Security On Public Networks

[jmbreslin 0]

A question for the computer/interweb experts out there:Is there any way to make one's poker account info more secure when playing on a public network, such as a Starbuck's wireless network? I know it's pretty easy for people to track info sent across public networks, which means one's username and password can easily be detected by anyone with the right technology and the know-how to use it. Is there any way to prevent that from happening, such as encryption software or security settings on the poker sites?

[jmbreslin 0]

So the answer to my question would be no?

[Ko8e34 0]

I think you're being paranoid... people aren't out to get you at starbucks AFAIK.

[GWCGWC 83]

I don't think he's being paranoid, just cautious. People who do this at Starbucks or any other public network aren't usually being malicious but it's a high tech version of peeping in someone's window. Also, people suck in general so you should always try to protect yourself. Ask your question here and you'll get a qualified answer:http://www.fullcontactpoker.com/poker-foru...howtopic=113735

[Acekob 0]

As long as you don't download any infected software or let anyone else use your computer you should feel pretty safe.Doubt many would or could hack you through a network like that, but everything is possible I guess.

[JubilantLankyLad 1,960]

I don't think he's being paranoid, just cautious. People who do this at Starbucks or any other public network aren't usually being malicious but it's a high tech version of peeping in someone's window. Also, people suck in general so you should always try to protect yourself. Ask your question here and you'll get a qualified answer:http://www.fullcontactpoker.com/poker-foru...howtopic=113735

i doubt it

As long as you don't download any infected software or let anyone else use your computer you should feel pretty safe.Doubt many would or could hack you through a network like that, but everything is possible I guess.

not really

[TrueFX 0]

Poker Stars encrypts all data sent to and from their network.Even if you were using an unsecured public wireless network, no one will be able to decypher any of the information destined for the Stars network. If someone hacked your ISP and intercepted all of your traffic, they still couldn't read it.-----The following is taken directly from Stars support :Play-time security: We have a number of built-in features to ensure the security of the game itself.Our client software uses the certificates issued by our own Certificate Authority (CA) to authenticate our servers Our CA certificate key is 1024 bit length. Our client software uses the industry standard SSLv3 protocol. It is configured to use RSA for authentication and key generation and triple-DES (EDE3, in outer-CBC mode) for encryption. Currently we are using 512-bit RSA key, which according to [1] is sufficient for short and medium-term (up to several years) secrets. As we update server private keys every three months, we are secure with a good safety margin. The use of Triple-DES EDE3 for session encryption is considered even saferHope this helps.

[NoSup4U 0]

Poker Stars encrypts all data sent to and from their network.Even if you were using an unsecured public wireless network, no one will be able to decypher any of the information destined for the Stars network. If someone hacked your ISP and intercepted all of your traffic, they still couldn't read it.

This doesn't mean they couldn't just hack your computer and sniff all your keystrokes.I would ask on the 2p2 Internet or Computers forums, they probably will be more helpful the FCP GenPo :)Mark

[jmbreslin 0]

Ask your question here and you'll get a qualified answer:http://www.fullcontactpoker.com/poker-foru...howtopic=113735

What the hell is that thread?I think you're right that people aren't using public networks solely for the purpose of stealing information but apparently it is pretty easy to do with a simple piece of technology and a bit of patience and knowledge to know where to look. I have an acquaintance who tried it recently just to see how it worked and he was amazed at the amount of information he observed freely flowing across the network. He said it wouldn't be that difficult to sift through it to find someone's username and password for a site.Anyway, it sounds like Stars uses encryption software to protect customer information. I wonder if other poker sites do the same.

[jmbreslin 0]

This doesn't mean they couldn't just hack your computer and sniff all your keystrokes.

Isn't that a bit different because it would require actually accessing my computer? Wouldn't that be much, much more difficult to do if I'm using Norton or some similar security program?

[JubilantLankyLad 1,960]

Isn't that a bit different because it would require actually accessing my computer? Wouldn't that be much, much more difficult to do if I'm using Norton or some similar security program?

yes

[NoSup4U 0]

Isn't that a bit different because it would require actually accessing my computer? Wouldn't that be much, much more difficult to do if I'm using Norton or some similar security program?

For sure, but now you're not behind hardware firewall like you normally would be say at your house. Not saying its easy or anything I worry about, but its easier than if they're sitting outside your house because they're behind the firewall on the same network as you already.Also Norton sucks, its a bloated memory hog. I'd recommend Kaspersky or something.Mark

[jmbreslin 0]

For sure, but now you're not behind hardware firewall like you normally would be say at your house. Not saying its easy or anything I worry about, but its easier than if they're sitting outside your house because they're behind the firewall on the same network as you already.Also Norton sucks, its a bloated memory hog. I'd recommend Kaspersky or something.Mark

Kaspersky? Isn't that the Russian chess player who beat the computer a while back? He's into computers now?

[armen13 0]

download and use snoopfree privacy shield. It detects and blocks keylogging software and it's free.

[Syntonic 0]

TrueFX gave the only answer worth listening to.The connection is over SSL, so the data is encrypted. Firewalls and antivirus software are more for paranoia than anything else. Don't download/install stupid stuff and you'll be fine.

[antistuff 0]

I think you're being paranoid... people aren't out to get you at starbucks AFAIK.

you really can't be too paranoid with computer security. just when you think its foolproof some wiseass thinks of the one thing you didn't think of. did i say one thing? there are infinite things you didn't think of. i do not consider this paranoia at all.that said i wouldn't worry about this particular thing.

[qyayqi 12]

if you are really paranoid about public connections with your laptop:1. leave your home computer running 24/7.2. create an ssh tunnel between your laptop and that computer.3. direct all internet activity from your laptop through the tunnel.4. contact pstars about the settings required to have it use a proxy server (it can be done, but it isn't on their website).the reason sniffers can hack passwords over wireless is because the packets are a certain format & they can pick out the ones that have such data. brute force methods work to break the softer encryption-- computers are now fast enough to hammer away at it until they break through. the sniffer can store the encrypted information until they get home, then tackle it with a blazingly fast home system. the software/hardware tools for this are pretty easy to find if you know people. not that i know people.ssh makes the whole stream look more like noise over the wireless connection and is much closer to the wished-for "impossible" to sniff.the connection may seem slightly slower due to the extra 'hop' back to your home system to have it retrieve the web data, but it'll be secure.

[vbnautilus 49]

if you are really paranoid about public connections with your laptop:1. leave your home computer running 24/7.2. create an ssh tunnel between your laptop and that computer.3. direct all internet activity from your laptop through the tunnel.4. contact pstars about the settings required to have it use a proxy server (it can be done, but it isn't on their website).the reason sniffers can hack passwords over wireless is because the packets are a certain format & they can pick out the ones that have such data. brute force methods work to break the softer encryption-- computers are now fast enough to hammer away at it until they break through. the sniffer can store the encrypted information until they get home, then tackle it with a blazingly fast home system. the software/hardware tools for this are pretty easy to find if you know people. not that i know people.ssh makes the whole stream look more like noise over the wireless connection and is much closer to the wished-for "impossible" to sniff.the connection may seem slightly slower due to the extra 'hop' back to your home system to have it retrieve the web data, but it'll be secure.

Pokerstars uses a 1024-bit RSA key for authentication. Thats's not brute-forcable by any existing computer. The stream between the client and PS server is encrypted with Triple-DEC which is practically secure as well, although probably won't be for long. Basically I wouldn't worry about it. I think you are probably more vulnerable to the kind of attack Mark described, assuming you are running a microsoft operating system.

[qyayqi 12]

excellent rebuttal, vb. i accept the security of pstars specifically, but for all general surfing while playing, a ssh tunnel is going to be very good protection against the sniffers.it comes down to how often you are on open networks. the more you travel and have to use airport, coffee shop or hotel wireless, the more likely you are to have someone sniffing packets.

[vbnautilus 49]

excellent rebuttal, vb. i accept the security of pstars specifically, but for all general surfing while playing, a ssh tunnel is going to be very good protection against the sniffers.it comes down to how often you are on open networks. the more you travel and have to use airport, coffee shop or hotel wireless, the more likely you are to have someone sniffing packets.

Yes, I definitely agree. Connecting to pokerstars is akin to making an ssh connection with them. It's definitely better to always have that level of security. I have sniffed public networks before and its incredible what people send in the clear.

[qyayqi 12]

my final point is a reminder: use a unique password for your poker clients. if you are unlucky enough to have someone 'sniff' your fcp (or other site) password, you don't want it to also be your password to anything where money is involved.

[vbnautilus 49]

my final point is a reminder: use a unique password for your poker clients. if you are unlucky enough to have someone 'sniff' your fcp (or other site) password, you don't want it to also be your password to anything where money is involved.

oh, by the way I hope HaWtTomAto1 is only your FCP login and not your PokerStars login

[jmbreslin 0]

if you are really paranoid about public connections with your laptop:1. leave your home computer running 24/7.2. create an ssh tunnel between your laptop and that computer.3. direct all internet activity from your laptop through the tunnel.4. contact pstars about the settings required to have it use a proxy server (it can be done, but it isn't on their website).the reason sniffers can hack passwords over wireless is because the packets are a certain format & they can pick out the ones that have such data. brute force methods work to break the softer encryption-- computers are now fast enough to hammer away at it until they break through. the sniffer can store the encrypted information until they get home, then tackle it with a blazingly fast home system. the software/hardware tools for this are pretty easy to find if you know people. not that i know people.ssh makes the whole stream look more like noise over the wireless connection and is much closer to the wished-for "impossible" to sniff.the connection may seem slightly slower due to the extra 'hop' back to your home system to have it retrieve the web data, but it'll be secure.

I'm sorry, you lost me at "create an ssh tunnel..." If I had the capacity to do what you're suggesting here, do you think I would have had to ask my question to begin with?

[jmbreslin 0]

Pokerstars uses a 1024-bit RSA key for authentication. Thats's not brute-forcable by any existing computer. The stream between the client and PS server is encrypted with Triple-DEC which is practically secure as well, although probably won't be for long.

Would it help if I got myself a flux compasitor and ran 1.21 gigawatts through it?Seriously, guys, I'm not even sure you're speaking English. Please dumb down the computer lingo for people like me.As far as I can tell from the responses, it sounds like the bottom line is this:1) Pokerstars is secure so don't worry about it2) Don't know about other sites but still probably not much of a risk3) To be safe I should avoid web surfing while I'm playing on public networks4) Something about opening up a worm hole between my home computer and my laptop

[qyayqi 12]

i'd do a walk-through for you (and anyone else semi-interested), but it has been a couple years since i set one of these up. i'm randomly goolging to find something not techspeak-ish.essentially you are correct. pstars is definitely secure, other ones are (ASSUMED TO BE) secured to some degree approaching or equal to pstars.you don't want to be so paranoid about about things that it renders you immobile. limit the amount of surfing you do on your password-protected sites (ie fcp) when mobile, especially if your passwords are all similar. accept the < 1% chance that someone will know that your porn sites were accessed over the wireless-- it isn't like they can pinpoint your exact computer in an area with 5-100 computers accessing.if i decide to write something up it'll appear in the OT 'ask ouch8' thread.