Linked Questions

6 votes
3 answers
1k views

What is safer to use (in general terms), online banking software using the mobile app or using a browser on a desktop OS? [duplicate]

What is safer to use (in general terms), online banking software using the mobile app or using a browser on a desktop OS? I suppose that a mobile app, provided by the bank on a mobile OS seems is ...
Bob Ortiz's user avatar
  • 6,675
90 votes
12 answers
19k views

How feasible is it for a CA to be hacked? Which default trusted root certificates should I remove?

This question has been revised & clarified significantly since the original version. If we look at each trusted certificate in my Trusted Root store, how much should I trust them? What factors ...
makerofthings7's user avatar
39 votes
5 answers
10k views

Security of an initial redirection from http://example.com to https://example.com

Suppose that http://example.com/<foo> systematically redirects to https://example.com/<foo>. I enter http://example.com in my browser's URL bar, and I see a page load and the URL bar now ...
Gilles 'SO- stop being evil''s user avatar
31 votes
5 answers
4k views

Are address bars unphishable?

I've taken, out of curiosity, the Phishing Quiz by OpenDNS that tries to teach the general public about detecting phishing: Ever wonder how good you are at telling the difference between a ...
badp's user avatar
  • 371
9 votes
4 answers
7k views

Is online banking more secure on iOS than a desktop computer?

Does Apple's iOS provide a more secure environment for online commerce (banking or shopping) than Windows or Mac OS X? Since the only software that can run on iOS must be vetted by Apple, the ...
Nic's user avatar
  • 1,146
14 votes
4 answers
2k views

Vulnerabilities common only in mobile solutions?

I was wondering if there are any threats for web-applications used on mobile phones that haven't been known in the "full size" browsers earlier. I haven't heard of any serious or common problems that ...
naugtur's user avatar
  • 1,135
2 votes
5 answers
12k views

Does the padlock on my browser really indicate a reasonable assurance against eavesdropping?

I know that there have been broken or weak SSL implementations. Do browsers actually have decent standards for what they'll accept and display "the padlock"? Furthermore, are there any practical ...
Cory J's user avatar
  • 370
8 votes
4 answers
1k views

What fields in a suspicious certificate should I look at?

Looking at a certificate for a web-site (in Windows/Google Chrome) I see it lists the following fields Version Serial number Signature algorithm Issuer Valid from Valid to Subject Public Key Basic ...
Everyone's user avatar
  • 387
6 votes
5 answers
576 views

Can SSL requests be proxied by issuing a second certificate?

Alice wants to login to her account at https://www.bobsbank.com/. However she clicks on a malicious link in an email and instead gets sent to the malicious site https://www.charliesbank.com/. The ...
user avatar
2 votes
5 answers
777 views

Safer way to access paypal, Mobile or Pc?

I often find it difficult to chose if it is safer (in any context) to log in to my paypal, or other similar banking accounts using my Nokia or my PC. Maybe, I am assuming the fact, that since I do ...
samayo's user avatar
  • 929