You can not trust SSL Secure Socket Certificates.
"TRUSTED" Fraud, Internet Fraud, Credit Card Fraud
ABOUT CREDIT CARD FRAUD
The next time you order checks have only your initials (instead of first name) and last name put on
them, if someone takes your check book they will not know if you sign your checks with just your
initials or your first name but your bank will know how you sign your checks. Put your work phone # on
your checks instead of your home phone. If you have a PO Box use that instead of your home address, if
you do not have a PO Box use your work address. Never have your SSN# printed on your checks you can
add it if it is necessary but have it printed and anyone can get it. Place the contents of your wallet on
a photocopy machine, do both sides of each license, credit card, etc. You will know what you had in your
wallet and all of the account numbers and phone numbers to call and cancel.
Keep the photocopy in a safe place. File a police report immediately in the jurisdiction where it was
stolen, this proves to credit providers you were diligent, and is a first step toward an investigation
(if there ever is one).
Call the three national credit reporting
organizations immediately to place a fraud alert on your name and Social Security
number
.
Applications for credit can be made over the internet in your name. The alert means any company that checks your credit knows
your information was stolen and they have to contact you by phone to authorize new credit.
Equifax: 1-800-525-6285
Experian (formerly TRW): 1-888-397-3742
Trans Union: 1-800-680-7289
Report Credit Card Fraud
- REPORT CREDIT CARD AND INTERNET FRAUD — THEN FIX THE FRAUD . Call the three national credit reporting organizations immediately to place a fraud alert on your name and Social Security number.
- SECURITY MAILING LIST - Get the latest Security Breach Information on the Network Newsletter.
Credit Card Fraud Resources
The Internet Fraud Watch
maintains a website on which registered users can leave comments about e-commerce transactions and other
related issues. The site, which is operated by the National Consumer League, has links to United States
Federal Government consumer related departments, selected state government and state private agency consumer
issue websites, as well as links to a few Canadian, a few international and a few organization websites.
There is a feature article and an archive of past articles on consumer fraud issues.
The National Consumers League 1-800-876-7060
the oldest nonprofit consumer organization in the United States, has set up a special National Fraud
Information Center on the Internet for online users to get advice and to report rip-offs.
SCARY STATISTICS ON ONLINE CREDIT CARD FRAUD - MUST READ
Top 10 list of Consumer Fraud Complaints for 2003. The FTC recently announced it's new 2003 report. Online auctions are the worst.
Get Help as a Fraud Victim
Social Security Administration (fraud line): 1-800-269-0271
Internet Fraud Complaint Center (run by the FBI and the National White Collar Crime Center)
National Fraud Information Center
The Internet Fraud Complaint Center 775-295-1818
GET YOUR FREE CREDIT CARD REPORT
SSL Certificates and TRUSTe: Can You Trust Them?
Certificates of Security - SSL - Secure and trusted sites are not secure
Comodo SSL Hack From Security Now show 295
The fundamental problem: ANY CA can certify to ANY user that ANY server owns ANY domain name.
Therefore the consequences of a misplaced trust decision are about as bad as they can be.
• Comodo initially quietly sent a command to its certificate revocation servers designed to tell browsers
to no longer accept 9 certificates signed using its private key.
• Major browsers went beyond this normal revocation process and added hard-coded "do not trust".
• A web server in Iran was briefly using a fraudulent certificate.
Would you think that a program that hides misleadingly named entries in inappropriate areas of the
registry is trustworthy? Me neither, but TRUSTe does.
Can You Trust TRUSTe?
TRUSTe is a nonprofit organization set up to help Internet users determine who is worthy of their trust.
Its business model created a conflict of interest in that it gets its income from the companies it is certifying.
Verisign Certificates Can't Be Trusted
Defeat SSL - HTTPS - "HACKER ETHICS" White Hat Unconventional Researchers