EU Agency tells banks to assume all PCs are infected

Rich Jordan · Post by **Rich Jordan** » Thu Jul 12, 2012 3:53 pm

and proceed accordingly to try and protect their customers.

Article here

mekender · Post by **mekender** » Thu Jul 12, 2012 8:38 pm

Realistically, they probably are... I would bet at least 80% of the ones on the internet have SOMETHING on them malicious.

Rich Jordan · Post by **Rich Jordan** » Thu Jul 12, 2012 10:47 pm

mekender wrote:Realistically, they probably are... I would bet at least 80% of the ones on the internet have SOMETHING on them malicious.

Well yeah, isn't that the current proportion that have ms windows on them?

Post by **BobbyK** » Thu Jul 12, 2012 11:17 pm

<sarcasm> yeah, because Mac and Linux boxes never get malware</sarcasm>

Rich Jordan · Post by **Rich Jordan** » Fri Jul 13, 2012 2:03 am

I use my VMS workstation for online banking

Frankingun · Post by **Frankingun** » Fri Jul 13, 2012 2:52 am

CByrneIV wrote:I've been telling my clients the same thing for years.

As of now, I fully and firmly believe that the only possible future model for information security is untrusted client, untrusted network, untrusted transport, with securely authenticated access.

On that note, how secure is the browser encryption that kicks in when you log in to your bank's website? Though I know nothing about information security, I'm afraid the answer is "not very".

mekender · Post by **mekender** » Fri Jul 13, 2012 12:12 pm

CByrneIV wrote:
Frankingun wrote:
On that note, how secure is the browser encryption that kicks in when you log in to your bank's website? Though I know nothing about information security, I'm afraid the answer is "not very".
The encryption itself, IF PROPERLY IMPLEMENTED AND MANAGED (particularly if properly patched when vulnerabilities are found) is actually pretty secure.

IF properly implemented and managed.

At BOTH ends, and the middle.

The problem is, there are so many other vulnerabilities, that it makes the strength of the encryption irrelevant. It's far easier to just compromise the session or the data, in one of a hundred other ways.

But then again the reality is that you are still much more likely to have someone steal your wallet or your receipts from your trash than you are to have them intercept a transaction like that.

Aglifter · Post by **Aglifter** » Fri Jul 13, 2012 8:28 pm

You computer has a key logger, you are on film, recorded with sound, and all your emails are public - unless proven otherwise...

Sound about right?

The Gun Counter

EU Agency tells banks to assume all PCs are infected

EU Agency tells banks to assume all PCs are infected

Re: EU Agency tells banks to assume all PCs are infected

Re: EU Agency tells banks to assume all PCs are infected

Re: EU Agency tells banks to assume all PCs are infected

Re: EU Agency tells banks to assume all PCs are infected

Re: EU Agency tells banks to assume all PCs are infected

Re: EU Agency tells banks to assume all PCs are infected

Re: EU Agency tells banks to assume all PCs are infected