Mourning the loss of our friend, WhitPhil.
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
 
General Security
Tag Cloud
access audio black screen blue screen boot bsod connection crash dell desktop driver drivers dvd email error excel firefox hard drive hardware hijackthis internet keyboard laptop malware monitor network networking outlook problem processor recovery registry cleaner router safe mode slow sound spyware tdlwsp.dll trojan upgrade vba video virus vista vundo windows windows 7 windows vista windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
Can encrypted sites be hijacked by spyware?

Tip: Click here to scan for System Errors and Optimize PC performance
[ Sponsored Link ]

Closed Thread
 
Thread Tools
paulgee's Avatar
Computer Specs
Junior Member with 12 posts.
 
Join Date: Nov 2006
Experience: Intermediate
02-Feb-2008, 04:49 PM #1
Question Can encrypted sites be hijacked by spyware?
I would like to know how safe encrypted pages are? For example, if a spyware item was present in my computer, could it read data I entered into an encrypted site like a payment processor (clickbank, paypal etc) or is this type of site safe? They claim to be 100% hacker free.
lbfan's Avatar
Member with 36 posts.
 
Join Date: Jan 2008
Experience: Intermediate
02-Feb-2008, 06:18 PM #2
I'd say it's pretty safe if encyrypted (online banking sites) but of course I'd never trust any website. Look what happened to those two data discs not long ago on the news full of details, turns out it's not really that safe when someone gets hold of them! So now I don't trust anything ahah
TOGG's Avatar
Distinguished Member with 4,901 posts.
 
Join Date: Apr 2002
Location: Birmingham, England
02-Feb-2008, 07:14 PM #3
As I understand it, encrypted transmissions should be reasonably safe, assuming they use https sites and TLS (Transport Layer Security) ; http://en.wikipedia.org/wiki/Secure_Sockets_Layer You can check which level of SSL/TSL your browser is using. Anything lower than SSL 3.0 is not good, Opera uses SSL 3.0 and TLS 1.0 and 1.1.

What is not clear to me is whether a keylogger on your computer sending the encrypted data to a remote website would enable a cracker to 'unencrypt' it and use it to gain account details. Presumably not, otherwise there would be no point to encrypting the data in the first place!

I remember reading about an exploit about 2 or 3 years ago where some Russian crackers were supposed to have been able to infect the Microsoft servers used by some banks so that they loaded a keylogger on every customers computer, which then sent account details to a specially created website. Steve Gibson's ID Serve tool, which allows you to identify what server software any site is using, will tell you if a site uses Microsoft IIS or Apache/Unix software; http://www.grc.com/id/IDServe.htm

Not using IE for financial transactions should also improve your security.
__________________
Nothing matters very much, and few things matter at all.

Lord Balfour 1848-1930
paulgee's Avatar
Computer Specs
Junior Member with 12 posts.
 
Join Date: Nov 2006
Experience: Intermediate
03-Feb-2008, 05:36 PM #4
Keyloggers
Thanks for the replies. I expect that any illicit keyloggers installed on my site would be removed by latest spyware which I run daily. There's always the chance that something might slip through, just before you are about to make a purchase so perhaps it's advisable to run spyware removal before making any purchase.
Closed Thread Bookmark and Share

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Smart Search

Find your solution!



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.

Thread Tools


You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -5. The time now is 02:17 PM.
Copyright © 1996 - 2009 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2009, Jelsoft Enterprises Ltd.
Powered by Cermak Technologies, Inc.