Online Banking with Linux

ricky101

Hi,

Some quarters say Linux is a more secure system than Windows.

Most banks suggest using Trusteer Rapport which can only be used with Windows.

If I use Linux for banking, is it really safer ? and the key question, if there was a banking problem/fraud etc, could any claim be rejected by the bank because I was using Linux instead of Windows ?

Thanks

Roland_Sausage

The biggest weakness in online banking is the user. Linux isn't going to protect you if you've got a habit of responding to phishing emails or using crap passwords.

pmjenkins

ricky101 wrote: »

If I use Linux for banking, is it really safer ? and the key question, if there was a banking problem/fraud etc, could any claim be rejected by the bank because I was using Linux instead of Windows ?

I have the same dilemma.

I have a clean copy of Linux running on a virtual machine that I only use for on-line banking which should be safer. However if something happened to me the banks might wash their hands because I wasn't using Rapport.

At least with Windows (and Rapport) provided I have anti-virus software and the latest OS updates I should be OK???

Robisere

https://support.kaspersky.co.uk/kes8linux

You will have to configure Kaspersky to use it on Linux, but Kas has a feature called "Safe Money" which uses a Protected Browser page. This is completely closed to anything else but online baking, or wahtever other financial product you set it up for. I use it in Windows, but if you are using Linux you will have to have a good long read of the link first.

MiserlyMartin

I don't believe you are required to use Rapport, its only advisory. I always decline to install it, I have enough software cluttering up my PC as it is! It looks as useless as McAfee!

henm2

I have not come across any bank where you are required to use Rapport with your online banking. I never use online banking on a windows system and always use Linux based systems for it such as Linux Mint as it is inherently much safer.
2 factor authentication as used by many banks also helps with security. One example being HSBC's secure key https://www.hsbc.co.uk/1/2/customer-support/online-banking-security/secure-key

TrustyOven

I use Linux, for many many years.
I doubt that Linux is safer in some attack vectors.

A lot of attacks now occur within the context of the browser, so OS level security isn't as relevant as it once was.

Boot sector viruses: not relevant
Executable file viruses: not really relevant
Executable file trojans: possibly relevant (patched version of your browser etc)
Rootkits: relevant but not so specifically a target for banking
Worms: not relevant for banking

Browser XSS: yes very relevant
Browser JavaScript execution: yes very relevant
Browser SSL certificate faking: yes very relevant
Email phishing / scamming with links that open in your browser: very relevant


It's more about the browser these days and this could mean that possible vunlerabilities on windows are also targettable on linux. Same with common addons like javascript and Flash.

I run Firefox with NoScript. I could also look to get more extensions to protect me. NoScript does some XSS protection and also lets you specify which site's javascript to execute in your browser. Helps somewhat but still no guarantee of no bank hack.

Kernel_Sanders

Can you not use Rapport in conjunction with WINE?

Shakin_Steve

Robisere wrote: »

https://support.kaspersky.co.uk/kes8linux

You will have to configure Kaspersky to use it on Linux, but Kas has a feature called "Safe Money" which uses a Protected Browser page. This is completely closed to anything else but online baking, or wahtever other financial product you set it up for. I use it in Windows, but if you are using Linux you will have to have a good long read of the link first.

If you download the free version of avast, it includes it's own browser and, like kaperski, has a safe zone for online banking. Oh.....and it's not Russian.
Personally, I use the apps provided by each bank on my iPad.

Robisere

Shakin_Steve wrote: »

If you download the free version of avast, it includes it's own browser and, like kaperski, has a safe zone for online banking. Oh.....and it's not Russian.
Personally, I use the apps provided by each bank on my iPad.

https://en.wikipedia.org/wiki/Kaspersky_Lab

"... operated by a holding company in the United Kingdom."

Some people see Conspiracy everywhere. Kaspersky is the world's leading Internet Security company, all major reviews consistently place it at No.1. Do you seriously see this as a problem? I have some tinfoil if you need to make a hat...

And who, or what, is kaperski?