magicbus wrote:
theoldwizard1 wrote:
Besides is all https data encrypted end to end ?
Yes, which is why I never worry about doing banking no matter where I am. In fact someone videoing me in a public location as I type in my ID and password is a much greater threat.
Dave
Be worried, a man in the middle attack can still defeat https and it is really easy to do, a kid can do it, and you would never know it was done. It does not crack the encryption, it simply replaced the trusted certificate with an alternate trusted one created by the hacker so you end up unknowingly trust the wrong person and send your encrypted traffic to them to decrypt instead. This is the exact reason why a VPN is so important
Also this seems to come up in the forums regularly, why would they attack a RV park. Working in IT security, I can think of no better place then going to Myrtle Beach, Florida, Arizona or Texas in the winter when the mega RV parks are full of hundreds or thousands of middle class retirees packed in like sardines, with lots of money in their bank account, high limits on their credit cards and a paid off mortgage, no IT security specialist on staff to ensure the RV park network is safe, and a belief by the guests (just like people on this thread) that they are safe in an RV park. I am just surprised someone with less honest intentions has not thought of this. A single man in the middle attack from the gate of an RV park could jeopardize every single person in the park without them ever knowing it happened.
If you always assume that the WIFI network "joes RV Park" is not actually put up by Joe, assume that your traffic is being passed thru someone else (man in the middle attack) and decrypted before being reencrypted and that smart algorithms are looking for things like credit card numbers and logging them unless you are using a VPN. Don't assume this because it is likely to happen but because it is easy for someone to do.
