Version: 2008
Advanced Search
advertisement
advertisement

Forum display:

Community weekly poll: 3/15/05 Are you afraid of identity theft from pharming?

by Lee Koo (ADMIN) Moderator - 3/14/05 9:33 PM
advertisement
Post 1 of 17

3/15/05 Are you afraid of identity theft from pharming?

by Lee Koo (ADMIN) Moderator - 3/14/05 9:33 PM

Are you afraid of identity theft from pharming?

I wasn't until now.
No, the risk has been blown way out of proportion.
Yes, I was a victim.
Still don't quite understand what it is.
Farmers can steal identities?

Post 2 of 17

Pharming

by velvetouch - 3/15/05 12:55 PM In reply to: 3/15/05 Are you afraid of identity theft from pharming? by Lee Koo (ADMIN) Moderator

I wasn't pharmed, but my husband was....don't answer any email from a "financial institution" that requires your account and password...if they are your real financial institution, they already have all your information.

Post 3 of 17

Pharming vs Phishing

by TheGoldy - 3/15/05 1:38 PM In reply to: Pharming by velvetouch

From your description, your husband was phished, not pharmed. Pharming isn't something where you click on a link in an email that takes you to somewhere else. It occurs when you type in an address in your browser and the DNS server has been compromised so that it points to the wrong IP address. Much more insidious than phishing ever was.

Post 4 of 17

Pharming

by alkaline - 3/15/05 2:08 PM In reply to: 3/15/05 Are you afraid of identity theft from pharming? by Lee Koo (ADMIN) Moderator

It doesn't bother me at all, as I refuse to do any banking or purchasing on the internet. Why take the chance? No thanks, my bank is only one block away and I do not worry about being hi-jacked on my way there!

Post 5 of 17

Pharming

by vimwash - 3/15/05 3:08 PM In reply to: 3/15/05 Are you afraid of identity theft from pharming? by Lee Koo (ADMIN) Moderator

DON'T TRUST the Verisign Program linked with Chase Manhattan Bank. I used my visa card in August 2004 while making two purchases on the internet, within minutes of each other. I made my purchases using the Verisign program. 3 days later, while I was at work, I received a call from Chase Manhattan regarding a $400 purchase made with my visa. The purchase was made while I was at work and I had my visa in my possession. Chase said they would not honor the purchase because I denied it and it didn't match my spending pattern. 6 months later and after many attempts to fix the problem, I ended up paying for the purchase because Chase said I had authorized it using the Verisign program. Somehow the person/s who made this fraudulent purchase was able to intercept my information through the Verisign program and make the purchase. Since then, I've canceled my Chase Visa card and don't make purchases over the internet. Your personal financial information is never secure - no matter what you are told. On the other side of the supposedly encrypted transaction - is someone to receive it. The only reason I paid this bill was I should have never trusted Verisign in the beginning, and didn't have time to put anymore effort into it; so this was a wakeup call. For a purchase of $400 I would have demanded a signature be required upon delivery.

Post 6 of 17

Pharming

by breich - 3/15/05 3:14 PM In reply to: 3/15/05 Are you afraid of identity theft from pharming? by Lee Koo (ADMIN) Moderator

I have retrieved the IP addresses of the financial firms I use and will place this information the Host file on my PCs.

Post 7 of 17

Pharming

by Pachelbel - 3/15/05 5:12 PM In reply to: Pharming by breich

Can you tell me how to find the IP addresses of the financial firms and how to place this info on the
"Host file" on my pc. Is Mac any safer? Pachelbel

Post 8 of 17

Pharming

by Ouida English - 3/15/05 3:17 PM In reply to: 3/15/05 Are you afraid of identity theft from pharming? by Lee Koo (ADMIN) Moderator

Thank you for the new information. Identity theft is vicious, regardless of the disguise it assumes! I do no financial activity online, but would assume there are many other ways for hackers to obtain clandestine information and people need to be protected.
bordercrossingor@sbcglobal.net

Post 9 of 17

phishing and Farming

by munyeh - 3/15/05 4:25 PM In reply to: Pharming by Ouida English

I've been phished many many times and usually forward a copy of the phony message to abuse @... with long headers. I've never been pharmed but it's scary because I do use my credit card to pay on the internet, Does anybody have advice about Paypal? I use it, but I've been phished on it

Post 10 of 17

phishing

by vmayers - 3/16/05 3:24 AM In reply to: phishing and Farming by munyeh

We like doing things on line because it is fast and easy. This idea might make it a little less fast. I would assume that a person pharming dose not have your password. So when you go on this ghost site and you punch in your id and your password it will act just like the site you intended to log on to and let you in. If you were to take the a first action of typeing in your id and a wrong password it would also except taht wrong password and let you in. If you punch in the wrong password when you first log on and it dosn't let you in you might feel a little safer loging in with your right password.

Post 11 of 17

Phishing Scams

by no9to5wdm - 3/15/05 5:10 PM In reply to: Pharming by Ouida English

I get dozens of Fhishing Scams a day in my e-mail; I just delete anything from any bank. Believe me I get them from banks (well not the Real McCoy of a bank). What these low lives do is set up a web site that looks like the REAL bank, then send out 1,000s of e-mail just hopping that a DUMB Un expensive person will open it and click on the link. DO NOT FOR ANY REASON CLICK ON ANY LINK IN ANY FINANCIAL COMPANY E-MAILS. 1. NO BANK is going to send you any email asking you for any information! Even if the bank was to have an accident and burn down: They still will not ask for your info. As they have in file off site. They even advised that my account would be locked down with no access. DELETE THE E-MAIL, THEN DELETE THE DELETED FILE OR IF YOU HAVE A PROGRAM THAT IS WIPE IT OUT TOTALLY. DO IT. When you do use a website with any info secure or not SIGN OFF! CLOSE the browser. Keep up all of your security programs current and WORKING.

Post 12 of 17

online banking, how safe?

by kathygworley - 3/15/05 5:40 PM In reply to: Phishing Scams by no9to5wdm

ive been online banking for a while now. never had any problem. is there something to worry about?

Post 13 of 17

It's time to fight back!

by teckels - 3/15/05 7:08 PM In reply to: 3/15/05 Are you afraid of identity theft from pharming? by Lee Koo (ADMIN) Moderator

It's time that the industry and consumers stop taking a passive role in combating these kind of threats. One way to better secure banking information would be for the bank to send it's customers mini-CDs or business card CDs with strong encryption codes that would be required in order to log-on to your account. One of the main benifits of this concept is that not only will the bank be able to verify it's clients better, but this will also allow the client to identify the bank.
Implementing such a practice is in the best interest of the banks. Consumer confidence is one of their most important issues. Even if they don't like the CD idea, they might think about using RFID tags and selling readers to their clients at huge discounts. It would be a huge mistake to put the key tag in credit cards for obvious reasons, so they would have to be issued on a seperate device.

Post 14 of 17

Check for the "s"

by KellyWelch - 3/15/05 8:09 PM In reply to: 3/15/05 Are you afraid of identity theft from pharming? by Lee Koo (ADMIN) Moderator

When dealing with financial sites, it's always a good idea to check for the "s" after "http" to make sure you have a secure connection before entering any sensitive information. The #2 rule is never to use the links in an email.

Post 15 of 17

pharming prevention

by poloz - 3/15/05 9:36 PM In reply to: 3/15/05 Are you afraid of identity theft from pharming? by Lee Koo (ADMIN) Moderator

My solution to pharming is a non-technical one and althought somewhat cumbersome it should work reasonably well until more complex technical measures can be implemented. Simply validate the site by initially entering a correct login with an incorrect password. If accepted then you know the site is NOT authentic. If rejected then enter the correct password. As an additional measure once you are sucessfully logged into your account, before entering any information simply preview existing info. If it is not available then the site is bogus. Basically use good old fashioned "common sense" and check everyone out before entering any private info on ANY website. Don't RELAX... If you are relaxed then you are getting 'hacked'.

Forum legend:
Locked Locked thread
Moderator Moderator
CNET staff CNET staff
Samsung staff Samsung staff
Norton Authorized Support team Norton Authorized Support team
AVG staff AVG staff
Windows Outreach team Windows Outreach team
Dell staff Dell staff
Intel staff Intel staff
Powered by Jive Software