Re: frame question

[boothm@xxxxxxx]

on 11/13/97at 03:02 AM, the Great and Grand  Wazir DAsmussen@aol.com said:


 A

"hacker" receiving this information through unscrupulous means _HAS_ no

such documentation, and cannot be tracked down in most cases (he/she

"spoofed" their address off of another server to make it appear that

his/her message came from there, after monitoring traffic on _your_

server so they can pop up a quick message like "For verification

purposes, what was that credit card number/password, again please?").


In short, the "www" is about as secure as a phone call on a standard

cellular or radio phone -- only not as good.  At least in the latter

instances, a potential "lurker" has to be within range of the device...

I'm not sure about that.  I'd doubt any hacker would ever spoof my line  - 
he'd choose the other end.  Spoofing households would be a real exercise
in futility.  He'd go after L.L. Bean's lines or Amazon.com's lines. 
After all, thats where the numbers are.  Companies with a credit card
operation already have security measures in place and have secure phone
lines; they've been sending out credit card numbers for credit approval on
large purchases over their phone lines for years now without any great
problems.  In other words I feel that the reason credit cards work at all
is because most people are honest and the few that aren't honest tend to
make mistakes and get caught.  Similar to the security for personal
checking accounts  -  no one checks signatures anymore because it is
cheaper to pay the losses than it is to check the signatures.

----------------------------------------------------
Booth Martin     
---------------------------------------------------



+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "JAVA400-L@midrange.com".
| To unsubscribe from this list send email to MAJORDOMO@midrange.com
|    and specify 'unsubscribe JAVA400-L' in the body of your message.
| Questions should be directed to the list owner/operator: david@midrange.com
+---