London, England. 25/05/06
For online poker players, trust and security are primary concerns. Knowing that someone cannot easily learn your poker-room password and take your money is important – and let’s face it – it helps us sleep at night.
Also of paramount concern is the knowledge that the poker rooms which you play on take steps to prevent your data from being intercepted by third parties (their software developers should maintain professional standards and consider ethics and security in their work as a matter of routine )
Poker companies are happy to tout their SSL and RSA encryption, but how secure is your data REALLY?
Security experts have long acknowledged that you are only as secure as the weakest point in your defenses. You might have bulletproof glass on windows, and walls of steel six inches thick… If you leave the back-door unlocked you are in a vulnerable position nevertheless. That is the case for many of the poker clients in use today.
Case Study:
Recently we installed and studied several popular poker clients on a personal computer running the Windows XP Operating System. To our amazement, Many poker-room software vendors software packages insert unencrypted username and password into your PC’s system registry (puzzling.. given that they also store an encrypted version of the password also!)
The Proof:
CD POKER
Noble Poker, Titan Poker and ALL other skins on the iPoker Network are affected
Food for Thought – Poker viruses
Recently viruses have emerged which steal your poker passwords and it is surely the duty of the companies we wager with to make sure our data is secure on our end and on their end – both from `poker viruses’, trojans, and anyone who happens to be browsing your computer registry!
What can I do?
1. Email your poker provider today and tell them to make your data secure TODAY!.
2. It may be possible to remove the offending registry key for some clients. Do this only if you know what you are doing (and take a backup!) if you choose to do so!