Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

 wta internet banking, secure?

views
     
trifecta
post Mar 3 2011, 12:21 AM

Casual
***
Junior Member
495 posts

Joined: Nov 2008
From: Sri Petaling


QUOTE(epsonstylux @ Mar 2 2011, 11:32 PM)
how secure is it to use public wifi to surf internet banking sites? i read somewhere before, those who r goot at hacking will take advantage of unifi service. i read that they can access the site we are surfing when using the same wifi. anyone care to explain? plus, are they accessing the site simultaneously with us when we're surfing or they can look up at our internet history and open up our visited site?

and if we're using internet banking via ipod/iphone/any mobile devices with free public wifi is it still safe? is it possible for these group of hackers see what we're surfing too?
*
Ok, let's see this from a different angle.
Is it safe to cross the street without the pedestrian crossing?
Yes and No, chances you will get hit, or summon for breaking the law.

However, we take our chances where we can out of: convenience.

That's the keyword here, convenience.

So, doing your online banking via a non-encrypted public wifi, is just not safe should be avoided entirely.
Despite there's a https between the client and the server of the bank, still. Even worse, using a public computer via public network to access banking info is suicide.

It's nothing to do with Unifi, using Unifi doesn't quadruple your chances of getting attack.

If you're using internet banking via a 3G network, not 802.11x i.e. WiFi, you have less chance of being attack while doing banking. This is because, it is a lot harder, possible, but harder to sniff radio packets. That's the sniffing part, session hijacking on your smart phone, possible, but harder to do then session hijacking on your PC.

So, if you're doing banking on the go, better to do it via your browser in your smart phone via a 3G/4g network as oppose to using your laptop or smartphone using a public WiFi.
trifecta
post Mar 3 2011, 05:36 PM

Casual
***
Junior Member
495 posts

Joined: Nov 2008
From: Sri Petaling


QUOTE(dexterhau @ Mar 3 2011, 04:47 PM)
Personally, I dont thing they are able to hack because Internet Banking is done through HTTPS which means each transaction of sending or retrieving information to and from the bank server is being encrypted. The information you sent is encrypted, the information you retrieved is being encrypted as well. Unless the hacker knew the private key to decrypt the information. Other wise it is impossible to do so. I think what they mean hacker access to your internet banking is that because you are at a public area where people might be able to peek from behind your user name and password. Hahaha... Just my 2 cents... =)
*
I've got news for you, SSL has been broken since 2009 cool2.gif .
It was presented at our local HITB, much earlier than that at Defcon, Ruxcon, KeySecWest etc.

Here's a detail technical explanation courtesy of Techrepublic: SSL Really Broken This Time

In South Korea, the government has banned the use of SSL for banking as it does more harm than threat.
Instead, Microsoft has to made its browser friendly to PKI and Korean government only mandates the use of Windows OS and IE.
Every time MS releases a new browser, South Korea needs a lead time for them to configure the PKI.
trifecta
post Mar 4 2011, 06:00 PM

Casual
***
Junior Member
495 posts

Joined: Nov 2008
From: Sri Petaling


QUOTE(epsonstylux @ Mar 4 2011, 07:26 AM)
actually i did use public wifi for internet banking quite often too. since my account doesnt hev lotsof money i dont mind but sometimes i use my dads account as he requested me to transfer fr him.tats y im sked his acc will b hacked.
ive taken the stance not to use internet banking in public nymore

plus what about a public wifi but with minimal user? lets say im in tis cafe n i can only see just a normal customer w/o laptop or whatever device in amd outside d cafe. and im d only one with laptop or mobile wifi device is it still safe?
*
You don't have to be physically seen at the cafe' to use the wifi cool2.gif
No, it's still not safe.

Back in 2005, this company which sold a product called AirDefense which was later bought over by Motorola did a Proof-Of-Concept at a cafe in KLCC. He jammed the signal, all users got DC then allowed his PC to become the router, hence every PC that connects is actually connecting to him.


trifecta
post May 1 2011, 06:58 PM

Casual
***
Junior Member
495 posts

Joined: Nov 2008
From: Sri Petaling



Online banking service provider like M2U, CIMB are always looking into beefing up their security, whether it's their user facing services like M2U or their internal servers etc. Fact is, the attackers works 24/7/365 around the world to find loopholes, and there will never be a 100% solid proof. Its always a who's on top of who first.

Meanwhile, users themselves have to take precaution, always always keeping abreast of whats the latest threat.

 

Change to:
| Lo-Fi Version
0.0167sec    0.57    6 queries    GZIP Disabled
Time is now: 22nd December 2025 - 04:26 AM