Though there is no silver bullet for security vulnerabilities every little bit 
helps. In this case it looks like such a measure would be useful for internet 
banking systems that use two factor authentication with a hardware one time 
password calculator. These beat the social engineering angle of the problem but 
not the infected computer or masquerading website issue. That is where a Ubuntu 
CD that takes you to the banks website would be useful. Of course they have to 
make sure that the transfer of CD to their client is not socially engineered 
itself.
CN

--- On Fri, 3/26/10, Hari Kurup <[email protected]> wrote:

From: Hari Kurup <[email protected]>
Subject: Re: [LUG] Ubuntu to the rescue
To: [email protected]
Date: Friday, March 26, 2010, 7:02 AM

On 2010/03/26 11:42 AM, Simbwa Phillip wrote:-

> I guess the same bank may have passed some info to their customers to
> the effect of ignoring email links that take you to pages that are not
> signed with credible ssl certs.

The title of the article posted was "Can Ubuntu Save Online Banking"?
My answer is -Not really- as securing the end system is only the tip of
the iceberg.

--
Hari
_______________________________________________
LUG mailing list
[email protected]
http://kym.net/mailman/listinfo/lug

LUG is generously hosted by INFOCOM http://www.infocom.co.ug/

All Archives can be found at http://www.mail-archive.com/[email protected]/

The above comments and data are owned by whoever posted them (including 
attachments if any). The List's Host is not responsible for them in any way.
---------------------------------------




      
_______________________________________________
LUG mailing list
[email protected]
http://kym.net/mailman/listinfo/lug

LUG is generously hosted by INFOCOM http://www.infocom.co.ug/

All Archives can be found at http://www.mail-archive.com/[email protected]/

The above comments and data are owned by whoever posted them (including 
attachments if any). The List's Host is not responsible for them in any way.
---------------------------------------

Reply via email to