Using proxy's for online banking

Greenlizard0 · 18 Nov 2008 at 18:43

Is this a good idea? I'm still reading about it now, but if anybody has any input shoot away

Would it be safer to use a proxy while banking online or paying bills, carrying out transactions etc.? If so, what do you guys recommend?

malef!c · 18 Nov 2008 at 18:50

As long as you control the box its on yes, else no

Greenlizard0 · 18 Nov 2008 at 18:53

So you're saying my own computer is fine, but not the one at the airport for example.

malef!c · 18 Nov 2008 at 18:56

If you are going via a proxy on a web server I wouldn't trust it unless I owned it.
But at a guess there is SSL on the bank site so that helps a bit.

Best bet is to hold on until you get home if possible.

NathanE · 18 Nov 2008 at 20:32

Good luck trying to crack 2048-bit SSL encryption using a man-in-the-middle attack.

SSL was designed to prevent exactly this type of attack. It is designed so that you CAN check your banking accounts from an airport.

malef!c · 19 Nov 2008 at 11:50

Yes but don't forget you are in an open hotspot with lots of other people.
If someone can somehow get on the machine, whats stopping them dropping something nasty on you - keylogger for example?

philjohn · 19 Nov 2008 at 11:55

malef!c said:
Yes but don't forget you are in an open hotspot with lots of other people.
If someone can somehow get on the machine, whats stopping them dropping something nasty on you - keylogger for example?

So don't leave your machine unattended?

m4cc45 · 19 Nov 2008 at 12:34

NathanE said:
Good luck trying to crack 2048-bit SSL encryption using a man-in-the-middle attack.

SSL was designed to prevent exactly this type of attack. It is designed so that you CAN check your banking accounts from an airport.

It's not quite the man in the middle attacks you would be worried about. I'd be more worried about it recording my username / password on there.

SSL is great but not everything is at that high a level. For example Lloyds use 1024 bit security.

M.

Deleted member 77746 · 19 Nov 2008 at 13:48

Paranoid age begun the day the first digital computer was invented. The bank will return you money if you happen to have had fraud againts you.

Greenlizard0 · 19 Nov 2008 at 13:55

True enough, but it doesn't mean you can't take preventative steps if they e.g. don't require too much effort.

NathanE · 19 Nov 2008 at 16:54

m4cc45 said:
It's not quite the man in the middle attacks you would be worried about. I'd be more worried about it recording my username / password on there.

SSL is great but not everything is at that high a level. For example Lloyds use 1024 bit security.

M.

Don't see how because web browsers tend to not save form data on SSL pages...

If 1024-bit is good enough for Lloyds TSB then it is good enough for me.