Forum Home
Press F1
 
Thread ID: 55604 2005-03-15 02:06:00 Internet banking password question. Brian B (6530) Press F1
Post ID Timestamp Content User
334132 2005-03-15 10:50:00 I have deliberately never stored password info on my computer.
But a few days ago (on Firefox) a Password Manager box appeared while I was registering for a newsletter. When it asked if I wanted it to remember this password in future, I agreed - without thinking much about that.
Now it occurs to me that this will be stored in a file somewhere ..? And presumably be accessible to someone expert - which I'm not.
So should I worry? And if so, how do I delete it?
Laura (43)
334133 2005-03-15 10:59:00 Preferences/Privacy/Saved Passwords Safari (3993)
334134 2005-03-15 11:04:00 Here is a site where everyone can get some idea how secure their computer is . Give it a run and see how it stacks up with the Mac results .
. symantec . com/sscv6/default . asp?productid=symhome&langid=au_nz&venid=sym" target="_blank">security . symantec . com


My result under FC3 - If one may call it a result .

I cant see why a port scanner needs clues about my browser to identify if ports are open or not

Details:



This web service requires information about your web browser and operating system type . Due to web browser and operating system inconsistencies, we use this information to:

Ensure your system is compatible with the scanner .

Tailor the site specifically for your web browser .

Provide scans relevant to your operating system .

Your web browser passed us the following information:

Mozilla/5 . 0 (compatible; Konqueror/3 . 3; Linux; i686) (KHTML, like Gecko)

This information did not contain enough if any information about your system configuration . This is usually caused by running software that blocks user-agent .
:confused:
personthingy (1670)
334135 2005-03-15 11:14:00 If I wanted to get someones password, I would have a keylogger last on my list of things to try.

First when they click send or OK to send off that information the easiest way would be to catch that, it wouldent matter how the password was entered, pasted, typed backwards, you would just catch the password field.

That's too late. With banking sites are https, and the sent info is SSL encoded (SHA-1). A keylogger needs to catch that info as it is entered, not when it is sent.

But then, some Chinese researchers have recently reported that they have cracked SHA-1.
vinref (6194)
334136 2005-03-15 11:21:00 hmmm...I can't get that security test to run under Firefox or Internet Explorer, which is a shame as its raised my interest.

Still,as a consolation Sheilds up cliams neither my computer nor I exist,and Sygate Security scan agrees.....Though Sygate security is complaining it cant run the tests due to my firewall blocking access,lmao.
Metla (12)
334137 2005-03-15 11:31:00 That's too late. With banking sites are https, and the sent info is SSL encoded (SHA-1). A keylogger needs to catch that info as it is entered, not when it is sent.

But then, some Chinese researchers have recently reported that they have cracked SHA-1.That would be the hard bit decripting the 128-bit SSL encryption
Rob99 (151)
334138 2005-03-15 11:47:00 i quite like the idea they were talking about on the news a few weeks back. you log in, the bank texts you a temporary password, you use that to log in and then it expires


Sure - as long as you have a bat phone with you. Then why not use telephone banking?

Question - As the slobs probably use a floppy to dump their datalogger onto the Cyber Cafe, why does the Cafe need a floppy drive? Get rid of the flopy from all the Cyber machines.
Woody (710)
334139 2005-03-15 11:50:00 well, I got it to run by lowering or enabling a few "bells and whistles in IE (I would have expected it to highlight IE as a security risk) Loses a fair whack of credability right there.

Testing showed 90 percent in Stealth,with the remaining being closed.and a security Status of Safe.
Metla (12)
334140 2005-03-15 12:15:00 uh......Isn't the idea to not have a record of your password?... :D

As for the BNZ and there spokesperson, They are as dodgy as the Catholic church, Telecom and wife beating All Blacks..... :blush: :blush: :eek:

You can have a record of really important passwords on your computer where no person will even think to look.

Well I guess you can now that I have given a hint below.

I created a Excel file and renamed it as a *.dll and put it in a Win directory. All I have to remember is which directory and the file name and to change to *.xls to read my password list. The Excel file was password protected too.

I use my Admin password to protect the Excel file.
AMD1 (6552)
334141 2005-03-15 19:02:00 well, I got it to run by lowering or enabling a few "bells and whistles in IE (I would have expected it to highlight IE as a security risk) Loses a fair whack of credability right there.

Testing showed 90 percent in Stealth,with the remaining being closed.and a security Status of Safe.

That's good then but I did not expect you would have any problems.
I was hoping some other people less experienced with computer security would give it a run so it would bring attention to some of the security holes they may have and the ways these uninvited pests can get installed on their computer.
Safari (3993)
1 2 3 4 5 6