OT: Cellular banking

2013-12-05 Thread Mord Behar
Well, we did it. We finally got an Android phone. And of course the second thing my wife asked me was Can I use this for banking? We only use the online banking services from within our home network which is (pretty) secure. The real diference between using a mobile phone and using a laptop is

Re: OT: Cellular banking

2013-12-05 Thread Rabin Yasharzadehe
Botom line: It's all about trust Your ISP/Cellular Provider can recored and monitor your traffic, I don't sure about MIM - but they can do that if they have the right equipment (some thing like Internet Rimon doing with HTTPS sites) On Thu, Dec 5, 2013 at 7:12 PM, Mord Behar mord...@gmail.com

Re: OT: Cellular banking

2013-12-05 Thread E.S. Rosenberg
MITM is (as far as currently known) only possible if they have a CA you trust, as far as the lower layer encryption goes: GSM (2G/GPRS) has been hacked and for all intents and purposes is unencrypted these days if the person has the right reception equipment/hack phone. UMTS (3G/HSPA) has much

Re: OT: Cellular banking

2013-12-05 Thread Oleg Goldshmidt
Mord Behar mord...@gmail.com writes: The real diference between using a mobile phone and using a laptop is that first hop, from the device to the tower. I know that on the laptop it is secure, there are no man in the middle attacks since I control every device on the network (and I'm assuming

Re: OT: Cellular banking

2013-12-05 Thread Oleg Goldshmidt
E.S. Rosenberg esr+linux...@g.jct.ac.il writes: UMTS (3G/HSPA) has much stronger encryption which afaik has not yet been cracked, I would expect newer generations (4G/LTE) to be even more secure It is reportedly possible to jam the 3G/4G signal so that handsets will fall back to 2G... --

Re: OT: Cellular banking

2013-12-05 Thread E.S. Rosenberg
2013/12/6 Oleg Goldshmidt p...@goldshmidt.org: E.S. Rosenberg esr+linux...@g.jct.ac.il writes: UMTS (3G/HSPA) has much stronger encryption which afaik has not yet been cracked, I would expect newer generations (4G/LTE) to be even more secure It is reportedly possible to jam the 3G/4G signal

Re: OT: Cellular banking

2013-12-05 Thread Amos Shapira
http://xkcd.com/538/ Get over it - this whole discussion is a waste of bits IMHO. Either you trust your bank and the controls put in place to make it comply or pay on failure, or you don't bank with them. The rest is as relevant as

Re: OT: Cellular banking

2013-12-05 Thread Mord Behar
On Fri, Dec 6, 2013 at 1:16 AM, Amos Shapira amos.shap...@gmail.com wrote: http://xkcd.com/538/ Get over it - this whole discussion is a waste of bits IMHO. Either you trust your bank and the controls put in place to make it comply or pay on failure, or you don't bank with them. The rest is