funsec mailing list archives

Re: NZ: Banks Demand a Look Inside Customer PCs in Fraud Case s


From: "Fergie" <fergdawg () netzero net>
Date: Thu, 28 Jun 2007 00:34:39 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -- "Dennis Henderson" <hendomatic () gmail com> wrote:

When will the customer have to have at least some responsibility for
their action/inactions?

Well, this is kind of complicated, and I personally believe it is
the wrong question.

All to often, consumers are completely unwitting victims, through
no fault of their own.

I'd like to understand how any additional "responsibility" by
a user, who is not doing anything "risky", solves anything.

Basic security shouldn't require a consumer to be a rocket
scientist.

I guess the person who invents the perfectly secure internet
transaction will be the richest person on the planet. Imagine being
able to conduct a secure pc based internet transaction with every kind
of trojan and keylogger installed....

This is one of my major complaints with people thinking that
"Internet security" means encrypting or securing the end-to-end
transaction -- once the consumer PC is compromised, all bets are off.

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)

wj8DBQFGgwIZq1pz9mNUZTMRAsDTAJ4x11gnSoTrcIiLCGfHP8ljbCUObACg3uzQ
8jUhEem9udnJ3uB6PpQOnFg=
=IKR2
-----END PGP SIGNATURE-----


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: