D&C Lug - Home Page
Devon & Cornwall Linux Users' Group

[ Date Index ][ Thread Index ]
[ <= Previous by date / thread ] [ Next by date / thread => ]

Online Security (Was: Re: [LUG] Are there any linux engineers in North Devon?)



> The prognosis for our company growing very large is good once we have
> suitable security as this has been the only thing that has curtailed our
> position over the last 14 months.

Ahh security. Remind customers next time they pay for a pizza by credit card, 
even a reputable company, they are giving at least 3 people their

Credit card number & expiry date
Address
Name
Phone Number

And they are giving the driver their signature.

How to commit credit card fraud: Easy way:

Become a Dominos Safe Delivery Specialist, wait for a delivery thats been paid 
for by credit card, copy ccnumber, phone number and address down while you 
are in the car en-route.

Order something you want from *company*, wait for them to go out, when the 
delievery person comes up, use social engineering, say "Oh is Mary out again! 
I'll sign (fake sig/name obviously) for it if you want, she's really looking 
forward to this *whatever*, then walk around the back of the next door house, 
as if you are going in.

How to commit credit card fraud: Riskier way:

Get a job as a waiter. Wait for someone to pay by debit card, scan the card in 
your pocket using a £20 mag-stripe reader, copy details. 

How to commit credit card fraud: Hard way:

Get a job at an internet data center that uses hubs, not switches
Install a network sniffer
Wait for an unencrypted credit card number to go through
Capture it, but not the other 10GB/hour going through
Hope you get the expiry date too


When people worry about internet security it's hillarious. The weakest link is 
the banks, and people. Its so easy to get someones details the old fashioned 
way, using social engineering, theres no need to break in to large data 
centers

--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.


Lynx friendly