Mail a Letter Online
41–50 of 117 posts
Re: Mail a Letter Online
#42Earlier quoted context omitted.
https://moxie.org/software/sslstrip/ The attitude of "it's cool, only use SSL for the sensitive parts" hasn't been true for a decade.
Again, that looks like it needs to be sitting somewhere between the end user and the webserver. I don't disagree that it is possible to mess with http traffic in flight if it's not encrypted. I do disagree that a) there are bad guys between me and the http://catpictures.com right now and b) They have targeted me with malicious cat pictures that will cause damage somehow. My sites that allow logins are all https only.…
I don't know how one can disagree with something that can't be known one way or the other.
Security features/processes are there to account for the small possibility that an attack is attempted. They don't become useless simply because attacks aren't happening 100% of the time. For example: your door lock (deadbolt) is locked even when there isn't someone actively trying to break into your house.
In your particular example, sitting between A and B doesn't always mean sniffing packets you send from A to B as a "passive listener". It could simply be that the attacker has fed you his/her rogue IP via DNS and you are connecting to his server that is pretending to be B.
At that point yes the attacker is sitting between A and B, but it's not like s/he is sitting on a router sniffing your packets. S/he does not have to be a malicious player near the target server, or part of the infrastructure that you use to get to B. S/he can be somewhere completely remote.
Re: Mail a Letter Online
#43Earlier quoted context omitted.
Can you give a reason for not using https in the age of LetsEncrypt? And yes, the point of MITM is that there has to be a malicious actor in the middle. This is mainly a threat when using public WiFi, like at an airport or a coffee shop. It's absolutely trivial for some bored individual to run SSLstrip for funsies and distribute malware through any HTTP connections. Also, an attacker doesn't need to somehow create ma…
I know you probably have a better understanding of how vpns work than I do, but the blanket statement that using a VPN makes your connections immune to MITM is not correct. True, an attacker needs to find some other link between the terminus of your VPN and the target site to MITM, and true, those links are orders of magnitude harder to compromise usually. But a VPN is not magic pixie dust that you sprinkle on your l…
Sure, it's technically possible for someone to pull off a MITM attack on someone using a VPN; perhaps there's an attack vector before they establish their VPN connection, or they've compromised the server running the VPN service, etc.
But that's probably only a threat to government agents and Snowden, whom have real fears of targeted attacks like that. For the layman, VPN pretty much is a magic pixie dust that will let you browse unencrypted websites with confidence that the pages won't be modified, and your form submissions won't be sniffable on your public network.
Of course, it won't protect you from sites that already have malware on them.
Re: Mail a Letter Online
#44I've been looking the something that's kind of the opposite of this. I'd like to be able to use an address in my city for all my mail - when a letter arrives I'd like to get a scan as an email attachment. I usually get parcels delivered to amazon lockers or my office since I'm out all day.
This one is recommended usually. https://travelingmailbox.com/
You'd have to live in a decently sized city to get an address in your town though. You can definitely get one in your state. UPS also has mail services. They don't scan, but if you're wanting to protect your address, it's a good option. They run about 200 a year in LA so maybe 130 or so somewhere smaller?
Re: Mail a Letter Online
#45I've been looking the something that's kind of the opposite of this. I'd like to be able to use an address in my city for all my mail - when a letter arrives I'd like to get a scan as an email attachment. I usually get parcels delivered to amazon lockers or my office since I'm out all day.
Re: Mail a Letter Online
#46I used a service similar to this in 2011 after I moved back from Australia to UK. Australian banks charge a monthly fee if you don't deposit your salary into the account so after a few months I realized my now-defunct Australian current account was very close to $0 (I had left a few dollars in there when I left). I emailed them and asked them to close the account to which they replied I needed to send a snail-mail le…
Re: Mail a Letter Online
#47Re: Mail a Letter Online
#48Bill Atkinson, the storied early Apple engineer, has an app for this as well, but I have not used it and can't vouch for it. But it's worth noting that when Bill himself went to have his own photography book printed by a publisher, he made modifications to the printing equipment before he was satisfied with the quality. http://www.billatkinson.com/aboutPhotoCard.html
Re: Mail a Letter Online
#49Re: Mail a Letter Online
#50We've actually been working on something similar. Our goal is to make it as dead simple to send a letter as possible in USA. We'd love any feedback people have! https://papermail.in Feel free to drop us a note at support@papermail.in if you have thoughts :)