'Rapport' Security

Baz1210

I downloaded Rapport Trusteer at the recommendation of HSBC. When I experienced problems I decided to remove it via the 'Add or remove programs' list. This is a feedback message I left on their site:

When I uninstalled Rapport I was treated to a message asking if I was uninstalling because the computer had slowed down or because I was having trouble connecting to the internet. This implies that these problems are known and comparatively frequent. I reject your offer to correct these problems free of charge for the simple reason that you should have warned of these potential problems PRIOR to my having installed the program. It was only by a process of elimination that I found Rapport to be the culprit, which is not only annoying but, after two hours of fiddling with the computer and modem, downright irresponsible. You're statement above ( a statement on their link admitting that users may experience these kind of problems) also implies an unacceptable level of similar complaints. As a matter of interest I use no exotic or unusual software -Windows XP, Internet Explorer, Word and Avast antivirus none of which are rare or unheard of. (Unusual software already installed on your computer was suggested as a possible reason for these issues) Please keep your program. I want nothing more to do with it.

I don't object to the fact that this software failed to mesh with my PC, but I do feel strongly that these possible issues and how to resolve them should have been pointed out before this unwitting PC user decided to install. As it was, only the facts that my printer hung up, the internet became inaccessible and my PC began to work at a snail's pace indicated that something was wrong. If I hadn't guessed that it was the fault of Rapport I would still be trying to resolve these problems now.

G_M

I've been following this thread with interest, esp as 2 of my banks keep offering it.
As of yet they still use the 'added protection' line and are not insisting on its use.

My fear (I think already expressed by someone) is that if one were to suffer a loss via internet banking, they might use your lack of Rapport as grounds to shrug off any reponsibility/liability.

However for now I shall continue to rely on anti-virus, firewall etc.

lwilson_2

HSBC is pushing Rapport on it's UK Internet Banking Site. It was of interest because I find HSBC's security procedures on the UK site to be at least worrying. You can input your identifier on what appears to be an unencrypted page and then the only barriers to complete account access is your DOB which is public record and a six digit number (no alpha and no case).

I installed Rapport and found that it doesn't support my preferred browser Chrome (V5). Hmmmm well I suppose that it is the beta version.

I Switched to Mozilla V3.6 and it worked OK.

When I came to access my HSBC Australia Internet Banking (which incidentally is much more re-assuring access, with a security dongle generating one use keys and passwords as long and as complicated as you wish.) Rapport completely blocked access. Rapport helpline could only suggest turning the program off.

3/10 for usability and worth. I have uninstalled the program and deleted all registry entries.

It would be better if HSBC addressed some of the fundamental security shortcomings in it's access procedures before suggesting that key-logging and interception are more of a concern.

joe134

lwilson wrote: »

HSBC is pushing Rapport on it's UK Internet Banking Site. It was of interest because I find HSBC's security procedures on the UK site to be at least worrying. You can input your identifier on what appears to be an unencrypted page and then the only barriers to complete account access is your DOB which is public record and a six digit number (no alpha and no case).

I installed Rapport and found that it doesn't support my preferred browser Chrome (V5). Hmmmm well I suppose that it is the beta version.

I Switched to Mozilla V3.6 and it worked OK.

When I came to access my HSBC Australia Internet Banking (which incidentally is much more re-assuring access, with a security dongle generating one use keys and passwords as long and as complicated as you wish.) Rapport completely blocked access. Rapport helpline could only suggest turning the program off.

3/10 for usability and worth. I have uninstalled the program and deleted all registry entries.

It would be better if HSBC addressed some of the fundamental security shortcomings in it's access procedures before suggesting that key-logging and interception are more of a concern.

There is a secure site to log IB number on, it,s on last page. until HSBC bring more security for logging in , it,s another added bit. I only use UK sites, so it,s ok.I agree, HSBC need to update their login details to those of their rivals.But until they do, we use what,s available, or change

LeifGR

lwilson wrote: »

When I came to access my HSBC Australia Internet Banking (which incidentally is much more re-assuring access, with a security dongle generating one use keys and passwords as long and as complicated as you wish.) Rapport completely blocked access. Rapport helpline could only suggest turning the program off.

3/10 for usability and worth. I have uninstalled the program and deleted all registry entries.

It would be better if HSBC addressed some of the fundamental security shortcomings in it's access procedures before suggesting that key-logging and interception are more of a concern.

Spot on!!!

For the last thirteen years, my Swedish bank has had a security dongle that produces an authentication response to a challenge from their web site, much more secure than the typical UK bank site. The recently introduced similar solutions that also require a debit card to be inserted (Nationwide, NatWest) are even more secure. This is a much better solution than requiring the installation of yet another software (which may not always be possible or desirable on the PC you wish to use).

joe134

LeifGR wrote: »

Spot on!!!

For the last thirteen years, my Swedish bank has had a security dongle that produces an authentication response to a challenge from their web site, much more secure than the typical UK bank site. The recently introduced similar solutions that also require a debit card to be inserted (Nationwide, NatWest) are even more secure. This is a much better solution than requiring the installation of yet another software (which may not always be possible or desirable on the PC you wish to use).

Hi, I have just opened a Nationwide A/c, no debit card ?supplied with mine.

LeifGR

joe134 wrote: »

Hi, I have just opened a Nationwide A/c, no debit card ?supplied with mine.

Not sure what type of account you have. I was referring to current accounts, specifically Flexaccount, for which I have been issued with a chip+Pin dongle and a debit card, both of which are required to authenticate certain Internet transactions.

Obviously if you have an account that doesn't come with any chip+PIN card, then that wouldn't work, in which case the other solution I mentioned -- a dongle that doesn't require a card to go with it -- would be better than many other security measures.

joe134

LeifGR wrote: »

Not sure what type of account you have. I was referring to current accounts, specifically Flexaccount, for which I have been issued with a chip+Pin dongle and a debit card, both of which are required to authenticate certain Internet transactions.

Obviously if you have an account that doesn't come with any chip+PIN card, then that wouldn't work, in which case the other solution I mentioned -- a dongle that doesn't require a card to go with it -- would be better than many other security measures.

Hi, It,s a flexi a/c I have just opened. I did all the internet security set up just after Xmas, no mention of dongle etc, it,s for my grandaughter who lives in spain.I top it up from my hsbc linked A/c.Have to enquire about it.thanks

Baldur

joe134 wrote: »

Hi, It,s a flexi a/c I have just opened. I did all the internet security set up just after Xmas, no mention of dongle etc, it,s for my grandaughter who lives in spain.I top it up from my hsbc linked A/c.Have to enquire about it.thanks

If there is no Debit Card associated with the Flex account, a card reader will be of no use - see http://www.nationwide.co.uk/rca/Introduction/why.htm

joe134

Baldur wrote: »

If there is no Debit Card associated with the Flex account, a card reader will be of no use - see http://www.nationwide.co.uk/rca/Introduction/why.htm

Hi,Thanks for info. I have debit card with flexi, always have, first time I have seen the card reader though.I have used debit card for years in spain, no fees for exchange, although thats just changed slightly.I will look into it.No mention of how on that site.I,ll contact them direct.How long hs it been out? cheers