Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Why you should cover your a** when using on-line banking

Why you should cover your a** when using on-line banking

Scheduled Pinned Locked Moved The Lounge
securityquestionannouncement
26 Posts 12 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • OriginalGriffO OriginalGriff

    It's not exactly a new problem, is it? A key logging trojan? The real crime here is that our systems are so wide open to this kind of abuse. I don't know how you stop it though, without restricting the flexibility that makes it all work for us in the first place. I guess the only solution is user education - and physical extermination for the culprits, of course...

    Real men don't use instructions. They are only the manufacturers opinion on how to put the thing together.

    H Offline
    H Offline
    Henry Minute
    wrote on last edited by
    #6

    OriginalGriff wrote:

    The real crime here is that our systems are so wide open to this kind of abuse.

    True.

    OriginalGriff wrote:

    I don't know how you stop it though

    I don't have a clue where to begin, apart from the 25 AV programs I run. :-D

    OriginalGriff wrote:

    I guess the only solution is user education

    That is true, but, in an ideal world, it shouldn't be necessary. Internet capable devices should be secure out of the box.

    Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

    R E 2 Replies Last reply
    0
    • H Henry Minute

      OriginalGriff wrote:

      The real crime here is that our systems are so wide open to this kind of abuse.

      True.

      OriginalGriff wrote:

      I don't know how you stop it though

      I don't have a clue where to begin, apart from the 25 AV programs I run. :-D

      OriginalGriff wrote:

      I guess the only solution is user education

      That is true, but, in an ideal world, it shouldn't be necessary. Internet capable devices should be secure out of the box.

      Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

      R Offline
      R Offline
      Rage
      wrote on last edited by
      #7

      Henry Minute wrote:

      in an ideal world

      In an ideal world, nobody would go phishing your bank credentials.

      H 1 Reply Last reply
      0
      • R Rage

        Very efficient, but honestly, it can be a real PITA if you have several transfers to do and/or your phone has no battery or sleeps home when you are away...

        H Offline
        H Offline
        Henry Minute
        wrote on last edited by
        #8

        At least it is secure first, user friendly a close second. Many are user friendly first, secure a distant second.

        Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

        1 Reply Last reply
        0
        • H Henry Minute

          Clickety[^]. I'll say it again, I don't trust the security of on-line banking.

          Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

          K Offline
          K Offline
          keyur soni
          wrote on last edited by
          #9

          It’s true.. But it also depends on how and where you are doing transaction on line..

          H 1 Reply Last reply
          0
          • R Rage

            Henry Minute wrote:

            in an ideal world

            In an ideal world, nobody would go phishing your bank credentials.

            H Offline
            H Offline
            Henry Minute
            wrote on last edited by
            #10

            In an ideal world there wouldn't be banks. :laugh:

            Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

            1 Reply Last reply
            0
            • K keyur soni

              It’s true.. But it also depends on how and where you are doing transaction on line..

              H Offline
              H Offline
              Henry Minute
              wrote on last edited by
              #11

              keyur soni wrote:

              But it also depends on how and where you are doing transaction on line..

              Most of the computers in the article were in people's homes. So that isn't necessarily true, although, if I did do banking on-line, I certainly wouldn't use an internet cafe to do it.

              Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

              1 Reply Last reply
              0
              • H Henry Minute

                Clickety[^]. I'll say it again, I don't trust the security of on-line banking.

                Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

                M Offline
                M Offline
                Mark_Wallace
                wrote on last edited by
                #12

                So the moral of this story is: Don't open attachments in e-mails, don't enter credentials into websites without making sure they've got the right URL, yadda, yadda, and yadda. These friggin' scare stories piss me off. I have to enter three separate codes to be able to pay money out. "Passing those codes back to the creator" would be pointless, because they're generated on the spot, and are valid for only a few minutes -- but they wouldn't be "passed back to the creator", because I don't open attachments in e-mails, I don't enter credentials into websites without making sure they've got the right URL, yadda, yadda, and yadda. Web security really ain't rocket surgery.

                the one rule to remember is: Don't be f***in' stoopid!

                K 1 Reply Last reply
                0
                • H Henry Minute

                  OriginalGriff wrote:

                  The real crime here is that our systems are so wide open to this kind of abuse.

                  True.

                  OriginalGriff wrote:

                  I don't know how you stop it though

                  I don't have a clue where to begin, apart from the 25 AV programs I run. :-D

                  OriginalGriff wrote:

                  I guess the only solution is user education

                  That is true, but, in an ideal world, it shouldn't be necessary. Internet capable devices should be secure out of the box.

                  Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

                  E Offline
                  E Offline
                  Electron Shepherd
                  wrote on last edited by
                  #13

                  Henry Minute wrote:

                  Internet capable devices should be secure out of the box.

                  By and large they are. Install a base version of Windows Server 2008 R2, or Windows 7. Firewalls are on by default, code downloaded from the internet can't be executed (it can't even be downloaded on Server 2008). The problem is that people want their computers to do things, and they want to do those things, and sometimes don't really understand or care about the consequences. Anything that gets in the way is just an annoyance, to be switched off at the earliest opportunity.

                  Server and Network Monitoring

                  1 Reply Last reply
                  0
                  • H Henry Minute

                    Clickety[^]. I'll say it again, I don't trust the security of on-line banking.

                    Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

                    A Offline
                    A Offline
                    annathor
                    wrote on last edited by
                    #14

                    Upss... wrong thread

                    modified on Wednesday, September 29, 2010 6:15 AM

                    H 1 Reply Last reply
                    0
                    • H Henry Minute

                      Clickety[^]. I'll say it again, I don't trust the security of on-line banking.

                      Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

                      T Offline
                      T Offline
                      Tom Deketelaere
                      wrote on last edited by
                      #15

                      I trust mine, for every transaction I have to input my pin + a code given by the site (and never the same one) into a unattached device, I then have to input another code given to me by the device. So I never enter my pin or any other personal data onto my computer.

                      1 Reply Last reply
                      0
                      • A annathor

                        Upss... wrong thread

                        modified on Wednesday, September 29, 2010 6:15 AM

                        H Offline
                        H Offline
                        Henry Minute
                        wrote on last edited by
                        #16

                        I fear that you have posted your interesting opinion in the wrong thread. I am cheesy enough without additions, thank you anyway. :)

                        Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

                        1 Reply Last reply
                        0
                        • H Henry Minute

                          Clickety[^]. I'll say it again, I don't trust the security of on-line banking.

                          Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

                          L Offline
                          L Offline
                          Lost User
                          wrote on last edited by
                          #17

                          According to the report it's the seurity of individual PCs that is the problem here, not the banks' systems.

                          Just say 'NO' to evaluated arguments for diadic functions! Ash

                          H 1 Reply Last reply
                          0
                          • M Mark_Wallace

                            So the moral of this story is: Don't open attachments in e-mails, don't enter credentials into websites without making sure they've got the right URL, yadda, yadda, and yadda. These friggin' scare stories piss me off. I have to enter three separate codes to be able to pay money out. "Passing those codes back to the creator" would be pointless, because they're generated on the spot, and are valid for only a few minutes -- but they wouldn't be "passed back to the creator", because I don't open attachments in e-mails, I don't enter credentials into websites without making sure they've got the right URL, yadda, yadda, and yadda. Web security really ain't rocket surgery.

                            the one rule to remember is: Don't be f***in' stoopid!

                            K Offline
                            K Offline
                            keyur soni
                            wrote on last edited by
                            #18

                            :doh:

                            1 Reply Last reply
                            0
                            • R Rage

                              To make a transfer from my account to another account, I have to provide a code sent to my mailbox that has a lifespan of 5minutes, and another code sent by SMS. I trust on-line banking a lot.

                              N Offline
                              N Offline
                              NormDroid
                              wrote on last edited by
                              #19

                              Same here.

                              Two heads are better than one.

                              1 Reply Last reply
                              0
                              • H Henry Minute

                                Clickety[^]. I'll say it again, I don't trust the security of on-line banking.

                                Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

                                L Offline
                                L Offline
                                Lost User
                                wrote on last edited by
                                #20

                                If you let you machine contract a key logger trojan then yep, its not secure. Unless your bank has a virtual keyboard for logging on with! :)

                                Morality is indistinguishable from social proscription

                                1 Reply Last reply
                                0
                                • L Lost User

                                  According to the report it's the seurity of individual PCs that is the problem here, not the banks' systems.

                                  Just say 'NO' to evaluated arguments for diadic functions! Ash

                                  H Offline
                                  H Offline
                                  Henry Minute
                                  wrote on last edited by
                                  #21

                                  Please do not spoil a good paranoid episode with your facts!!:mad: :laugh:

                                  Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

                                  L 1 Reply Last reply
                                  0
                                  • H Henry Minute

                                    Please do not spoil a good paranoid episode with your facts!!:mad: :laugh:

                                    Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

                                    L Offline
                                    L Offline
                                    Lost User
                                    wrote on last edited by
                                    #22

                                    Oops, sorry! :(

                                    Just say 'NO' to evaluated arguments for diadic functions! Ash

                                    1 Reply Last reply
                                    0
                                    • H Henry Minute

                                      Clickety[^]. I'll say it again, I don't trust the security of on-line banking.

                                      Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

                                      P Offline
                                      P Offline
                                      Pete OHanlon
                                      wrote on last edited by
                                      #23

                                      CharMap, Cut and Paste - one in the eye for keyloggers.

                                      I have CDO, it's OCD with the letters in the right order; just as they ruddy well should be

                                      Forgive your enemies - it messes with their heads

                                      My blog | My articles | MoXAML PowerToys | Onyx

                                      1 Reply Last reply
                                      0
                                      • H Henry Minute

                                        Clickety[^]. I'll say it again, I don't trust the security of on-line banking.

                                        Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

                                        A Offline
                                        A Offline
                                        AspDotNetDev
                                        wrote on last edited by
                                        #24

                                        There were problems with somebody abusing my account (buying junk, changing addresses) and it happened a couple times even after a password and account name change. I had the bank up the security so every time I talk to them on the phone I must give them a master password before they will make any changes. Since then, they have never once asked for that password while talking on the phone. :doh: Not a fan of bank "security".

                                        [Forum Guidelines]

                                        H 1 Reply Last reply
                                        0
                                        • A AspDotNetDev

                                          There were problems with somebody abusing my account (buying junk, changing addresses) and it happened a couple times even after a password and account name change. I had the bank up the security so every time I talk to them on the phone I must give them a master password before they will make any changes. Since then, they have never once asked for that password while talking on the phone. :doh: Not a fan of bank "security".

                                          [Forum Guidelines]

                                          H Offline
                                          H Offline
                                          Henry Minute
                                          wrote on last edited by
                                          #25

                                          Some seem to be better than others, like Rage's, but yeah I'm with you there.

                                          Henry Minute Do not read medical books! You could die of a misprint. - Mark Twain Girl: (staring) "Why do you need an icy cucumber?" “I want to report a fraud. The government is lying to us all.”

                                          1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups