Hi,
 
On Fri, 15 Feb 2008, David Lowe wrote:

>  
> 
> -          Does one need AV protection in a Linux environment?
There are a couple of virus out there targetted at linux. However, they 
are not a significant threat, if you browse wisely. (Running a web browser 
while logged in as root is quite silly).

Does one need AV protection - ?
 Not usually.
 depends. If you browse to suspect sites, accept all cookies immediately, 
you don't need AV protection. You need to change your browsing habits.
> 
> -          Is Yuri right that Linux is inherently more secure for internet 
> banking? 
yes. 
> 
> -          Or is the security really a function of the choice of web browser?
yes. 
Internet Exploder got its name for a good reason - it is insecure.
Security is also a function of the choice of programs on your windows 
computer. If you don't use IE, don't use outlook, don't use MSN messanger, 
your risk of infection drops hugely.

> 
> -          How good is the security in Linux applications that save your
>               passwords?
             The security level varies. As a rule, the more mature the 
              application, the better the security.

>          Would the use of these tools contravene their t&c's? 
Saving passwords in linux would definately violate their t&c. 

I know of one person who has a live CD that he uses for all internet 
banking. A bit of a pain to have reboot the computer to do internet 
banking, but it is secure.

With live distro such as xubuntu, tools such as mklivecd you can make your 
own live CD very easily, which contains a short cut to the bank in the 
bookmarks for the browser. 



> 
>  
> 
> I guess what I'm leading to is that maybe we could argue a case that Linux
> (installed and operated according to spec) really was more secure? Then how
> about we mount a campaign with banks to get them to actively promote Linux
> over the alternatives?  ;-)
You can campaign all you like.
I suspect that supplying prebuilt live CD's will help this campaign 
heaps. 

Derek.
-- 
Derek Smithies Ph.D.
IndraNet Technologies Ltd.
Email: [EMAIL PROTECTED]
ph +64 3 365 6485
Web: http://www.indranet-technologies.com/

Reply via email to