Unprotected networks

[random_username]

Is there any way to protect yourself from snooping on an unsecured network? I am about to travel for a long time and want to access my online bank account from the hotel network.

Thanks for the answers in advance!

[PrntRhd]

First, use a software firewall program.
Kerio & Zone Alarm have free ones.

Second I would recommend "Secure Login" extension with Firefox browser, it acts like Opera browser's Wand, you don't have to type in the password and it compares the site to the prior login to try to prevent phishing. https://addons.mozilla.org/en-US/firefox/addon/4429

Use an up to date Antivirus program.
Use an Anti spyware program.

You may also want to discuss secure communication tips with your bank.
Many banks have a Secure Login location on their websites for users like you.

My bank also has options where a one-use password can be sent to a pre-designated email address or a one-use password sent to a pre-designated cellphone as a text message. They also look for my regular PC's hardware hash when connecting, access from another PC can trigger mutiple part security questions that must be answered and match prior records. They do caution users to not use public PCs to connect to the online banking service, such as cyber cafes, libraries, and similar locations.
Never connect to wireless networks without a security key.

[random_username]

Will using ssh to connect to my secure pc at home help?

[Variable]

The biggest thing you can do is right click My Network Places, click Properties, right click your Local Area Connection and click Properties. Uncheck MS file and print sharing and Client for MS networks. You just disabled how most machines are attacked and how many computers on an unsecure network are snooped. When your back home, you can check the boxes again if you have a home network.
If you are using Windows Firewall - from the same window above, click the Advanced tab and Settings. When you are in a hotel check the box for don't allow exceptions and click OK.

Connect to your bank website, go to HTTPS://www.yourbank.com. They have a HTTP://www.yourbank.com site but, if you directly open the HTTPS site, you set up a encrypted session from the beginning. You should have the lock at the bottom of your browser. Click on the lock and read who the certificate is registered to. Note this name, when your at a hotel and open the site, expand the lock and compare it to what you read when you were at home.

Since traffic going to your machine could be sniffed, starting a HTTPS session first and then entering your username and password should give you security equal to anywhere else. My bank has the log in site in both HTTP and HTTPS. I would always use encryption (HTTPS) for initial connection, not just for when you log in to your account.

The key is the encryption, without it anything you send, is sent over the network in the clear. It is possible to read the data contained in these packets. As an aside, if you do email, POP3 and SMTP username and pass are sent in the clear unless you use SSL. Most mail hosts don't do secure email. That is why a VPN for your work email is a really good idea. If you have the VPN option, you are very safe. But there is on caveat to that, since you didn't mention this option however, I won't go into it.

[Fred_Flintstone]

Another hint I read somewhere to avoid typing passwords on a public/unsecured machine is to have your passwords etc.. in a notepad document on USB pen drive or whatever, and just "copy & paste" the passwords and details direct into the page to avoid typing it and getting trapped by keyloggers and such!

Never had to use it myself.. but it makes sense when you think about it??:rolleyes:

[classicsoftware]

Another hint I read somewhere to avoid typing passwords on a public/unsecured machine is to have your passwords etc.. in a notepad document on USB pen drive or whatever, and just "copy & paste" the passwords and details direct into the page to avoid typing it and getting trapped by keyloggers and such!

Never had to use it myself.. but it makes sense when you think about it??:rolleyes:

Not true. As Variable explained, the data has to be sent to the site and the data is unencrypted and therefore viewable to anyone, unless you have a secure connection.

The only protection you have is to do as Variable says and make sure you try to stay in hotels that have a hard wired connection as opposed to a wireless connection. You have more protection on a hard wired network than wireless.

[Fred_Flintstone]

Not true. As Variable explained, the data has to be sent to the site and the data is unencrypted and therefore viewable to anyone, unless you have a secure connection.
True.. can see that now..:rolleyes:

I stand corrected....(stands in corner with dunces hat on)...:p :p

[random_username]

Not true. As Variable explained, the data has to be sent to the site and the data is unencrypted and therefore viewable to anyone, unless you have a secure connection.

The only protection you have is to do as Variable says and make sure you try to stay in hotels that have a hard wired connection as opposed to a wireless connection. You have more protection on a hard wired network than wireless.

Wont using SSH (to connect to a secure PC at home) over an unsecured connection help?

[classicsoftware]

Unless you connect directly via https:// you will be entering a name and password in the open to get onto any secure pc.

[random_username]

Got it. Thanks

[rond36]

If your bank allows you to enter your user name and/or password on an unsecured web page when you log in to online banking, change banks!