1 7 8 9 10 11 Previous Next 158 Replies Latest reply: May 30, 2011 7:32 PM by babowa Go to original post Branched to a new discussion.
  • 150. Re: is apple security center safe?
    laverne's mom Level 2 Level 2 (395 points)

    that's true.  I hadn't thought about that but my email tabs do refresh themselves when I'm not on them.  what a pain!   Just another one of things we have to learn to put up with, I guess.  I'm going to probably have to start making some of the changes that I was putting off - switching to a standard account and other advice I have read much about.   Since I am the only one who uses the mac, if anything goes wrong I am the only one I can blame!

     

    thank you,

    laverne's mom

     

     

    interesting.  I just checked and gmail is a secure site (https).  do you think that makes a difference.  the comcast email site isn't.  just wondering what you thought about that.

     

    Message was edited by: laverne's mom

  • 151. Re: is apple security center safe?
    babowa Level 7 Level 7 (23,310 points)

    interesting.  I just checked and gmail is a secure site (https).  do you think that makes a difference.  the comcast email site isn't.  just wondering what you thought about that.

     

    I'm sure you could get a really good technical explanation to this question; my gut instinct (which has saved my bacon untold times throughout my life!!) is telling me to be extra cautious and don't trust anything at the moment. If they haven't found a way to infiltrate an https site, they probably will. As for Comcast, I have them but I try to avoid their website (email or anything else) at all costs - don't need them, takes too many clicks to check mail, and I have to endure ads (I am allergic to ads    ).

  • 152. Re: is apple security center safe?
    g_wolfman Level 4 Level 4 (1,120 points)

    I highly doubt they could affect a fully SSL compliant page without causing a certificate error.  Plus, such pages are unlikely to use third-party components which would be vulnerable to cross-site shenanigans.

     

    Partially SSL compliant pages (the ones that some browsers report as "secure with some insecure elements" or something similar) may be fair game, however...and unfortunately it's entirely possible that people may tend to trust pages reached via https more, regardless of whether it's entirely deserved.

  • 153. Re: is apple security center safe?
    laverne's mom Level 2 Level 2 (395 points)

    just one more question and then I will stop bothering you.  Do you also browse etc from a standard account instead of an administrative account.  I have read alot about this and conflicting ideas.  I am leaning towards a standard account but its sounding like this thing still needs to have you install it.  and with Firefox I ought to be able to prevent it from downloading, much like you did.  I was following that thread with a lot of interest.

     

    laverne's mom

     

    Message was edited by: laverne's mom

  • 154. Re: is apple security center safe?
    thomas_r. Level 7 Level 7 (27,985 points)

    I haven't been keeping a close eye on this topic anymore - it's just strayed too far off topic and had the conversation go off in some ridiculous directions.  However, I noticed you and babowa talking about logging in and out of e-mail and tabs refreshing, and thought you probably ought to be aware of a security exploit called tabnabbing:

     

    http://krebsonsecurity.com/2010/05/devious-new-phishing-tactic-targets-tabs/

     

    This could potentially be used by this malware, though it would more typically be used to steal an account password.  I haven't heard anything about this exploit being used with the MacDefender trojans, but it's possible.

  • 155. Re: is apple security center safe?
    laverne's mom Level 2 Level 2 (395 points)

    that's what happens when this site logs me out.  not that its nabbed.  but I have to relog in periodically.  and from what I understood from the article above (and granted I just read it very quickly), that is the type of thing that would occur, for example on the gmail site.  Looks like I've been logged out, but really haven't been, and they get my gmail password.  that one wouldn't be awful.  i don't use it for much, but could be on other sites.  I do routinely close not just the tabs, but also the browser whenever I am doing finances since I really don't want anyone getting those passwords. 

     

    have you added something about this on your website?

     

    laverne's mom

  • 156. Re: is apple security center safe?
    thomas_r. Level 7 Level 7 (27,985 points)

    have you added something about this on your website?

     

    Not yet, but I'll have to review some of the things that have been written about tabnabbing and, if I feel I can say something useful to clarify or condense or whatever, then I'll add that to the list of topics I'm planning to write articles about.

  • 157. Re: is apple security center safe?
    babowa Level 7 Level 7 (23,310 points)

    you probably ought to be aware of a security exploit called tabnabbing:

     

    Yes, Thomas, I had read that, thank you.

  • 158. Re: is apple security center safe?
    babowa Level 7 Level 7 (23,310 points)

    Do you also browse etc from a standard account instead of an administrative account.  I have read alot about this and conflicting ideas.

     

    I've been using one account only for years (except a severaly restricted test account for trouble shooting purposes or if I have to take it in for repair - only access to some necessary system files, nothing else). So I've been complacently relying on the fact that I have to enter my admin password for installs no matter what..... hopefully that won't slap me in the face...

1 7 8 9 10 11 Previous Next