Comments on: Use a Linux LiveCD to Avoid Windows Malware For Netbanking

By: Stanley

Stanley — Wed, 02 Dec 2009 07:22:08 +0000

Here’s how I have my WinXP box setup:

- Everyday use under least privileged Guest Account only. Admin account is used offline when installing softwares.

- Firefox protected with Sandboxie and No-script.

- The usual combo of firewall and anti-virus. Rarely detects any malware at this point.

But my main PC is Linux which gives me greater peace of mind.

I have two bank accounts. One for savings that is not used online. And one for online banking with one or two grand in it at most mainly for paying bills and all.

By: Viktor

Viktor — Fri, 27 Nov 2009 00:04:11 +0000

Colin, I don’t know if I understood you correctly… A key logger running in your system at the appropriate privilege can get access to almost all keystrokes (Winlogon is a bit more tricky to record). However if you meant a JavaScript key logger, or a key logger designed as a Firefox addon then you can of course avoid being monitored by switching browser. Keep in mind though, Javascript runs on most browsers, so a MITM attack using Javascript that targets your new sessions on Chrome or Opera will eventually get your keystrokes in those browsers as well.

By: Colin

Colin — Fri, 23 Oct 2009 07:38:43 +0000

One tip that you do not have. I use one internet browser for internet banking and one browser for everything else. Naturally do not use Internet Explorer as this integrates into the OS. But perhaps firefox for normal browsing and Chrome or Opera for internet banking. I would doubt if a key logger would be able to jump browsers ( I could be wrong and if so please POLITELY point it out)!

By: liju

liju — Fri, 16 Oct 2009 17:43:47 +0000

Great tips….

It should be a notice to all online users……….I don’t know no any Windows users uses a Live CD even they haven’t heard about a bootable Live OS CD before…

I suggest you to add a description about the scope of portable firefox for windows users in some extended….

Keep it up …

By: Ashwani Kumar

Ashwani Kumar — Fri, 16 Oct 2009 14:52:29 +0000

Thanks for info

another way is use an Linux Vm in yours favorite windows O.S host ;-)

By: Solaris

Solaris — Fri, 16 Oct 2009 11:46:46 +0000

It is good to implement strong security but there are hardware tokens now,
most banks already introduced them. Even if an attacker gets your username
and password they can’t move one finger without the authorization code given
by your personal token.

For those who don’t know what a token is: it looks like a small pocket calculator
that implements cryptographic challange codes if you want to perform
authentication or any operation while online banking. If you want to pay a
bill you will get a code that after being typed in the token, he (the token)
will generate you a response code which you need to type into a
checkbox in order to do any online transaction.

What I told you is from the EU, I don’t know for sure about
other methods based on hardware authentication.