Two Plus Two Publishing LLC Two Plus Two Publishing LLC
 

Go Back   Two Plus Two Poker Forums > Internet Poker > Internet Poker

Notices

Internet Poker Discussions of Internet poker venues.

Reply
 
Thread Tools Display Modes
Old 08-11-2008, 02:06 PM   #16
Carpal \'Tunnel
 
[Phill]'s Avatar
 
Join Date: Jun 2004
Posts: 32,680
Re: Attn poker sites - here is a good example of security

Quote:
Originally Posted by counthomer View Post
Actually this is a very common misconception about random key generators - if someone has control over your machine they are no defence, as all I have to do is get you to put your code into something you think is your poker client, display some error prompt that makes you think there is a problem with the site and intercept any emails you send to support. Of course, I will only have six seconds or so to retransmit that login data, but that is a lifetime in computer security terms.

However, this brings me back to my original point - if I have control over your computer (such as through a key logger) why would I make an effort to build a mock copy of FTP, intercept your emails to support etc? The answer is that I wouldn't - I would go after your bank, share and maybe ewallet accounts.

Note I never said that it was all up to the player (the sites certainly need to do their bit) but if you are so concerned there are ways you can guarantee your own security 100% now by yourself.
There is no way to 100% guarantee security. For every loophole in a security token it will be the same loophole for every other method of security. Sure, you can get around the security tokens to get someone, but its certainly not easy and requires a huge amount of effort and thieves at all levels will happily pass up a big score if they can get a slightly smaller one with a lot less effort.

Arguing that these will make you 100% secure is silly, and in no way does a site need to guarantee the loss if they are gotten around - but it would improve security greatly and should be the number two priority for Stars and FTP behind having your log in details being something other than the name you have when sat at a table.

Edit, furthermore id much rather you hack my bank than my poker site, because the bank guarantees any amount lost through hacking.
[Phill] is offline   Reply With Quote
Old 08-11-2008, 02:19 PM   #17
enthusiast
 
Join Date: Jan 2007
Posts: 83
Re: Attn poker sites - here is a good example of security

Who was arguing that tokens would make you 100% secure? I don't think anyone made such a claim..
counthomer is offline   Reply With Quote
Old 08-11-2008, 02:35 PM   #18
grinder
 
Join Date: Apr 2008
Posts: 526
Re: Attn poker sites - here is a good example of security

Quote:
Originally Posted by counthomer View Post
Actually this is a very common misconception about random key generators - if someone has control over your machine they are no defence, as all I have to do is get you to put your code into something you think is your poker client, display some error prompt that makes you think there is a problem with the site and intercept any emails you send to support. Of course, I will only have six seconds or so to retransmit that login data, but that is a lifetime in computer security terms.

However, this brings me back to my original point - if I have control over your computer (such as through a key logger) why would I make an effort to build a mock copy of FTP, intercept your emails to support etc? The answer is that I wouldn't - I would go after your bank, share and maybe ewallet accounts.

Note I never said that it was all up to the player (the sites certainly need to do their bit) but if you are so concerned there are ways you can guarantee your own security 100% now by yourself.

Here is my point...security ID's WOULD in fact make it significantly more difficult to hack an account. My main point, however, is that unless you are a top level hacker yourself, you probably don't know enough to make the claims you do. That is my problem. I do everything I think I should, but because I myself am not a master in that field, I can't know what people who are that proficient are capable of. From my limited reading in the subject, a talented and motivated hacker can easily get by a person like me, who does what he should that is standard but doesn't understand the deeper vulnerabilities.

I also think an important addition to security that would be good would be some kind of approved IP address situation. You can only sign on using approved IP addresses unless you give FT some kind of warning that you will be signing on elsewhere. This of course would be a problem if the hacker has your email address, but if they don't know that rule, FT can be alerted when a random IP is signing on. Just a thought.

Really the NUMBER ONE thing they could do which they refuse do to spinelessness, is having LIVE PHONE SUPPORT for emergencies. They can have people who only answer the phone for emergency situations and when the thousands of calls come in that aren't emergencies, they can just direct them to email support and be just as obnoxious as TILT PAY.
jeffpoker323 is offline   Reply With Quote
Old 08-11-2008, 03:25 PM   #19
Pooh-Bah
 
Brons's Avatar
 
Join Date: Mar 2007
Posts: 5,815
Re: Attn poker sites - here is a good example of security

These things are overdue. I hope Stars introduces them in the future. Maybe even giving them away to silver or gold stars. Or for X amount of FPP. Would be great service.

If they charge for it I'll buy one anyway.
Brons is offline   Reply With Quote
Old 08-11-2008, 04:05 PM   #20
banned
 
Join Date: Oct 2007
Posts: 1,961
Re: Attn poker sites - here is a good example of security

I read that article this morning, good read... I also wish the poker sites would do something about security, I guess only time will tell.
LateNiteRush is offline   Reply With Quote
Old 08-11-2008, 04:52 PM   #21
old hand
 
bluey's Avatar
 
Join Date: Mar 2006
Posts: 1,588
Re: Attn poker sites - here is a good example of security

ive been told stars is close to releasing this. hopefully it is soon.
bluey is offline   Reply With Quote
Old 08-11-2008, 07:30 PM   #22
grinder
 
Join Date: Apr 2008
Posts: 526
Re: Attn poker sites - here is a good example of security

Quote:
Originally Posted by bluey View Post
ive been told stars is close to releasing this. hopefully it is soon.
FTPDoug mentioned it in an update quite some time ago now, and has been silent since....any progress FT???
jeffpoker323 is offline   Reply With Quote
Old 08-11-2008, 08:38 PM   #23
grinder
 
KentuckyWildcats's Avatar
 
Join Date: Dec 2006
Location: ky
Posts: 681
Re: Attn poker sites - here is a good example of security

I would def get one. I would personally feel more secure.
KentuckyWildcats is offline   Reply With Quote
Old 08-11-2008, 08:43 PM   #24
old hand
 
AJackson's Avatar
 
Join Date: Nov 2005
Location: Chiang Mai, Thailand
Posts: 1,757
Re: Attn poker sites - here is a good example of security

I would get one and be happy playing a premium for it.
AJackson is offline   Reply With Quote
Old 08-11-2008, 09:18 PM   #25
old hand
 
ispiked's Avatar
 
Join Date: Dec 2006
Location: appreciating thematic jamming
Posts: 1,254
Re: Attn poker sites - here is a good example of security

Here's a link to PokerStars' response in the other thread.
ispiked is offline   Reply With Quote
Old 08-11-2008, 09:38 PM   #26
See my coaching listing
 
Join Date: Jul 2005
Location: RIP Reefer
Posts: 8,050
Re: Attn poker sites - here is a good example of security

Quote:
Originally Posted by ike View Post
Couldn't agree more. Its mindblowing to me that these are not in common use.
100% agre...if tilt or stars started that (since I play both) I'd stop playing on the other and JUST play on the one with it...no need to put my money at risk u know since both sites are PLENTY big enough to play at 24/7 365
RikaKazak is offline   Reply With Quote
Old 08-11-2008, 09:40 PM   #27
See my coaching listing
 
Join Date: Jul 2005
Location: RIP Reefer
Posts: 8,050
Re: Attn poker sites - here is a good example of security

I would like to also say that I'd pay for the privelege of having one...something like $50 a year or something wouldn't bother me at all.
RikaKazak is offline   Reply With Quote
Old 08-12-2008, 02:59 PM   #28
grinder
 
Join Date: Apr 2008
Posts: 526
Re: Attn poker sites - here is a good example of security

I would love to see an email response from FTP when suggesting this and their reasoning for not implementing it..
jeffpoker323 is offline   Reply With Quote

Reply
      

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT -4. The time now is 09:45 PM.


Powered by vBulletin®
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.6.0 ©2011, Crawlability, Inc.
Copyright © 2008-2010, Two Plus Two Interactive