Trusteer Rapport

Richie-from-the-Boro

BAA1, stick with your opinion, as I stated earlier you are entitled to it.

#3 you said "" In my opinion, Rapport is a good piece of software "" that means you recommending Crapport on a ' techie ' site, where it can be read by all including nebies who come here for advice and may read your endorsement of this product. At least they can now see other individuals views of rapport.

Your so called opinion is rendered worthless, you are so wide of understanding anything about this subject other than being a google-mechanic, here .. do .. your google [ing] with just these two words [ rapport problem ] even a big companies expensive pro PR machine can't stop the truth coming out.

And you recommend it .. .. .. give~your~ed~a~shake lad !

debitcardmayhem

BAA1 wrote: »

I cannot find any reviews or info that confirms if Rapport actually functions in the way that you suggest.

Keystroke Encryption: Rapport encrypts sensitive information from the moment it is typed into the keyboard until it reaches the browser, thus preventing information from being read or tampered with before it reaches the browser. Keystrokes are encrypted very low in the operating system’s kernel, and are kept encrypted inside the kernel and user space.

Ahh very low in the kernel mmmmm what if I happen to run my rapstar keyboard player in a virtual machine, who get's the bottom line of the keystroke. As I often call rap "the silent c in crap " put the extension on rapport and then why-eye-pet Hello Rich:beer: calls it cRapport. PS keyloggers will get it before crapport will every time, mind you you will notice your pc slowing if both are active at the same time

Richie-from-the-Boro

BAA1 wrote: »

First Direct are part of HSBC and both the HSBC and First Direct websites recommend Trusteer Rapport. Not sure if they "bombard with popups" like you say Santander do tho ?

I posted this some time ago reference the snake oil OITC on this site :

There was a post some weeks ago in this section of the forum, reference Virgin / Kaspersky / Rapport ! - I said at that time "" never in a million years, not Virgin, or HSBC Rapport, not with a barge pole. Why trust anyone ? just because it's your bank doesn't make them experts, it arguably doesn't even make them any more expert than you are, yet they frighten you the customer into putting one more piece of software onto your puter. HSBC login system already requires a specific PIN and a variable password [ changes each time you log in ] and a 3 wrong strikes and your locked out fall back position.

I don't trust any of the words that the Okie Island Trading Company have to say about the validity of Rapport, and certainly not their testing methodology. My understanding is it eats RAM, slows your net experience, has low detection capabilities, high false positives, and any program without a reverse gear [ uninstaller ] should not be allowed on any computer. Your computer is your responsibility, keep it, and a good AV, clean and updated and you won't need this extra burden. There's nothing new about keyloggers they've been around since the days of BB's, [ DOS version of the internet ] I'm not sure if (a) the banks have been scammed into paying money to Rapport, by Rapport or (b) the banks are scamming the customers with Rapport.

- all banks, not just HSBC have a ' variable password ' , Barclays for example have a calculator [ pin sentry - see * below ] version of variable password, so even if Rapport was not on your system and a ' bot ' was sent your keystrokes [ see ** below ] they would not be able to [ see *** below] get into your bank. The banks have been negligent, their product assessment is to say the least, very very pedestrian.

- so Rapport does not work, but even if it did it's redundant and rendered useless for the reasons given above !
- going back to my earlier observation ' not with a barge pole ' why the banks missed / disregarded the obvious I've no idea other than they will be able to try use it as one more ' cop out ' for not paying out.
* looks like a calculator into which you put your card, it gives you a one time only, unique, pre-entry, 8 digit code that works for a very [ minutes ] limited time.
** in the case of HSBC the variable code is valid for that unique one very limited time only, any bot collecting the info would find it totally useless seconds later.
*** I just logged onto my HSBC account seconds apart from both IE8 & Chrome and my bank let me in, but demanded a different ' variable password '
_________________

Everyone wants a bit of the action on your personal PC, you'd better bet your mortgage its not for your benefit, no way !

I'm with HSBC, they want me to install a similar [ non logger ] package.
I'm with Virgin Media, they want me to install a similar [ non logger ] package
I'm with Microsoft O/S, they want me to install a similar [ non logger ] package

I was with the Midland Bank 24 years ago when I was invited to be a member of their beta test team for internet banking, in those 25 years I've never had any problems whatsoever. Midland is of course now HSBC.
I will not be taking up any parties offer to install their software onto my machine. My machine is just that, mine ! Mine to keep clean and un-compromised.

__________________

- - - things have improved slightly in terms of CPU cycles / compatibility since those days when I posted the above, but ;

- no one involved in the security world would allow customer ID’s to be saved in a browser
- your puter may not be public / or / shared as far as you know but half the worlds puters have unsecured modems / routers etc so they might as well be shared
- and of course it may be stolen, or worse still taken to PCWorld for their gibbons to play with
- any script kiddie doesn't need a keylogger anyway, easy .. .. just attack [ reverse engineer ] the storage
- OITC ' guarantee' security even on an infected system, what ? they know the puter is infected yet they let it function inside a banks servers ?

NOTE : - rooksbas.log, koan.log, backend.log and backend-cfg.log

System

RussJK wrote: »

How about looking in the settings...? It's common knowledge.

Thanks for pointing me at the location where relevant info can be found.

One of the advanced policy settings states:

Passwords you enter into your sensitive websites are classified by Rapport as Personally Identifiable Information (PII). For Partner Websites Rapport may classify additional information, such as your user ID, as PII, based on the policy chosen by the website’s owner. When you browse the web and enter text that matches your PII into other websites, Rapport analyzes these websites and if they are unknown Rapport triggers a warning which requires your action. By doing this Rapport protects you against fraudulent websites that try to steal your PII (an attack known as phishing). Below you can find a list of your PII. If you wish to exclude a certain password or user ID from the list, simply uncheck it and Rapport will not warn you when you enter this password or user ID into unknown websites.

Some of the language used by people here seems to be trying to scare people away from Rapport, the term "keylogger" is being used to describe the above policy when the usual definition for a keylogger applies to malware that sends data to a malicious third party - this is obviously not the case with Rapport.

However, everyone is entitled to their own opinion, a number of people have joined in on this thread with emotive language against Rapport and obviously feel strongly negative about it's suitability, but there are just as many positive reviews out on the web so my opinion remains unswayed.

System

Richie-from-the-Boro wrote: »

BAA1, stick with your opinion, as I stated earlier you are entitled to it.

#3 you said "" In my opinion, Rapport is a good piece of software "" that means you recommending Crapport on a ' techie ' site, where it can be read by all including nebies who come here for advice and may read your endorsement of this product. At least they can now see other individuals views of rapport.

Your so called opinion is rendered worthless, you are so wide of understanding anything about this subject other than being a google-mechanic, here .. do .. your google [ing] with just these two words [ rapport problem ] even a big companies expensive pro PR machine can't stop the truth coming out.

And you recommend it .. .. .. give~your~ed~a~shake lad !

This is a discussion board / thread, hence members of the board may have differing opinions. You do not know anything about my technical knowledge or understanding and I do not know what your credentials are either, so I could say the same about you "you are so wide of understanding anything about this subject" but I will not because that is not my style.

Your posting style does not sway my opinion and renders the information you post worthless to me. Newbies can read the whole thread and make up their own minds. Just because you have an opinion does not make it the only valid case. If you limit the search by just looking for problems, obviously the search only returns problems, but if you widen the search criteria then many other opinions give positive feedback too.

Loanranger

I'm happy with Rapport.
It was recommended by both of the two building societies I use and also by my bank.
My view is that these three organisations employ highly skilled and experienced teams of people to source and recommend software which will reduce attacks on the banks/building societies' systems.
I prefer to rely on these people, and my own experience of the software, rather than the opinion of one person on an internet forum who may or may not have a personal axe to grind.

23n1th

JasX wrote: »

Anyone know if there is a way to stop santander bombardiing me with popups to install this junk when accessing their online banking?

(although thb I'm only with them for a few months to collect the free £100 then I'm off to first direct so I guess I could live with it )

Firefox with noscript or linux. Or change your useragent to an unsupported browser.

BAA1 wrote: »

Trusteer Rapport is a security system that many banks use to improve your PC security during online banking (and can be setup for other web pages where you type passwords)

In my opinion, Rapport is a good piece of software to have correctly installed and running if you use online banking. Check your bank's website for confirmation or simply Google it

I certainly don't agree with you opinion I think a password manager like Keepass does a better job.

BAA1 wrote: »

AFAIK - Rapport is not a keylogger.

BAA1 wrote: »

I cannot find any reviews or info that confirms if Rapport actually functions in the way that you suggest.

In fact, I use the same password on a couple of different websites (not banks) that I monitor with Rapport and it does not highlight the fact that I have used the same password.

Rapport does do the following:

The reviews I have read seem to suggest it is a good piece of software, so I am sticking with my opinion.

It is a keylogger. If you run HJT with Rapport installed you will find this:

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Program Files\WinPcap\rpcapd.exe

"rpcapd" is a Unix program and "WinPcap" is the windows version. Both are an open source library for packet capture and network analysis. WinPcap includes a kernel-level packet filter, a low-level dynamic link library (packet.dll), and a high-level and system-independent library. Website description: WinPcap is the industry-standard tool for link-layer network access in Windows environments: it allows applications to capture and transmit network packets bypassing the protocol stack, and has additional useful features, including kernel-level packet filtering, a network statistics engine and support for remote packet capture. WinPcap consists of a driver, that extends the operating system to provide low-level network access, and a library that is used to easily access the low-level network layers. This library also contains the Windows version of the well known libpcap Unix API.

This is a valid program and as stated is open source, but if its on your system without a valid program then you have a problem, rapport installs this. Use google type "rpcapd keylogger" and you'll see what I mean. You only need to look at the list of programs its in to see that its there for one thing http://www.winpcap.org/misc/links.htm capturing your information.

The majority of the major UK banks recommend Trusteer Rapport.

The negative comments seem to be sponsored by Sophos who are a competitor to Trusteer so no surprise that they would attempt to give it bad press.

Sorry, but I will believe what the major banks say rather than someone I do not know on this forum

Its believing the banks meant us no harm that got us into this financial mess, they only thing they are trying to do is pass the buck. They can say if money disappears from your account well its your fault you didn't have rapport installed. When in actual fact its their security procedures that are rubbish.

BAA1 wrote: »

Some of the language used by people here seems to be trying to scare people away from Rapport, the term "keylogger" is being used to describe the above policy when the usual definition for a keylogger applies to malware that sends data to a malicious third party - this is obviously not the case with Rapport.

However, everyone is entitled to their own opinion, a number of people have joined in on this thread with immotive language against Rapport and obviously feel strongly negative about it's suitability, but there are just as many positive reviews out on the web so my opinion remains unswayed.

A keylogger is a keylogger, whoever uses it. It is what it is.

System

23n1th wrote: »

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Program Files\WinPcap\rpcapd.exe
...
Its believing the banks meant us no harm that got us into this financial mess, they only thing they are trying to do is pass the buck. They can say if money disappears from your account well its your fault you didn't have rapport installed. When in actual fact its their security procedures that are rubbish.
...

HijackThis O23 section reports include legitimate services.

As you say, rpcapd.exe is a legitimate service, but is used by many software programs (not just Rapport)

What the country's "financial mess" has to do with this thread I do not know.
Can you provide any evidence that banks have refused to repay customers if money disappears from their account if they use online banking and they do not have Rapport installed ?

23n1th

BAA1 wrote: »

HijackThis O23 section reports include legitimate services.

I did not say is was illegitimate did I?

As you say, rpcapd.exe is a legitimate service, but is used by many software programs (not just Rapport)

Yes I did. It proves what it does, which is capture your information. Depending on the implementation it could capture all your information and since you only have the software vendors word on it you don't know. I'd rather not have a kelogger/packet sniffer on my computer.

What the country's "financial mess" has to do with this thread I do not know.
Can you provide any evidence that banks have refused to repay customers if money disappears from their account if they use online banking and they do not have Rapport installed ?

I was merely commenting on your naivety with regards to who's interest the banks have at heart its certainly isn't ours, you want to believe everything they say thats up to you. Why would I provide proof about simple speculation????

ChiefGrasscutter

Actually much of this has all been discussed over on the savings board
Here is one thread for you all to mull over - some 311 posts in the thread having been read some 62000 times by interested viewers.

https://forums.moneysavingexpert.com/discussion/1579343