Yackie Mobile - Website Security & Privacy Concerns
 

I'm tempted by the free Yackie Mobile SIM card offer, but I'm concerned about their website security and privacy.

Is anyone else concerned?

SECURITY
The YackieMobile.com web page for ordering is not secure.
The SSL security certificate expired on 17 Oct 2007.
Screenshot showing expired SSL certificate is attached to this post.
https://www.yackiemobile.com/order

Also, the page to submit personal information is not secure. I tried forcing the URL to https, but it reverts back to regular http without encryption.
This means that all personal information, including name, address, birthdate and security questions are transmitted without encryption.
http://www.yackiemobile.com/members


Yackie Mobile's security policy states the following:
PRIVACY
One of the security questions required is one's mother's maiden name. In the US, this answer is used for some financial institutions.
Considering that this required security question is transmitted without encryption, I'm concerned about how private the information remains.

In the wrong hands this information can be used for identity theft.

You might want to send them an email and let them know they need to renew their web security certificate. Should be relatively easy for them to do.

I'm not as concerned with this on getting the initial complimentary sim card (just got mine by certified mail this morning) because no financial information required for this transaction. However, if they don't fix this, I would be more apt to use a proxy financial service like Paypal rather than directly using a credit card to add additional airtime if my experience with the initial balance is favorable (will be testing it in the Caribbean in a few weeks).

GadgetKen,

I've already sent them an email and got a response, but they didn't address my specific questions.

Was changed and renewed Last friday, now it is up to 2009

I can confirm that Yackie Mobile's website is updated with a new, valid SSL certificate and the form to submit personal information is now encrypted. In fact, that web page is forced to use SSL, which is a very good thing.

Not done yet... They need to fix here too...

http://my.yackiemobile.com

This web site is not any more used

All info are now in the www.yackiemobile.com account

My.yackiemobile will be close in few days