'Rapport' Security

masonic

KingL wrote: »

Also, I haven't checked recently, but if I remember correctly, if you keep any written record of your HSBC login credentials (e.g. in Keypass, Egg moneymanager etc) it is a direct infringement of your HSBC terms and conditions.

There seems to be a growing trend towards banks allowing you to keep a written record of login credentials on paper as long as it is suitably obfuscated, as long as the information is never stored electronically. I don't know whether or not HSBC have adopted that position.

The bottom line is if you have stored your login details by any means, you need to be confident that nobody could work out what you were doing and obviously never admit to keeping any record of them.

mr_fishbulb

KingL wrote: »

Also, I haven't checked recently, but if I remember correctly, if you keep any written record of your HSBC login credentials (e.g. in Keypass, Egg moneymanager etc) it is a direct infringement of your HSBC terms and conditions.

I don't think they are that specific. All T&Cs I have seen say along the line of you should take reasonable care to protect your details. That way they can argue if they believe you haven't taken reasonable care on a case by case basis.

ethereal

I may have got it wrong, but from what I can gather, Rapport is a plug-in for your browser, so if you had Firefox 3.5 which comes with Anti-Malware and Anti-Phishing additions anyway, then why add Rapport to it? :undecided

KingL

err, OK - I have looked up the latest HSBC T&Cs and it's much more reasonable than it used to be

2.2 You must keep your Security Number secure and secret
at all times and take steps to prevent unauthorised use of it and your Internet Banking
ID. For example:
• never write or otherwise record the Security Number in a way that can
be understood by someone else;
• never tell the Security Number to someone else including our staff,
unless you are resetting your security number;
• destroy any advice from us concerning your Security Number promptly
after receipt;
• avoid Security Numbers which may be easy to guess such as birthdays,
telephone numbers, dates of birth etc;
• keep your Internet Banking ID in a safe place at all times.
2.3 When acessing the Internet Banking Service you will be given the
opportunity to store your Internet Banking ID on to the terminal or other
device you are using, in the form of a cookie. You must never store your
Internet Banking ID on to a terminal or other device which is readily
accessible to others.
2.4 Once you have logged on to the Internet Banking Service, you must
not leave the terminal or other device from which you have accessed the
Internet Banking Service at any time or let anyone else use it until you
have logged off the Internet Banking Service. You will be responsible for
ensuring that you have logged off the Internet Banking Service at the end
of any session

Baldur

ethereal wrote: »

I may have got it wrong, but from what I can gather, Rapport is a plug-in for your browser, so if you had Firefox 3.5 which comes with Anti-Malware and Anti-Phishing additions anyway, then why add Rapport to it? :undecided

If you are using 3.5, you are a bit out of date - 3.6 has been released for some time.

Rollinghome

Baldur wrote: »

If you are using 3.5, you are a bit out of date - 3.6 has been released for some time.

From yesterday:
"Zero day flaw in Firefox 3.6"

http://www.theinquirer.net/inquirer/news/1592952/zero-day-flaw-firefox

Baldur

Rollinghome wrote: »

From yesterday:
"Zero day flaw in Firefox 3.6"

http://www.theinquirer.net/inquirer/news/1592952/zero-day-flaw-firefox

Ah, the Windows version - good job I use the *nix version.

masonic

Rollinghome wrote: »

From yesterday:
"Zero day flaw in Firefox 3.6"

http://www.theinquirer.net/inquirer/news/1592952/zero-day-flaw-firefox

This is an odd one. The media seem to have lifted it from a hacking forum and run with it. It already seems to have been disputed at the site the where the statement was released and is yet to be confirmed by anyone of repute.

I rather like the solution provided by Secunia:

Do not visit untrusted websites or follow untrusted links.

...always ruining my plans! :rotfl:

Rollinghome

Most such warnings have a large helping of FUD. It's a bad world.

stonethrower

hebron wrote: »

I have just installed this software and have found my boot-up time which is usually 1-2 minutes is now 5 minutes. It takes ages now. I know it's this software because I un-installed it and went back to a minute boot-up time and then re-installed it and went back to 5 or more minutes. Anyone else found this?

yeah got the same problem on my pc but laptop no problem