OnLine Banking

[JConLine]

I have never been a believer in online banking but my sister-in-law has decided this is what she wants to do. She is running XP pro sp2, ESET3, Zemana Antilogger, Spybot, and Windows Firewall behind a Linksys Router with DD-WRT installed. Would you have her add any products or is this sufficient protection for online banking?

thanks,

jc

[SteveTX]

Hmmm. Yes. I would add SSL Blacklist extension to Firefox, and use that as your primary browser.

[JConLine]

Thanks Steve,

I'll check it out.

jc

[markoman]

Also, I would use something better than windows firewall. Maybe Zone Alarm free edition?

[Fly]

{QUOTE-> Also, I would use something better than windows firewall. Maybe Zone Alarm free edition? <-QUOTE}

I don't know if that's a good idea. It is seriously outdated, isn't it ?
Although I MAY (not sure) have read something about an update, I'm sorry to be this fuzzy.

And while I can't prove it, I've read that the owners of Zonelabs/Zonealarm have connections with the Mossad. Perhaps they even own it.
Pick your poison. ::)

[JConLine]

How about Online Armor? I've been using it for some time, but I don't do any online banking either.

jc

[Peter2150]

{QUOTE-> How about Online Armor? I've been using it for some time, but I don't do any online banking either.

jc <-QUOTE}

I think Online Armor would be fine. All I use for security is Online Armor(paid version) and Sandboxie(paid) and I not only do online banking, but now even deposit checks on line.

Two precautions. 1) good passwords, and 2) I always exit the browser and delete the sandbox contents.

Not had any problems and have been doing it this way for a number of years.

Pete

[JConLine]

Pete,

Thanks for the response, just Sandboxie and Online Armor, interesting.

jc

[Creer]

{QUOTE-> How about Online Armor? I've been using it for some time, but I don't do any online banking either.

jc <-QUOTE}
Please note that Online Armor (paid) has also special mode, called Banking Mode for Online Banking transactions.
I think it is very great and useful feature, more about that:
http://tallemu.com/safe-online-banking.html

[tonyseeking]

{QUOTE-> I have never been a believer in online banking but my sister-in-law has decided this is what she wants to do. She is running XP pro sp2, ESET3, Zemana Antilogger, Spybot, and Windows Firewall behind a Linksys Router with DD-WRT installed. Would you have her add any products or is this sufficient protection for online banking?

thanks,

jc <-QUOTE}

Install Virtualbox and then run Ubuntu within Virtualbox.

[tonyseeking]

{QUOTE-> Hmmm. Yes. I would add SSL Blacklist extension to Firefox, and use that as your primary browser. <-QUOTE}

And where would I get SSL Blacklist extension to Firefox?

[ruinebabine]

How about DefenseWall's "Go Banking/Shopping mode"
{QUOTE-> Go Banking/Shopping mode is a special browser mode that allows safe access to online banking and shopping. While in this mode, your information is safe from untrusted applications and processes. <-QUOTE}

[LoneWolf]

{QUOTE-> How about DefenseWall's "Go Banking/Shopping mode" <-QUOTE}

That is what I use for banking/shopping online.
Never have had any problems using this method.

[ruinebabine]

{QUOTE-> That is what I use for banking/shopping online.
Never have had any problems using this method. <-QUOTE}
Exactly same good feedback from me, about this DW's feature.

[philby]

{QUOTE-> And where would I get SSL Blacklist extension to Firefox? <-QUOTE}

http://www.codefromthe70s.org/sslblacklist.aspx

philby

[tipstir]

Just run the Sandboxie those SSL Blocklist seem old and not featured on Add-on listings through Firefox.

[tonyseeking]

{QUOTE-> How about DefenseWall's "Go Banking/Shopping mode" <-QUOTE}

Yeah, but it's not free :thumbd:

[ruinebabine]

{QUOTE-> Yeah, but it's not free :thumbd: <-QUOTE}Hmm, and where do you read that request in the original post?

[Creer]

{QUOTE-> Exactly same good feedback from me, about this DW's feature. <-QUOTE}
+1.
Also you can look at KeePass - password manager, when you logg in to bank account

[ruinebabine]

{QUOTE-> KeePass - password manager, when you logg in to bank account <-QUOTE}I am also a long time satisfied user of Keepass Password Safe and, yes, it is a goodie !

[snowdrift]

I like KeePass too, but for $30US, have you tried AI RoboForm? It will fill out the passwords for you on the webforms. It's amazing.

Also, there is now this free start-up:

https://lastpass.com

[snowdrift]

Sorry, but I cannot resist (re: "Kee"Pass):

I keed! I keed!

http://www.spike.com/video/i-keed-triumph/2480928

[Creer]

{QUOTE-> I like KeePass too, but for $30US, have you tried AI RoboForm? It will fill out the passwords for you on the webforms. It's amazing.

Also, there is now this free start-up:

https://lastpass.com <-QUOTE}
Well, yes but unfortunately RoboForm still doesn't support Opera browser which is my main browser.

[LoneWolf]

{QUOTE-> Yeah, but it's not free :thumbd: <-QUOTE}

Something's are worth paying for.

[fuzzylogic]

I'd second Roboform, its a fanastic program, works well and I like password generator, makes some good passwords that are nice and strong and you can store with Roboform. Also install Keyscrambler, which now works with firefox to protect against keyloggers.

[caspian]

{QUOTE-> I think Online Armor would be fine. All I use for security is Online Armor(paid version) and Sandboxie(paid)
Pete <-QUOTE}

You don't use keyscrambler or anything like that to protect against keyloggers?

[tonyseeking]

{QUOTE-> I think Online Armor would be fine. All I use for security is Online Armor(paid version) and Sandboxie(paid) and I not only do online banking... <-QUOTE}

Hey Pete, why do online banking through Sandboxie? What does that achieve to secure your session?

[tonyseeking]

{QUOTE-> http://www.codefromthe70s.org/sslblacklist.aspx

philby <-QUOTE}

I found out its outdated, making it rather useless.

[tonyseeking]

{QUOTE-> I am also a long time satisfied user of Keepass Password Safe and, yes, it is a goodie ! <-QUOTE}

Have you noticed however, no new version has been relased for ages. They still working on it? Or had it achieved perfection? :argh:

[tonyseeking]

{QUOTE-> I like KeePass too, but for $30US, have you tried AI RoboForm? It will fill out the passwords for you on the webforms. It's amazing.

Also, there is now this free start-up:

https://lastpass.com <-QUOTE}

Does this mean I can remove all passwords from my firefox "saved passwords" and only use lastpass which keeps and encrypts all passwords on my HD?

[tonyseeking]

{QUOTE-> You don't use keyscrambler or anything like that to protect against keyloggers? <-QUOTE}

I have used a PC for 20 years, never been infected with a keylogger.

keyloggers are only usually found in warez or pirated/cracked files. So avoid that illegal junk and you will never get a keylogger to begin with.

But you can also just get Neo's Safekeys.

[Creer]

{QUOTE-> Does this mean I can remove all passwords from my firefox "saved passwords" and only use lastpass which keeps and encrypts all passwords on my HD? <-QUOTE}
Keeping passwords in browsers is highly dangerous:
http://www.info-svc.com/news/2008/12-12/

[ruinebabine]

{QUOTE-> Have you noticed however, no new version has been relased for ages. They still working on it? Or had it achieved perfection? :argh: <-QUOTE}
How 2 months mean "age" for you??
http://keepass.info/

[markoman]

{QUOTE-> I have used a PC for 20 years, never been infected with a keylogger. <-QUOTE}

Well you can't be sure of that. All you can say is that in 20 years you have never noticed any behaviour that made you think of being infected by a keylogger.

[tonyseeking]

{QUOTE-> Keeping passwords in browsers is highly dangerous:
http://www.info-svc.com/news/2008/12-12/ <-QUOTE}

An attacker need not have full control over a target server or a victim's computer to obtain a password from their web browser. Highly unlikely with my PC and skills :argh:

And are you hinting that the solution is using https://lastpass.com/?

https://addons.mozilla.org/en-US/firefox/addon/8542

BTW, this concerns me when I installed the firefox plugin,, it says "I UNDERSTAND THAT MY ENCRYPTED DATA WILL BE SENT TO LASTPASS"

What the hell is that for? They can decrypt my personal data, using their own backdoor password.