Yackie Mobile - Website Security & Privacy Concerns

ocknock · **Yackie Mobile - Website Security & Privacy Concerns -** 29-10-2007, 19:56

I'm tempted by the free Yackie Mobile SIM card offer, but I'm concerned about their website security and privacy.

Is anyone else concerned?

SECURITY
The YackieMobile.com web page for ordering is not secure.
The SSL security certificate expired on 17 Oct 2007.
Screenshot showing expired SSL certificate is attached to this post.
https://www.yackiemobile.com/order

Also, the page to submit personal information is not secure. I tried forcing the URL to https, but it reverts back to regular http without encryption.
This means that all personal information, including name, address, birthdate and security questions are transmitted without encryption.
http://www.yackiemobile.com/members

Yackie Mobile's security policy states the following:

Quote:

For our on-line web reservation service, we use industry-standard SSL-encryption and proprietary security methods to protect data transmissions and to provide secure sessions.

PRIVACY
One of the security questions required is one's mother's maiden name. In the US, this answer is used for some financial institutions.
Considering that this required security question is transmitted without encryption, I'm concerned about how private the information remains.

In the wrong hands this information can be used for identity theft.

GadgetKen · 29-10-2007, 21:02

You might want to send them an email and let them know they need to renew their web security certificate. Should be relatively easy for them to do.

I'm not as concerned with this on getting the initial complimentary sim card (just got mine by certified mail this morning) because no financial information required for this transaction. However, if they don't fix this, I would be more apt to use a proxy financial service like Paypal rather than directly using a credit card to add additional airtime if my experience with the initial balance is favorable (will be testing it in the Caribbean in a few weeks).

ocknock · 29-10-2007, 21:11

GadgetKen,

I've already sent them an email and got a response, but they didn't address my specific questions.

YackieMobile · 29-10-2007, 22:20

Was changed and renewed Last friday, now it is up to 2009

ocknock · 29-10-2007, 23:30

I can confirm that Yackie Mobile's website is updated with a new, valid SSL certificate and the form to submit personal information is now encrypted. In fact, that web page is forced to use SSL, which is a very good thing.

n875 · 30-10-2007, 00:13

Quote:

Originally Posted by ocknock

I can confirm that Yackie Mobile's website is updated with a new, valid SSL certificate and the form to submit personal information is now encrypted. In fact, that web page is forced to use SSL, which is a very good thing.

Not done yet... They need to fix here too...

http://my.yackiemobile.com

YackieMobile · 30-10-2007, 00:41

Quote:

Originally Posted by n875

Not done yet... They need to fix here too...

http://my.yackiemobile.com

This web site is not any more used

All info are now in the www.yackiemobile.com account

My.yackiemobile will be close in few days

	(#2)
GadgetKen (Offline) Senior Member Prepaid Expert Posts: 342 Join Date: 14 Dec 2004 Location: Connecticut, USA Country:	29-10-2007, 21:02 You might want to send them an email and let them know they need to renew their web security certificate. Should be relatively easy for them to do. I'm not as concerned with this on getting the initial complimentary sim card (just got mine by certified mail this morning) because no financial information required for this transaction. However, if they don't fix this, I would be more apt to use a proxy financial service like Paypal rather than directly using a credit card to add additional airtime if my experience with the initial balance is favorable (will be testing it in the Caribbean in a few weeks). Phones/Wireless Devices: Doogee S90, Isatphone Pro, Amazon Kindle 3G, SkyRoam MiFi device, Karma MiFi device, AT&T Liberate MiFi device Sim Cards: T-Mobile (Mint), AT&T (Mifi device or Kindle), Koko Satphone: InMarSat Broadband US Wireless Data: AT&T postpaid, Sprint (Karma Mobility prepaid) Broadband International Data: SkyRoam VOIP: Skype

	(#3)
ocknock (Offline) Junior Member Newbie Posts: 7 Join Date: 26 Oct 2007 Country:	29-10-2007, 21:11 GadgetKen, I've already sent them an email and got a response, but they didn't address my specific questions.

	(#4)
YackieMobile (Offline) DEALER Prepaid Fan Posts: 173 Join Date: 30 Aug 2006 Location: Fort Lauderdale Country:	29-10-2007, 22:20 Was changed and renewed Last friday, now it is up to 2009 We make your Money Mobile Sent from my Iphone with my Paytoo Mobile Sim Wallet

	(#5)
ocknock (Offline) Junior Member Newbie Posts: 7 Join Date: 26 Oct 2007 Country:	29-10-2007, 23:30 I can confirm that Yackie Mobile's website is updated with a new, valid SSL certificate and the form to submit personal information is now encrypted. In fact, that web page is forced to use SSL, which is a very good thing.