"Free WiFi" man-in-the-middle scam seen in the wild.

Perry E. Metzger perry at piermont.com
Tue Jan 23 10:34:57 EST 2007


Derek Atkins <warlord at MIT.EDU> writes:
> I'll just point out that you CAN go to:
>
>  https://chaseonline.chase.com/
>
> And that works, and should be secure.

And for the six people that know to do that, it works great. :)

It used to be that Verizon (my local phone company, sadly) had this
general problem but you could click on "log in" and it would direct
you to a secure page with a little error message and you could then
enter your username and password. They've since "fixed" that so it is
no longer possible to log in safely to their web site at all.

Perry

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com



More information about the cryptography mailing list