rapport

diggerman123

is this any good ?
thanks
diggerman

ChiefGrasscutter

Endlessly discussed on MSE........mostly on the savings forum.

Do a seach on Trusteer Rapport and you'll find them.

There is one thread entitled Rapport Security which has over 300 posts in it.
That in itself should give you an idea of the amount of argument it provokes.

As with any internet forum all you can do is read the arguments pros and cons and make up your own mind..

RussJK

Nope.

First time I installed it, it had me fretting about a newly piece of installed software - claiming that Voipcheap (recommended by Martin here) was trying to take screenshots of my online banking. Later, Rapport accused itself of doing the same (!), so I uninstalled it.

My wife installed it again recently after she and thousands of other iTunes customers had their credit details stolen (the fault of itunes, not us).

There are no independent tests or expert reviews which demonstrate the effectiveness of the program that I have seen. It seems more a tool to give the appearance of security, rather than necessarily making things safer. There may come a time when banks will try to suggest that you are liable for any fraudulent activity on your account if you don't have Rapport running. In reality, it's easy to find ways around the various methods of protection. I found I could quite easily take screenshots of 'protected sites' for instance, despite that it's supposed to prevent such behaviour. The program didn't detect screenshots if the window of a 'protected site' wasn't in focus, regardless of whether or not it was actually in view. So, all a program would have to do is make a small popup to steal the focus, and then it could take undetected screenshots to its heart's content!

In some ways, it makes you less secure. One 'feature' is that when you login to a site, it'll have a big popup stating "this is the same password you use at X, Y, & Z". Gee thanks for telling everyone! Sure, you can turn it off after the first time - but should this be automatically enabled? It's safer to have only a few passwords that you can remember, so it's perfectly valid to use the same password for many sites (one for normal stuff, another for financials). On the other hand, it is hardly a secure feature for the program to go and blab to everyone exactly which sites have a particular password!

Lastly, it's bit of a resource hog. When I'm not running Firefox, then it was easily the biggest resource hog running consuming more than 25k memory. This is compared to Firefox on 50k, Thunderbird on 7.6k, Avast on 3.8k, Explorer on 4.8k. Considering that Avast's realtime protection is covering many more aspects of security with proven efficacy, then Rapport really can't justify taking up five times more resources for no demonstrable benefit.

Rapport really needs to be proven before banks recommend it like they do. As I said, it's just there for the appearance of security.

DCFC79

I installed it and never had any issues

Richie-from-the-Boro

No !

Rapport

There was a post some many weeks ago in this section of the forum, reference Virgin / Kaspersky / Rapport ! - I said at that time "" never in a million years, not Virgin, or HSBC Rapport, not with a barge pole. Why trust anyone ? just because it's your bank doesn't make them experts, it arguably doesn't even make them any more expert than you are, yet they frighten you the customer into putting one more piece of software onto your puter. HSBC login system already requires a specific PIN and a variable password [ changes each time you log in ] and a 3 wrong strikes and your locked out fall back position.

I don't trust any of the words that the Okie Island Trading Company have to say about the validity of Rapport, and certainly not their testing methodology. My understanding is it eats RAM, slows your net experience, has low detection capabilities, high false positives, and any program without a reverse gear [ uninstaller ] should not be allowed on any computer. Your computer is your responsibility, keep it, and a good AV, clean and updated and you won't need this extra burden. There's nothing new about keyloggers they've been around since the days of BB's, [ DOS version of the internet ] I'm not sure if (a) the banks have been scammed into paying money to Rapport, by Rapport or (b) the banks are scamming the customers with Rapport.

- all banks, not just HSBC have a ' variable password ' , Barclays for example have a calculator [ pin sentry - see * below ] version of variable password, so even if Rapport was not on your system and a ' bot ' was sent your keystrokes [ see ** below ] they would not be able to [ see *** below] get into your bank. The banks have been negligent, their product assessment is to say the least, very very pedestrian.

- so Raport does not work, but even if it did it's redundant and rendered useless for the reasons given above !
- going back to my earlier observation ' not with a barge pole ' why the banks missed / disregarded the obvious I've no idea other than they will be able to try use it as one more ' cop out ' for not paying out.
* looks like a calculator into which you put your card, it gives you a one time only, unique, pre-entry, 8 digit code that works for a very [ minutes ] limited time.
** in the case of HSBC the variable code is valid for that unique one very limited time only, any bot collecting the info would find it totally useless seconds later.
*** I just logged onto my HSBC account seconds apart from both IE8 & Chrome and my bank let me in, but demanded a different ' variable password '
_________________

I'm with HSBC, they want me to install a similar package.
I'm with Virgin Media, they want me to install a similar package
I'm with Microsoft O/S, they want me to install a similar package

I was with the Midland Bank 24 years ago when I was invited to be a member of their beta test team for internet banking, in those 25 years I've never had any problems whatsoever. Midland is of course now HSBC.
I will not be taking up any parties offer to install their software onto my machine. My machine is just that, mine ! Mine to keep clean and un-compromised.

aliEnRIK

I wouldnt touch it

John_Gray

rapport, noun:
a close and harmonious relationship in which the people or groups concerned understand each other's feelings or ideas and communicate well:

Seems to have been misnamed?

GunJack

Never in a million years :mad:

I've had several to fix with this junk on there, all of the users reporting it tells them "don't do this" on many valid progs, including AV progs !!! And the lack of security, slowdowns, conflicts......

Unless hsbc make it compulsory, hell would have to freeze over first

Richie-from-the-Boro

GunJack wrote: »

Never in a million years :mad:

I've had several to fix with this junk on there, all of the users reporting it tells them "don't do this" on many valid progs, including AV progs !!! And the lack of security, slowdowns, conflicts......

Unless hsbc make it compulsory, hell would have to freeze over first

Update - HSBC withdrew the Rapport carp some months ago, I've no idea if its still being touted elsewhere. Their socket layer between yourself and you bank never worked anyway, the SSL doesn't kick in until the data transfer occurs, hence it cannot fend off keyloggers, phishing, man-in-the-middle attacks or other malware behaviour that intercepts (and possibly redirects) communications before it hits the SSL channel.

A keylogger, for example, can still record the username and password used to login to the secure site, intercepting it locally before it gets sent to the site.

GunJack

Richie - hsbc are still asking if you want to install it when you log in, at least they were on friday....

Richie-from-the-Boro

GunJack wrote: »

Richie - hsbc are still asking if you want to install it when you log in, at least they were on friday....

HiYa GunJack

Maybe they have spit their dummy out with me, I've not seen any reference for some weeks now when I log on. And I was on their site Fri morning !