 |
 |
|
January 24, 2007Stolenidsearch.com ... are you crazy?Is it just me, or is this a bad idea? Let me see if I get this straight. Go to stolenidsearch.com, a web site I don't trust and whom I have never heard before and PURPOSELY enter in my credit card information to see if its possibly compromised. If it wasn't... it might be now! Alex and the crew at Sunbelt are good guys and mean well. But the last thing we really want to do is promote activities that can put more people at risk by teaching them bad habits... like entering their cc number into sites that they do not know or trust!. How long before a malicious version from a cybersquatter is produced? According to Register.com, both stolenidsearch.net and stolenidsearch.org are available. As is stolenidcheck.com. A quick wget, a few page mods and a simple database to collect the credit cards is all that is needed. If you want to know if your credit card is compromised, call up your financial institution and have them check. They have access to much of the same data this service may have. And if it doesn't, shouldn't the people behind the site disclose this information.... protecting those innocent people that have had their card compromised? Much easier for Visa to contact the card holder and let them know, than hoping the user will check for it on the web site. I am looking at my calendar....it's not April 1st. So what gives? Posted by SilverStr at January 24, 2007 01:53 AM | TrackBackComments
I agree---sounds like another phishing expedition to me. THINK TWICE !!!!!!!!! Posted by: Lon Schoenky at January 29, 2007 11:18 AMAnother issue with a site like this is that it could probably be used by criminals to see if the credit cards they have stolen are still valid. Posted by: Patrick Ogenstad at January 29, 2007 11:27 AM |
 
My 5 Favorite Books
Writing Secure Code
Secure Programming Cookbook Security Engineering Secure Coding Principles & Practice Inside the Security Mind
My 5 Favorite Papers
Smashing the Stack
Penetration Studies Covert Channel Analysis of Trusted Systems DoD Trusted Computer System Evaluation Criteria NSA Security Recommendation Guides
Archives
February 2007
January 2007 December 2006 November 2006 October 2006 September 2006 August 2006 July 2006 June 2006 May 2006 April 2006 March 2006 February 2006 January 2006 December 2005 November 2005 October 2005 September 2005 August 2005 July 2005 June 2005 May 2005 April 2005 March 2005 February 2005 January 2005 December 2004 November 2004 October 2004 September 2004 August 2004 July 2004 June 2004 May 2004 April 2004 March 2004 February 2004 January 2004 December 2003 November 2003 October 2003 September 2003 August 2003 July 2003 June 2003 May 2003 April 2003 March 2003 February 2003 January 2003 December 2002 November 2002 October 2002 September 2002 August 2002 July 2002 |
|
