Re: Are Internet Cafes safe ?

"James C Slora Jr" <[email protected]> Thu, 23 Jun 2005 11:59:09 -0400
Newsgroups gmane.comp.security.intrusions
Message-ID <[email protected]>
My thoughts. YMMV.

Anything that is trusted needs to be encrypted in a non-replayable form when
travelling through untrusted networks or devices. 

The Internet Café computer is an untrustable device on an untrustable
network, so unless the input is encrypted before typing, and the output is
decrypted after being displayed on the screen, then no usage of that device
is trustable.

If you assume that every keystroke you type, every click of your mouse, and
everything you send or receive on the computer have all been captured by
someone else - and if you are OK with that - then it is perfectly safe.

Tools like SecureID can greatly reduce the risk of login credential misuse
if that is all you are worried about, but they do little to prevent
real-time shenanigans or session capture.



_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions