Using a library computer for online banking ?

AnotherJoe

Wester wrote: »

I am not sure is this is the correct forum to ask this question ,


I have been using a library computer to do my online banking for about one month now when I login I am told not to tick a box if I am on a shared computer . But I have heard that it is not safe to use a public computer for online banking as your security details can be stolen by fraudsters

that is correct


I have heard about using incognito mode how safe is this ?
Its no safer at all.
or not to use the computer until shortly before the computers are switched off for the night

Who told you this? They are clueless and deserve a slap.


Anybody know anymore on the subject ?

Just "dont". Its as simple as that.

DO NOT DO IT


( and a locked down computer unless the FBI locked it down) could easily be hacked by visiting the right (or should it be wrong) website.


Do you have a smart phone? Or a tablet? Use those.

[Deleted User]

If you must use public computers then at least change your passwords afterwards.

Neil_Jones

Any public computer that's set up correctly will already have safeguards in place for things like this. They should be locked down, you can't install stuff and when they restart after you log off they return to a base default standard which is clean, using software like this:
https://www.faronics.com/en-uk/products/deep-freeze/enterprise

So as long as you log off properly when you're done, you should be okay.

masonic

Neil_Jones wrote: »

Any public computer that's set up correctly will already have safeguards in place for things like this. They should be locked down, you can't install stuff and when they restart after you log off they return to a base default standard which is clean, using software like this:
https://www.faronics.com/en-uk/products/deep-freeze/enterprise

So as long as you log off properly when you're done, you should be okay.

Yes, those are nice ideals. Meanwhile, in the real world...

AnotherJoe

Neil_Jones wrote: »

Any public computer that's set up correctly will already have safeguards in place for things like this. They should be locked down, you can't install stuff and when they restart after you log off they return to a base default standard which is clean, using software like this:
https://www.faronics.com/en-uk/products/deep-freeze/enterprise

So as long as you log off properly when you're done, you should be okay.

Well, there's your first assumption.
The second is that such a computer is not vulnerable to exploits that the person who "set it up correctly" was not aware of.
The third is that the network behind it is not compromised.
I'd not be confident that any of those conditions applied in a public library subject to budgetary constraints nor staffed by computer experts with other priorities than keeping public computers up to date.

[Deleted User]

AnotherJoe wrote: »

nor staffed by computer experts with other priorities than keeping public computers up to date.

They will be updated and looked after by the IT department of the local authority that runs the library, not old Mrs Jones the librarian.

Neil_Jones

I would argue its slightly safer on a physical machine than it would be over the public Wi-Fi often found in libraries. But yes, the IT department of the authority is responsible for the public machines and their security, not the front line staff.

Note that authorities have to take IT and network security seriously as it is and there is probably more going on behind the scenes of the library IT wise than a chunky box sitting on a desk with a network cable hanging out the back:
https://www.local.gov.uk/our-support/efficiency-and-income-generation/cyber-security/councils-and-cyber-security

18cc

Well things are changing in this area for example you would have been silly to log on using a library computer or any public computer to for example Nationwide as you needed a username, pin and memorable information. A keylogger could pick these up

now of course you'll need a username and a code generated from your your card reader thingy or a text to your mobile phone so even if there was a keylogger you wouldn't really compromise your account

unforeseen

AnotherJoe wrote: »

Well, there's your first assumption.
The second is that such a computer is not vulnerable to exploits that the person who "set it up correctly" was not aware of.
The third is that the network behind it is not compromised.
I'd not be confident that any of those conditions applied in a public library subject to budgetary constraints nor staffed by computer experts with other priorities than keeping public computers up to date.

For the council I contracted to they were on the council network using their firewalls/AV etc. Library staff have no special access, they are just another user who logs on and gets a sandboxed environment to work in. The session is destroyed on log off.

[Deleted User]

I bet there are more people accessing banking and other sensitive stuff on their own devices using free/public wifi in cafes and pubs etc. Something I wouldn't recommend more than not using a library computer.