Search found 124 matches

Return to advanced search

Re: My first required EMV transaction in the US

MasterCard, VISA, American Express, and Discover have all said that as of October 2015, merchants of point-of-sale transactions will assume full liability for fraudulent magstripe transactions To be precise, this is only true if the customer is using a chip card. There is going to be a big push in ...
by jchef
Sun Aug 17, 2014 11:11 am
 
Forum: Personal Consumer Issues
Topic: My first required EMV transaction in the US
Replies: 3
Views: 403

Re: "Russan Gang Amasses Over A Billion Stolen Passwords"

This has been discussed before but again I want to be sure: OK, so someone cracks my Vanguard (or Fidelity etc) password. Then what? Yeah, they could "sell" a highly appreciated security, incurring big capital gains taxes and create other havoc. But the real risk is that the money gets wi...
by jchef
Sun Aug 10, 2014 9:25 am
 
Forum: Personal Consumer Issues
Topic: "Russan Gang Amasses Over A Billion Stolen Passwords"
Replies: 87
Views: 7339

Re: "Russan Gang Amasses Over A Billion Stolen Passwords"

Why wouldn't a given firm use a proprietary hash algorithm? Seems like that would greatly reduce the odds of compromise since the attacker would need more than a bank of fast computers to extract the passwords.They need to know the proprietary hash algorithm. The math behing hash algorithms is comp...
by jchef
Sun Aug 10, 2014 9:16 am
 
Forum: Personal Consumer Issues
Topic: "Russan Gang Amasses Over A Billion Stolen Passwords"
Replies: 87
Views: 7339

Re: "Russan Gang Amasses Over A Billion Stolen Passwords"

Good explanation and is why longer passwords are better than shorter ones since they'll have to try more combinations before they get to the right one. But don't they have to do that all over again for every password in the file? So if a site has a million passwords, they'll have to do them all to ...
by jchef
Sat Aug 09, 2014 2:31 pm
 
Forum: Personal Consumer Issues
Topic: "Russan Gang Amasses Over A Billion Stolen Passwords"
Replies: 87
Views: 7339

Re: "Russan Gang Amasses Over A Billion Stolen Passwords"

Dumb question (perhaps): Since a website (e.g., Fidelity) will typically flag 3 or more attempts to enter a password (for any given username), how can these programs go through millions and billions of character combinations to find the right one? In other words, what is their test metric? They are...
by jchef
Sat Aug 09, 2014 1:49 pm
 
Forum: Personal Consumer Issues
Topic: "Russan Gang Amasses Over A Billion Stolen Passwords"
Replies: 87
Views: 7339

Re: "Russan Gang Amasses Over A Billion Stolen Passwords"

Dumb question (perhaps): Since a website (e.g., Fidelity) will typically flag 3 or more attempts to enter a password (for any given username), how can these programs go through millions and billions of character combinations to find the right one? In other words, what is their test metric? They are...
by jchef
Sat Aug 09, 2014 1:19 pm
 
Forum: Personal Consumer Issues
Topic: "Russan Gang Amasses Over A Billion Stolen Passwords"
Replies: 87
Views: 7339

Re: It won't matter if your password gets stolen

The way two factor currently works with many systems is that you are allowed to designate certain machines as trusted. These trusted machines are not required to provide the second factor or only need to provide it once a month. And if your device gets lost or stolen, you can usually go online and r...
by jchef
Sat Aug 09, 2014 10:09 am
 
Forum: Personal Consumer Issues
Topic: It won't matter if your password gets stolen
Replies: 20
Views: 2370

Re: "Russan Gang Amasses Over A Billion Stolen Passwords"

Dumb question (perhaps): Since a website (e.g., Fidelity) will typically flag 3 or more attempts to enter a password (for any given username), how can these programs go through millions and billions of character combinations to find the right one? In other words, what is their test metric? They are...
by jchef
Sat Aug 09, 2014 10:01 am
 
Forum: Personal Consumer Issues
Topic: "Russan Gang Amasses Over A Billion Stolen Passwords"
Replies: 87
Views: 7339

Re: "Russan Gang Amasses Over A Billion Stolen Passwords"

It's disappointing that whoever these companies are don't reveal the password breach to their customers. They might not even know. Being vulnerable to SQL injection implies a very low level of expertise. It sounds like they do know: Hold Security would not name the victims, citing nondisclosure agr...
by jchef
Wed Aug 06, 2014 6:52 pm
 
Forum: Personal Consumer Issues
Topic: "Russan Gang Amasses Over A Billion Stolen Passwords"
Replies: 87
Views: 7339

Re: Cloud Base Password Manager

I use Keepass (portable version) and I store the app and the database in a cloud based drive. It is available to any device that can log into the drive. Would work with any of the cloud services (Google, Amazon, Dropbox ....). I have the Keepass app loaded on my phone so I can also open the db from...
by jchef
Wed Aug 06, 2014 6:45 pm
 
Forum: Personal Consumer Issues
Topic: Cloud Base Password Manager
Replies: 14
Views: 977

Re: "Russan Gang Amasses Over A Billion Stolen Passwords"

On second glance....... over a billion is a big number... population of the earth is maybe 7.5 billion? Deduct a few billion for unconnected folk in China, India, the third world, etc., and a couple billion more for infants, juveniles, the elderly who don't use password sites, etc. Do they have the...
by jchef
Wed Aug 06, 2014 8:44 am
 
Forum: Personal Consumer Issues
Topic: "Russan Gang Amasses Over A Billion Stolen Passwords"
Replies: 87
Views: 7339

Re: "Russan Gang Amasses Over A Billion Stolen Passwords"

I'm getting a little fatalistic about this type of thing. I saw no indication in the article that the criminals couldn't just go back into sites again and steal passwords again. I do have unique passwords for every site except the ones I don't care about, and I do check my financial accounts often....
by jchef
Wed Aug 06, 2014 8:10 am
 
Forum: Personal Consumer Issues
Topic: "Russan Gang Amasses Over A Billion Stolen Passwords"
Replies: 87
Views: 7339

Re: "Russan Gang Amasses Over A Billion Stolen Passwords"

"This isn't really news to folks who do what we do. People should use strong passwords but they never will. This particular case doesn't affect us directly. " I also found this response odd. From what I understand this gang amassed these passwords by targeting corporate and website databa...
by jchef
Tue Aug 05, 2014 10:35 pm
 
Forum: Personal Consumer Issues
Topic: "Russan Gang Amasses Over A Billion Stolen Passwords"
Replies: 87
Views: 7339

Re: Android smartphone with physical keyboard

As far as predictive software keyboards, I also type in multiple languages - say, one email to my family in French, and one for work in English. This makes the predictive software keyboards extremely annoying, unless I switch the phone language settings back and forth constantly. Although I've neve...
by jchef
Wed Jul 23, 2014 9:55 am
 
Forum: Personal Consumer Issues
Topic: Android smartphone with physical keyboard
Replies: 38
Views: 1871

Re: Windows 7 going the way of XP?

"What that means in practice is that although you can rest easy knowing that Windows 7 will remain secure until 2020, " That is the important sentence.No need to jump to 8. :happy Exactly. It's been Microsoft's standard for a number of years to offer operating systems 5 years of regular s...
by jchef
Wed Jul 09, 2014 9:57 pm
 
Forum: Personal Consumer Issues
Topic: Windows 7 free support will be ending in 2015
Replies: 27
Views: 2309

Re: Windows 7 going the way of XP?

Microsoft is supporting Windows XP until 2019. Just not retail and business versions. Windows Embedded is a significantly different beast than the regular version of Windows XP. It is an extremely stripped down version of Windows. There is much functionality in the regular version of XP that simply...
by jchef
Wed Jul 09, 2014 9:50 pm
 
Forum: Personal Consumer Issues
Topic: Windows 7 free support will be ending in 2015
Replies: 27
Views: 2309

Re: Google 2 step verification assistance

What about all the google apps I have on my devices? For example my iphone has: mail (ios grabs mail, calendar, etc) gdrive, sheets, docs and YouTube. Would all of those apps need a one time login? Apps created by Google will not normally require app passwords, they will support two factor login. A...
by jchef
Fri Jun 20, 2014 1:33 pm
 
Forum: Personal Consumer Issues
Topic: Google 2 step verification assistance
Replies: 14
Views: 1200

Re: Email service alternatives to MSN hotmail and Gmail?

That never occurred to me! How would such an account get spam protection? Somewhere along the line (either gmail or Apple mail or some other unknown thing in the universe) I get very good spam protection. I hardly ever get any and what I do get ends up in the spam box. If you are forwarding to Gmai...
by jchef
Sun Jun 15, 2014 5:39 pm
 
Forum: Personal Consumer Issues
Topic: Email service alternatives to MSN hotmail and Gmail?
Replies: 22
Views: 2039

Re: Email service alternatives to MSN hotmail and Gmail?

What is wrong with the mail service provided by your (ISP) internet provider? - Ron Many are quite good. One drawback (which doesn't affect some people) is that they are often not portable. If you move, you may have a different ISP and have to start from scratch. Yes. After changing my email twice,...
by jchef
Sun Jun 15, 2014 4:53 pm
 
Forum: Personal Consumer Issues
Topic: Email service alternatives to MSN hotmail and Gmail?
Replies: 22
Views: 2039

Re: Pin and Chip Cards coming to the US

My wife surprised me today at Walmart and used her credit card in a chip slot that I didn't know existed there. No PIN (or even signature as our purchase was small), but a good start. Very glad this is starting to be deployed in the U.S. Walmart announced in April that they had installed Chip termi...
by jchef
Sat Jun 07, 2014 10:21 pm
 
Forum: Personal Finance (Not Investing)
Topic: Pin and Chip Cards coming to the US
Replies: 71
Views: 5256

Re: Pin and Chip Cards coming to the US

As I mentioned above ( http://www.bogleheads.org/forum/viewtopic.php?f=2&t=140548#p2081310 ), Chip cards would actually solve the issues of huge databases of card info being stolen from retailers, such as Target. The retailer is not given enough info to create a fraudulent card or transaction. ...
by jchef
Fri Jun 06, 2014 2:23 pm
 
Forum: Personal Finance (Not Investing)
Topic: Pin and Chip Cards coming to the US
Replies: 71
Views: 5256

Re: Pin and Chip Cards coming to the US

I may end up declining the chip and pin just as I keep having to decline the continual attempts to upgrade ATM cards to debit cards. Don't be surprised if you aren't able to decline. With the liability shift taking place in October 2015, there's a pretty large incentive for the banks to get the Chi...
by jchef
Fri Jun 06, 2014 12:25 pm
 
Forum: Personal Finance (Not Investing)
Topic: Pin and Chip Cards coming to the US
Replies: 71
Views: 5256

Re: Pin and Chip Cards coming to the US

Right. Chip and pin only provides extra security in a physical transaction with the card. Waiting until 2014 to implement it does about as much good as the TSA at the airport. We already have the legal system and consumer fraud liability problems figured out in the US. Adding chip and pin might pos...
by jchef
Fri Jun 06, 2014 10:20 am
 
Forum: Personal Finance (Not Investing)
Topic: Pin and Chip Cards coming to the US
Replies: 71
Views: 5256

Re: Pin and Chip Cards coming to the US

How are chip and PIN cards used for online purchases where the card is not present? Much of today's fraud seems to be mass security breaches of retailers' systems ala the recent Target breach. We've had two cards replaced in the past six months due to this. Does transitioning to chip and PIN techno...
by jchef
Fri Jun 06, 2014 6:35 am
 
Forum: Personal Finance (Not Investing)
Topic: Pin and Chip Cards coming to the US
Replies: 71
Views: 5256

Re: Pin and Chip Cards coming to the US

It says in the FAQ, "At merchants who have chip-enabled terminals, insert the chip portion of your Card in the chip-enabled terminal, and sign to authorize the transaction." What's the chip portion? Is that the little silver colored rectangle? This is the Chip: http://www.virginmedia.com/...
by jchef
Thu Jun 05, 2014 8:37 pm
 
Forum: Personal Finance (Not Investing)
Topic: Pin and Chip Cards coming to the US
Replies: 71
Views: 5256

Re: Pin and Chip Cards coming to the US

I may end up declining the chip and pin just as I keep having to decline the continual attempts to upgrade ATM cards to debit cards. Don't be surprised if you aren't able to decline. With the liability shift taking place in October 2015, there's a pretty large incentive for the banks to get the Chi...
by jchef
Thu Jun 05, 2014 8:19 pm
 
Forum: Personal Finance (Not Investing)
Topic: Pin and Chip Cards coming to the US
Replies: 71
Views: 5256

Re: Pin and Chip Cards coming to the US

PINs cannot be changed on current US cards, due to lack of infrastructure. PINs can usually be changed on non-US chip & pin cards (although not in the US). US law does not differentiate between signature cards and chip & pin cards in terms of fraud protection. In Canada, PINs for bank issue...
by jchef
Thu Jun 05, 2014 8:12 pm
 
Forum: Personal Finance (Not Investing)
Topic: Pin and Chip Cards coming to the US
Replies: 71
Views: 5256

Re: Listen to ebooks -- How?

You can pick up a cheap MP3 player from any of the larger stores, download the books to that I put them onto my android phone, along with say a TV series to watch when on the bus or plane That's what I'll do. Thanks Paul If the library books are under copyright that is unlikely to work. Overdrive l...
by jchef
Sun May 25, 2014 6:19 pm
 
Forum: Personal Consumer Issues
Topic: Listen to ebooks -- How?
Replies: 17
Views: 1561

Re: Windows XP users

tennisplyr wrote:So I'd I don't use Internet Explorer this is a non issue?

Basically, yes.

But there is always risks that if another machine on a network you are connected to is infected by this exploit, that machine may try to infect your machine using a different exploit.
by jchef
Mon Apr 28, 2014 7:23 am
 
Forum: Personal Consumer Issues
Topic: Windows XP users
Replies: 223
Views: 48056

Re: Windows XP users

In case people are interested, the attacks may have begun. Microsoft released a special security advisory last night. There is an known attack in the wild where if you use Internet Explorer to visit a specially designed website, the creators of the website can take over your computer. This vulnerabi...
by jchef
Sun Apr 27, 2014 5:52 pm
 
Forum: Personal Consumer Issues
Topic: Windows XP users
Replies: 223
Views: 48056

Re: Shopping at Alibaba?

I think a lot depend on what your purpose is. Alibaba is designed for businesses to business purchases. You are expected to purchase large lots. I don't own a business, so I've never used it AliExpress is meant for individuals purchasing small quantities. It's similar to eBay without the auctions. T...
by jchef
Tue Apr 22, 2014 6:59 pm
 
Forum: Personal Consumer Issues
Topic: Shopping at Alibaba?
Replies: 9
Views: 1211

Re: Google 2 step verification assistance

So what happens if we do lose both our phone and one-time codes? How do we ever get back into Google? To start with, I have Google Authenticator instated on both my phone and tablet, so that's one back up for me. If you have more than one device, there is nothing preventing you from having the same...
by jchef
Fri Apr 18, 2014 10:25 am
 
Forum: Personal Consumer Issues
Topic: Google 2 step verification assistance
Replies: 14
Views: 1200

Re: Keep passwords in USB thumb drive: good idea?

But making and remembering a strong unique password for every site is NOT difficult! I will show you how in 2 easy steps: Step 1: Get a character string The easiest way to make a character string is to use a fact, like this: azis-273C [absolute zero is -273 degrees Celsius] The short passwords you ...
by jchef
Thu Apr 17, 2014 2:38 pm
 
Forum: Personal Consumer Issues
Topic: Keep passwords in USB thumb drive: good idea?
Replies: 43
Views: 3242

Re: Google 2 step verification assistance

Is my reasoning sound, that with respect to the Google facilities I use two-factor authentication wouldn't do me much good, given how I use my smartphone? Google also offers one-time use codes to use as part of the two-factor authentication. I have these printed out and stuffed into a corner of my ...
by jchef
Thu Apr 17, 2014 10:43 am
 
Forum: Personal Consumer Issues
Topic: Google 2 step verification assistance
Replies: 14
Views: 1200

Re: Google 2 step verification assistance

The first time you set two factor authentication up, I believe Google wants a phone number. You can either tell it to text your cell phone or it can just call a landline and read off a code. After this first set up, you are then able to tell Google that you want to the Google Authenticator app inste...
by jchef
Thu Apr 17, 2014 9:18 am
 
Forum: Personal Consumer Issues
Topic: Google 2 step verification assistance
Replies: 14
Views: 1200

Re: Keep passwords in USB thumb drive: good idea?

Here's an idea- Use keypass/lastpass to store the majority of your password, but leave something extra for you to complete each time. .... If your password file is compromised This doesn't give you much additional security and is a bit of a hassle. If you choose a reasonably strong master password,...
by jchef
Thu Apr 17, 2014 9:08 am
 
Forum: Personal Consumer Issues
Topic: Keep passwords in USB thumb drive: good idea?
Replies: 43
Views: 3242

Re: Keep passwords in USB thumb drive: good idea?

I've been reading these threads and can't pull the trigger so to speak on a password manager. Can't seem to grasp how the security would be better with a password manager than with say, Target. Is it conceivable that such a password management company could be compromised and then a hacker knows EV...
by jchef
Thu Apr 17, 2014 8:59 am
 
Forum: Personal Consumer Issues
Topic: Keep passwords in USB thumb drive: good idea?
Replies: 43
Views: 3242

Re: KeePass vs LastPass

Thanks. For those using Google Authenticator with LastPass, does it have to be set up on each Google account (email address) for use with LastPass...and can it be set up just to be used with LastPass or does it have to be activated for the Google (and/or other) accounts as well? You can use Google ...
by jchef
Sun Apr 13, 2014 9:12 am
 
Forum: Personal Consumer Issues
Topic: KeePass vs LastPass
Replies: 105
Views: 11893

Re: how do browsers make money?

With Chrome, firefox, and such, how do they make money to support their upkeep? I can see like IE, Chrome, maybe it doesnt matter or something to a company like google, but how does say firefox make its money of me using it? If you use IE, your default home page is Microsoft and your default search...
by jchef
Wed Apr 09, 2014 10:00 am
 
Forum: Personal Consumer Issues
Topic: how do browsers make money?
Replies: 7
Views: 981

Re: how do browsers make money?

Also, companies pay a ton of money for search engine optimization,.. i.e. if you search "rental truck for moving" either U-haul, Budget, or Penske are paying google to be the first hit. Google doesn't allow you to pay to improve your ranking in a search result. They do allow you to pay to...
by jchef
Wed Apr 09, 2014 9:56 am
 
Forum: Personal Consumer Issues
Topic: how do browsers make money?
Replies: 7
Views: 981

Re: Should I be afraid to upgrade from windows 8.0 to 8.1?

Finally Windows 8.0 will be supported for a long time so while you shouldn't be afraid to upgrade there is also no compelling reason to upgrade if you don't want to. Not as long as many people think. Microsoft is treating 8.1 with the same rules as a service pack. Meaning you have 2 years to instal...
by jchef
Tue Apr 08, 2014 8:16 pm
 
Forum: Personal Consumer Issues
Topic: Should I be afraid to upgrade from windows 8.0 to 8.1?
Replies: 6
Views: 571

Re: Windows XP to Linux Question with existing HW

There are different versions of Ubuntu and some of them are designed for older machines, so you probably want to consider those. Xubuntu has minimum specs of 512 MB of ram and 6 GB of hard drive space. Lubuntu requires even less. As already mentioned you can just boot these from CD to see if they wo...
by jchef
Mon Mar 31, 2014 12:35 pm
 
Forum: Personal Consumer Issues
Topic: Windows XP to Linux Question with existing HW
Replies: 61
Views: 3207

Re: best tips for passwords?

I use KeePass with Windows, Linux, Android and iOS without any problems. They all use the same database formats and can share databases. And just so you know there are two database formats for KeePass, version 1 and version 2. Both are still actively developed. Version 1 has better compatibility wit...
by jchef
Sun Mar 30, 2014 10:39 pm
 
Forum: Personal Consumer Issues
Topic: best tips for passwords?
Replies: 141
Views: 10586

Re: Installing Win8.1 on an old PC - one successful data poi

If I look at win8 memory usage on the machine that I described at the start of the thread then with a browser running and a few tabs open and an email client (thunderbird) and a couple of open documents the machine is using about 1.1GB. So I'd suggest that if anyone is upgrading an older machine an...
by jchef
Thu Mar 27, 2014 3:18 pm
 
Forum: Personal Consumer Issues
Topic: Installing Win8.1 on an old PC - one successful data point
Replies: 24
Views: 1854

Re: Updating Windows 8 to 8.1

Upgrading to 8.1 is mandatory if you want long term support. Support for Windows 8 will end in January 2016 if you don't upgrade to 8.1. Microsoft is treating 8.1 with the same rules as they use for a service pack. You have a bit more than 2 years to apply the update or you lose support. http://supp...
by jchef
Tue Mar 25, 2014 3:32 pm
 
Forum: Personal Consumer Issues
Topic: Updating Windows 8 to 8.1
Replies: 15
Views: 1246

Re: I don't want to upgrade XP just yet, is that ok?

Microsoft's policy after XP is to support operating systems for 10 years. Vista will be supported for another 3 years.

http://windows.microsoft.com/en-us/windows/lifecycle
by jchef
Wed Mar 19, 2014 6:01 am
 
Forum: Personal Consumer Issues
Topic: I don't want to upgrade XP just yet, is that ok?
Replies: 86
Views: 7183

Re: I don't want to upgrade XP just yet, is that ok?

As part of the regular security patches last week, Microsoft included a program to pop up an announcement warning of the end of updates: http://blogs.windows.com/windows/b/windowsexperience/archive/2014/03/03/new-windows-xp-data-transfer-tool-and-end-of-support-notifications.aspx And yes, Microsoft ...
by jchef
Sun Mar 16, 2014 7:52 pm
 
Forum: Personal Consumer Issues
Topic: I don't want to upgrade XP just yet, is that ok?
Replies: 86
Views: 7183

Re: I don't want to upgrade XP just yet, is that ok?

"The vast majority of bank ATMs around the world currently run on Windows XP. Come April 8, when Microsoft cuts off support for Windows XP, the vast majority of those bank ATMs will still be running XP." Many ATMs are running XP embedded, not regular XP. XP embedded is supported until 2016.
by jchef
Fri Mar 14, 2014 9:35 am
 
Forum: Personal Consumer Issues
Topic: I don't want to upgrade XP just yet, is that ok?
Replies: 86
Views: 7183

Re: Low-cost mutual fund providers in Canada?

TD e-Series funds are the lowest cost index mutual funds with MERs in the range of 0.30% to 0.50%. They can only be bought from a special e-Series mutual fund account or a TD Waterhouse brokerage account. Vanguard Canada and iShares Canada are two of the ETF providers that offer a bit cheaper option...
by jchef
Tue Mar 04, 2014 1:10 pm
 
Forum: Investing - Help with Personal Investments
Topic: Low-cost mutual fund providers in Canada?
Replies: 6
Views: 308

Re: Credit card chip upgrade good idea??

Your PIN is encrypted in the chip somehow so that bad guys who steal your card can play with it all they want and not determine the PIN? (Actually, that's not right; a 4-digit PIN is only 10,000 possibilities, so an automated tester should be able to determine your PIN in an hour or so...) I believ...
by jchef
Tue Mar 04, 2014 11:48 am
 
Forum: Personal Consumer Issues
Topic: Credit card chip upgrade good idea??
Replies: 45
Views: 1606
Next

Return to advanced search