RC-Monster Forums - View Single Post

BrianG · 10.10.2008, 01:21 PM

Man, that sucks!

I can see at least three ways this happened:

- Careless web security
Click jacking, cross-site scripting, SQL injection, etc are all ways hackers can get people's data by hacking a bank or online forms. Gotta make sure the company you deal with is up to date on their security.

- Identity theft via carelessness
You could have left something somewhere that contained enough personal info for someone to steal Or, a company you dealt with in the past somehow had their database compromised, inadvendently exposed sensitive data to the general public, lost account info in a computer, etc.

- True hacking
Generally, hackers are lazy; they will do the least of amount of work to reach their goals. If you had an unsecure network or something, you are more likely to be targeted.
NEVER do ANY kind of account activity over a wireless connection. PERIOD. MAC addresses can be spoofed. WEP (even 128 bit encryption) can take as little as ~40 minutes to crack. WPA (and WPA2) can be cracked as well, just takes a little longer. Even VPNs are not foolproof. Wired connections aren't perfect either, but at least it limits hack attempts to those physically connected to a network rather than just scanning RF waves from a van across the street. I don't claim to know how to do this, but I do know it's very possible.

No matter what, it's a scary thought. I wish you well on this...

	(#1)
BrianG RC-Monster Admin Offline Posts: 14,609 Join Date: Nov 2005 Location: Des Moines, IA	10.10.2008, 01:21 PM Man, that sucks! I can see at least three ways this happened: - Careless web security Click jacking, cross-site scripting, SQL injection, etc are all ways hackers can get people's data by hacking a bank or online forms. Gotta make sure the company you deal with is up to date on their security. - Identity theft via carelessness You could have left something somewhere that contained enough personal info for someone to steal Or, a company you dealt with in the past somehow had their database compromised, inadvendently exposed sensitive data to the general public, lost account info in a computer, etc. - True hacking Generally, hackers are lazy; they will do the least of amount of work to reach their goals. If you had an unsecure network or something, you are more likely to be targeted. NEVER do ANY kind of account activity over a wireless connection. PERIOD. MAC addresses can be spoofed. WEP (even 128 bit encryption) can take as little as ~40 minutes to crack. WPA (and WPA2) can be cracked as well, just takes a little longer. Even VPNs are not foolproof. Wired connections aren't perfect either, but at least it limits hack attempts to those physically connected to a network rather than just scanning RF waves from a van across the street. I don't claim to know how to do this, but I do know it's very possible. No matter what, it's a scary thought. I wish you well on this...