WiFi PSA

[Asher]

BTW, I had an email conversation with one of the men mentioned in that article (Moxie Marlinspike) last week about wireless security (he let me use his cloud computing service for free to try to crack some passwords).

If you talk with someone like him about the world of web security, it'll really open your eyes.

[Asher]

https://www.trustworthyinternet.org/ssl-pulse/

The most current stats show only 15% of SSL-encrypted sites are secure (from Dec 11, 2012).

Hell, 70% of SSL-encrypted sites are vulnerable to an attack first discovered in 2004 that allows a man-in-the-middle to hijack a session for his own purposes (this is easy to do once you are on the local network).

[Berzerker]

****

I think

I just dont keep important stuff, my pc is old and slow and I'm about to buy a new one

is Mac still safer?

and where do I find my password (if I even have one)?

[Kuciwalker]

The people with the knowledge and ability to steal money from a bank account by cracking a WPA2 password and then forging SSL-encrypted requests to a bank's website usually have jobs and aren't interested in actually committing crimes for money. (Not to mention that actually getting the money without getting caught is nontrivial.) At some point it's sufficient to just rely on the fact that most people aren't criminals as protection against crime.

[Aeson]

It takes all of a couple seconds to create a strong password. Roughly the same amount of time as to create a weak password. Much less time than to post on an internet forum about why you don't need to create a strong password.

Plus, it's a good habit. Knowing how to create strong passwords means you aren't as vulnerable in many, many other instances.

[Asher]

http://arstechnica.com/security/2013/02/lucky-thirteen-attack-snarfs-cookies-protected-by-ssl-encryption/

“Lucky Thirteen” attack snarfs cookies protected by SSL encryption
Exploit is the latest to subvert crypto used to secure Web transactions.

...