Is Trusteer/Rapport necessary to be protected by banks' fraud guarantees?

alanq

spenderdave wrote: »

it is certainly a worrying move if NatWest is refusing to pay (£20 from what I recall was the loss)

alanq wrote: »

Business lost £20,000...

What I didn't understand was how the money was moved from the account. Do business accounts not have chip and PIN verification for setting up new payees? If chip and PIN is required then anyone hacking into the account would not be able to transfer funds to themselves simply by being able to log in.

GabbaGabbaHey

Sorry to resurrect an old thread, but IBM have just updated the EULA for Trusteer and it has very worrying implications.

I am an information security professional with over 20 years financial sector experience (including a bank that recommends Trusteer), and have used it for a long time with no (technical) problems. It provides a level of protection against "man in the browser" attacks which is better than any other product that I am aware of.

However, the new EULA basically gives both IBM and your bank full access to your computer and all your files. One quick example: "In addition, You authorize personnel of IBM, as Your Sponsoring Enterprise's data processor, to use the Program remotely to collect any files or other information from your computer that IBM security experts suspect may be related to malware or other malicious activity, or that may be associated with general Program malfunction."

The full EULA is available at http://www.trusteer.com/support/end-user-license-agreement

Sadly, I am about to uninstall Trusteer and would strongly suggest that, if you are keeping it on your PC, you make sure that you have read the EULA.

Cortinaa_GTR

Not having Trusteer installed can reduce your maximum transactional limit with certain banks. This can certainly cause issues for business customers.

TheTracker

No chance I'd ever install it and I advise family members to steer clear of it. I tell family members to use products like 1Password and LittleSnitch as well as keep updates applied frequently. They don't need to be sophisticated to do that, it's less complicated than operating a PVR.

joe134

GabbaGabbaHey wrote: »

Sorry to resurrect an old thread, but IBM have just updated the EULA for Trusteer and it has very worrying implications.

I am an information security professional with over 20 years financial sector experience (including a bank that recommends Trusteer), and have used it for a long time with no (technical) problems. It provides a level of protection against "man in the browser" attacks which is better than any other product that I am aware of.

However, the new EULA basically gives both IBM and your bank full access to your computer and all your files. One quick example: "In addition, You authorize personnel of IBM, as Your Sponsoring Enterprise's data processor, to use the Program remotely to collect any files or other information from your computer that IBM security experts suspect may be related to malware or other malicious activity, or that may be associated with general Program malfunction."

The full EULA is available at http://www.trusteer.com/support/end-user-license-agreement

Sadly, I am about to uninstall Trusteer and would strongly suggest that, if you are keeping it on your PC, you make sure that you have read the EULA.

Are you sure you are not taking this out of context. I have it, used it for years, with no probsit's ,picked up a few dodgy urls.Santander regularly ???Don't even use pc for it? IF you have a problem, and contact Rapport, they ask , that it MAY require to take control of your PC, but, not without consent??? I never gave them consent in my problems, just logged them.Techies will all say no to it, it slows the machine, third party etc. I think it will be Mandatory soon to have it, or the onus will be on the user if you login to a spoof url and lose money.I will keep on using it..The banks have you by the B**** anyway.If anything goes wrong, at least you can prove you have it installed, voluntarily, on their advice, and helps you get any fraudulent money back. BUT, thanks for the notice. Buyer beware;;

bsms1147

Never letting this crapware touch my computer.

joe134

bsms1147 wrote: »

Never letting this crapware touch my computer.

What do you base your evidence it's crapware?
You have more chance of all your Data being used by Google than Rapport, but.Bet you use that?
Let's hope you don't fall victim to Malware, I have, and it ain't no fun.
Your choice, not forced to, that's the name of the thread.

TheTracker

joe134 wrote: »

What do you base your evidence it's crapware?
You have more chance of all your Data being used by Google than Rapport, but.Bet you use that?
Let's hope you don't fall victim to Malware, I have, and it ain't no fun.
Your choice, not forced to, that's the name of the thread.

I am going to choose the software I use, not let a bank do it.

Personally I use BlueCoat on a security gateway that's stops just about everything, Symantec cloud services for all my in and outbound email, clamxav on my desktop, LittleSnitch to know what's going on, and 1password for strong authentication. It could be a different suite as technology and threats change. The chance I'll install a bank's software is zero and I'll stop using the bank if they insist upon its usage.

GabbaGabbaHey

Just to re-iterate: I have no problems with Trusteer technically, and it can protect against attacks that anti-malware products cannot (specifically man-in-the-browser attacks).

What I object to is giving both IBM and my bank (and their sub-contractors and sub-sub-contractors) permission to take a copy of any file on my PC whenever they wish. That ain't gonna happen, and if I have to change banks (or live without internet banking), then that's what I will do.

Other people may be willing to take the risk - but at least it needs to be an informed decision, with an understanding of what access you are giving IBM and your bank to your files.

joe134

TheTracker wrote: »

I am going to choose the software I use, not let a bank do it.

Personally I use BlueCoat on a security gateway that's stops just about everything, Symantec cloud services for all my in and outbound email, clamxav on my desktop, LittleSnitch to know what's going on, and 1password for strong authentication. It could be a different suite as technology and threats change. The chance I'll install a bank's software is zero and I'll stop using the bank if they insist upon its usage.

That's the trouble with technology, it does make one rather paranoid.Like my first Hi-Fi, I spent more time listening for the faults , to rid myself of them, instead of listening to the Music. Very Apt Moniker if I may say so:o. Thanks for the tips.
Stick to my Rapport, nothing is ever foolproof, but, it makes getting my money back if anything goes wrong, AGAIN.:beer: