VALID transaction with the ACTUAL site they are effective at preventing eavesdroppers from seeing the transferred information, such as Account numbers and pin numbers used during on-line bank account transfers.


                standard "safe surfing" and ant-virus software prevents the infection of a machine with a client side DNS compromise, and being paranoid over a server-side DNS spoof is ridiculous, because not only is it short lived, but the illegitimate server is often overloaded with connection attempts and usually ends up crashing, which is actually how most of these end up being discovered, not only because the real site is getting no traffic (whereas it would usually get over a million hits and hour) but because those attempting to connect are getting network timeout errors.


                I was trying to dereference Null Pointers before it was cool.

                Geek-9pm


                  Mastermind
                • Geek After Dark
                • Thanked: 1026
                  • Gekk9pm bnlog
                • Certifications: List
                • Computer: Specs
                • Experience: Expert
                • OS: Windows 10
                Re: what is the safest online connection? Cable line or dial-up?
                « Reply #33 on: January 11, 2009, 12:29:09 AM »
                Quote
                a Server based DNS compromise would involve the actual DNS server machine being infected. It could thus be manipulated to redirect ALL traffic from the actual site to the phishing site. Since the actual site will now experience zero traffic, these compromises usually don't last any more then a few hours before being found and solved.

                Yes, Yes, that is right on. That is what the major DNS attack is. Now we are on the same page!

                And yes, SSL is vbery important. Doing a fake SSL is very, very hard.

                Because the major DNS attacks it has to be so clever and only last a short time, some have felt it is not a serious matter.The cure for the major DNS attack is to use certified software on the DNS serve assigned by your ISP. If you ISP does not what to bother with this annoying detail, because they have other things to do, you can find certified DNS and put the IP in your router and then you don't have that special problem. However, you need permission from the DNS owner to do that, unless he indicates that it is OK for a small business or and individual to do that.  There are firms that make it there business to have reliable and safe DNS and they charge a modest fee to the commercial customers who prefer high quality DNS. These companies may also provide blocking of sites that are know to be hostile. Or block some sites for your company to prevent employees from wasting time on non-business matters.

                The Major DNS problem exists only because some ISP people just did not want to pay anything to update their outdated server software. The point I want to make is people are complacent if the think a threat is small. Think of a spacecraft that lost a few ceramic tiles. Just a few tiles. Fix it later.

                Now then, getting back to the main point of the thread.
                No, you do not have to be paranoidd. You can surf the net safely.  Let your common sense not be based on the unproven claims . Find out that anti-virus and firewalls do not mean you"have nothing to worry about". You still need to worry, if worry will help you be careful about giving out any information that would be harmful to you if it got to the wrong kind of people. I mean organized crime and those firms that are on the very edge of the law.

                For example, no anti-virus or spy ware will EEVER tell you the the "Video Pro so-and-so" has a horrible record of bleeding credit card accounts for services customers no longer want. You have to hope that your credit card company will help you if you have trouble with that particular firm. The fact the 90 per cent of his customers are happy is of little comfort to the 10% who got ripped-off with charges every month for bad service. The guy is a leach. That fact that his sucks blood from a small number of clients does not make him less a leach. The same can be said for the TV Infomercials you see Sunday mornings.

                And Back accounts. Yes the connection is very, very secure. But, if anything goes wrong, it is always your fault. The bank will not give you a break. The insurance they carry only protects you if the back burns down. I do not recommend on-line banking at all. The problem is that some on-line companies want you to use the back account for direct transfer. Only, and ONLY do that if the firm really is a company that you really do know and trust. Avoid business with anybody who will not let you pay with a credit card or a third part firm that will handle the credit card transaction. Again, that is not AV, or SSL issue.

                And by the way here we use use Avast! Works great! But I still worry.

                Do not ever give your password to a request from anybody. Even if the President of the USA sends you an e-mail requesting your password in the interest of national security you should ignore it. Just say you never got the e-mail because your e-mail program now has a new BS filter.

                My rant started because somebody expressed the idea security was about e the best AV and knowing how to spot malware. Security is about protection of your privacy, your reputation, your livelihood, your children and the things you believe in
                .


                BC_Programmer


                  Mastermind
                • Typing is no substitute for thinking.
                • Thanked: 1140
                  • Yes
                  • Yes
                  • BC-Programming.com
                • Certifications: List
                • Computer: Specs
                • Experience: Beginner
                • OS: Windows 11
                Re: what is the safest online connection? Cable line or dial-up?
                « Reply #34 on: January 11, 2009, 02:20:18 AM »

                For example, no anti-virus or spy ware will EEVER tell you the the "Video Pro so-and-so" has a horrible record of bleeding credit card accounts for services customers no longer want. You have to hope that your credit card company will help you if you have trouble with that particular firm. The fact the 90 per cent of his customers are happy is of little comfort to the 10% who got ripped-off with charges every month for bad service. The guy is a leach. That fact that his sucks blood from a small number of clients does not make him less a leach. The same can be said for the TV Infomercials you see Sunday mornings.

                And Back accounts. Yes the connection is very, very secure. But, if anything goes wrong, it is always your fault. The bank will not give you a break. The insurance they carry only protects you if the back burns down. I do not recommend on-line banking at all. The problem is that some on-line companies want you to use the back account for direct transfer. Only, and ONLY do that if the firm really is a company that you really do know and trust. Avoid business with anybody who will not let you pay with a credit card or a third part firm that will handle the credit card transaction. Again, that is not AV, or SSL issue.

                And by the way here we use use Avast! Works great! But I still worry.

                Do not ever give your password to a request from anybody. Even if the President of the USA sends you an e-mail requesting your password in the interest of national security you should ignore it. Just say you never got the e-mail because your e-mail program now has a new BS filter.


                All of this falls under the "safe surfing" category.



                I don't have Anti-virus. I run a malware scan MAYBE once a week, and I do online banking all the time. I don't worry. Why? because if I ever get a trojan, It's gone within a hour. This eliminates a client-side compromise via keylogger/cookie fetcher.

                As far as a server side compromise. I waive it as a non-issue. It's a giant waste of my time to even think about it, since it isn't even really feasible to scrape anything more then a few passwords that will subsequently be changed when the compromised site(s) alert their users (and/or clear the password salts).

                And if it ever was a issue, set up a configuration using multiple Domain Name Server addresses, for example, three different ones (such as two ISP and one OpenDNS), and provide an alert of they resolve to different IP addresses for the same name.


                As a final note, it would be most unproductive to compromise an ISP's DNS, since they usually serve a local area. (and usually just delegate the task of determining the IP address of a site to a "higher-level" Domain Name Server). The ones best targeted are the highest-level Root-Name Servers, which would be even more unfeasible by hackers since they are closely monitored and connected via strict security.

                 even if they are successful in redirecting most, if not all, of the traffic from the legitimate site to the phishing one, There's no way for an attacker to spoof the SSL identity of the authentic server without stealing that server's secret key which corresponds to the public key contained within the server's PKI certificate as issued by a Certificate Authority (CA) such as Verisign. It is generally believed that secret keys are hard to steal, and that keeping secret keys secret is easy, so nobody should be especially worried about a DNS hijacker and "bad data" in DNS as long as they always use SSL or similar encryption and authentication software and protocols to protect sensitive communications on the Internet.


                Not to mishmash topics, but when you think about it, large scale DNS poisoning may be RIAA's next step against net neutrality...
                I was trying to dereference Null Pointers before it was cool.

                Vonique

                  Topic Starter


                  Rookie

                  Re: what is the safest online connection? Cable line or dial-up?
                  « Reply #35 on: January 11, 2009, 09:47:09 AM »
                  Wow, this is so technical, I can barely understand what either of you are saying (but it is still interesting to read). How about having a small checking account online, and putting the majority of my savings in a separate account that does not have an internet account? That way if I get hacked, I will only lose that small amount and I also get the benefit of not having to balance my checkbook every month since it will still be done online?

                  Thanks, Von

                  Geek-9pm


                    Mastermind
                  • Geek After Dark
                  • Thanked: 1026
                    • Gekk9pm bnlog
                  • Certifications: List
                  • Computer: Specs
                  • Experience: Expert
                  • OS: Windows 10
                  Re: what is the safest online connection? Cable line or dial-up?
                  « Reply #36 on: January 11, 2009, 10:23:33 AM »
                  Quote
                  How about having a small checking account online, and putting the majority of my savings in a separate account that does not have an internet account? That way if I get hacked, I will only lose that small amount and I also get the benefit of not having to balance my checkbook every month since it will still be done online?
                  Excellent!
                  You must talk to your banker about this! Make sure that when the small account gets overdrawn, you do not have to pay more fees or fines.

                  Or open multiple accounts with different banks. One simple plan would be:
                  1. A large Savings account that draws interest. No one line connection. Deposits by mail or walk in. Transfers over the telephone using you PIN.
                  2. A checking account on-line banking. Modest balance.Overdraft protection.
                  3. Small account used only for on-line purchases. Make sure that any overdraft will not incur high fees. Some banks will charge you $25 a day for just one overdraft. Not all the worst crooks are in cyberspace!

                  As to the original question. It is not high technology that creates security. It undermines it, because it is new, unproven and few understand it.


                  michaewlewis



                    Intermediate
                  • Thanked: 26
                    • Yes
                    • Yes
                  • Experience: Expert
                  • OS: Unknown
                  Re: what is the safest online connection? Cable line or dial-up?
                  « Reply #37 on: January 11, 2009, 05:27:46 PM »
                  Let me stress again..... there really isn't much to worry about as long as your bank is using SSL for everything. Your information probably will not be intercepted enroute.
                  After it gets to your computer, it's a different story. Make sure you keep your sensitive data in an encrypted folder (Google: TrueCrypt) and use strong passwords for everything. And use common sense when surfing the web, which it sounds like you are already doing.

                  The people you mentioned that fell for the phishing scams, etc. were more than likely just very gullible and their low personal security was taken advantage of. Social engineering is the more prevalent hacking technique because it doesn't require much technical skill, and it isn't limited to computers. To be safe, don't trust anyone you meet on the internet and don't believe every email you get.

                  Geek-9pm


                    Mastermind
                  • Geek After Dark
                  • Thanked: 1026
                    • Gekk9pm bnlog
                  • Certifications: List
                  • Computer: Specs
                  • Experience: Expert
                  • OS: Windows 10
                  Re: what is the safest online connection? Cable line or dial-up?
                  « Reply #38 on: January 11, 2009, 06:19:50 PM »
                  Quote
                  Social engineering is the more prevalent hacking technique because it doesn't require much technical skill, and it isn't limited to computers. To be safe, don't trust anyone you meet on the internet and don't believe every email you get.
                  Exactly Right!  :)

                  We had to change our phone number because of some creep one one of our children meet in a chat room!