First Direct using Trusteer Rapport software

cottager

stella2009 wrote: »

Is this plug-in really that bad??

I've no idea. Natwest has been offering it for some time, and a reminder about it is still prominent there every time I log in. From the various threads there have been on MSE about it, opinions seem very divided -- some very happy and reporting no trouble at all, and others having all sorts of problems after installing it.

The link I posted earlier was originally provided by someone else in one of the older threads about Trusteer Rapport. The piece seemed a fairly in-depth and thorough report to me, but I'm no geek so how accurate it is I'm in a poor position to judge; but I read it with interest, and it doesn't appear to have any axe to grind so struck me on the face of it to be fairly written and balanced. I believe it gives food for thought, so pass it along as general info whenever there's a new thread about Rapport, for people to read for themselves and make up their own minds.

Personally I decided not to install Rapport. But then for security and some other software I generally do start from a position of scepticism about the claims made, so for me there was enough doubt cast by the article, and also by comments from others on the MSE threads and elsewhere, to reinforce that and not want to install it. However others are clearly very happy with it and report no problems at all, so maybe I'm too sceptical for my own good. Perhaps also much too naive and complacent about the risks I'm running without it.

Psychonaut

I am also concerned about Trusteer Rapport, for a number of reasons. First, it doesn't appear to be available for my operating system and browser, so if First Direct decide to make use of it mandatory, then I'll be shut out of online banking. (In which case, I'll be closing my account and claiming my £100 for being dissatisfied with their service.) Second, the software appears to be some proprietary third-party browser plugin whose inner workings are completely hidden to the user. It seems massively hypocritical to claim that this software improves security when the users of it can't be sure of how it works or what it's doing to their system.

I've therefore raised my concerns to First Direct in a letter to them today:

first direct
40 Wakefield Road
LEEDS
LS98 1FD

1 February 2010

Re: Trusteer Rapport


Dear Sir or Madam:

Yesterday I received a message on the first direct online banking service that you would soon be implementing the Trusteer Rapport service for online banking. I understand that part of this service involves your clients downloading and installing the Trusteer Rapport software on their computers. I would therefore appreciate it if you could answer the following questions for me:

1. Will the use of the Trusteer Rapport software be mandatory in order to access online banking?
2. I understand that Rapport is available only on Windows XP, Windows Vista, and Windows 7 using Internet Explorer 6 and above, Firefox 3 and above, and Google Chrome; and on MacOS Tiger, Leopard, and Snow Leopard using Firefox 3 and above and Safari 4 and above. If use of the software is mandatory, what recourse is available for those clients of yours who use other modern operating systems and browsers, such as GNU/Linux with SeaMonkey or Konqueror?
3. If use of the software is mandatory, will you be making available the full source code for the software so that we can examine for ourselves exactly what it does, and thereby assure ourselves that it does not compromise the privacy of our personal information and the security of our computers?

Sincerely,
[...]

cottager

Trusteer Support have today posted to one of the other Rapport threads, #47 here:
http://forums.moneysavingexpert.com/showthread.html?t=1579343&page=3

Wednesday

I received a letter last week telling me that my access to online banking with Alliance & Leicester had been blocked. When I called them to find out why, they told me that my security details had been "compromised".

When I queried this, they said that keylogging software had been installed on the computer I use and that they would not unblock my online access until I had installed Rapport, and emailed them a screendump showing that the padlock was green.

Can they do this????

I have a Macintosh at home, and one PC in my office that only I use. They could not give me any specific information about the breach - not even the IP address of the terminal concerned. I have my doubts that my Mac could be infected with anything as all downloads are password-protected, and my work PC is very well tied-down with anti-virus (I work in education).

Having read some of the links above, I'm now very suspicious about why they are going to deny me online access to my account unless I install this software and hate the feeling that my bank is manipulating me. I'd change accounts if only I could find even one that isn't as bad as all the rest!

pimento

SparciaM wrote: »

I sent them a secure message asking if they feel a customer must have the software and if it is a pre-requisite for having a bank account with FD.

I'm stuffed then because I only use my (very secure) work PC to log into my First Direct accounts and I'm unable to download any non-authorised software onto it.

Staib

Guys - I work with both HSBC and FD and neither bank has ANY plans to make this compulsory!

We absolutely 'get' that many business networks will prevent downloads - and we have no wish to 'disenfranchise' users of minority operating systems!

Having tested the latest version of Rapport, and then employed a third-party security company to re-test it, we are comfortable that it will help keep our customers safer from phishing and spyware than not using it...

I'm also with David78 on this and have seen no slowdown on any of 3 PC's (including a small netbook) that I have installed Rapport to...

Cheers,

Nick

boxfresh

Hi,

I run Rapport on both PC and Mac and highly recommend it. Install was easy and there’s no fuss when it’s running. I protect all my sessions with websites where I enter personal info – banking, facebook, shopping etc.

Just to be clear, Rapport isn’t antivirus software. It doesn’t try to find or remove viruses or trojans. It stops malware like that from recording sensitive information that you are entering when you are on line. Which would then be used to compromise your account.

I don’t think anyone can guarantee that if you have it on your machine you will never ever have an issue with some of your data being captured but it significantly reduces the chances. The banks pay for this software - the only reason they are offering it to you for free is because they know it works and it will save them/you money in the long run.

I’ve seen another thread (but can’t find it now) where someone adamantly insists that no one should install Rapport because “it gives you a false sense of security” and that the way to avoid problems is to not open attachments from people you don’t know or go to dodgy websites. I have to say I don’t agree with this at all. By having Rapport you improve your chances that you won’t become a victim of malware. It’s a good idea not to visit dodgy websites or open attachments you aren’t sure of but many ‘respectable’ websites (just like this one) fall victim to infection from viruses every day. These days malware can get installed on your machine just by visiting an infected page, without you knowing – the hackers call it a ‘drive-by download’. Antivirus isn’t the stand alone solution that a lot of people think it is either – most antivirus software, even the really expensive stuff, can only spot about 30% of viruses when they are first released into the wild.

So just because you are running Norton or whatever and only visit ‘safe’ sites it doesn’t mean your machine can’t get infected.

In summary – [I think] Rapport is a useful extra layer of protection that compliments the precautions you probably already take.

Some replies to comments I’ve read on this thread…

SpaciaM – The reason First Direct would prefer you to download Rapport from them is because their version will already have been optimised for FD customers. Meaning your on-line banking with them will be protected from the moment you install Rapport. If you down load from the Trusteer website instead you still have to manually activate the protection for FD yourself. It’s also likely that FD will have got it setup to automatically protect any website that you start to enter a FD card number into – even if you forget to protect the site yourself first.

Psychonaut – I doubt the manufacturer will ever release the source code, for two reasons: 1, it’s a commercial product and if they release the source code other companies would be able to copy it and sell their own version without having done the expensive research and development themselves… and 2, releasing the source code would be a gift to thieving hackers who want to find a way around it.

Hope this helps.

stella2009

Okay.

I download and installed the Rapport software from their site today. I noticed instantly that my browser was slower and often displayed an error page!

I am using a MacBook Pro with Snow Leopard and Firefox.

Run the uninstall package and all back to normal......

James_N

stella2009 wrote: »

Your lucky then!! LOL

When this software goes wrong, it really goes wrong!!

I honestly wouldn't touch it, even if I was paid to use it........

Norton had a terrible reputation a few years ago - it's now much improved.
A recent PC Pro review praised it.

SparciaM

According to the digital solutions team of FD they plan on introducing this into their T&Cs that you must use the software to bank with them and if you don't any hacks into your bank account won't be refunded.