Computer security expert warns against using Microsoft Windows operating systems for online banking.

[onehandle]

Recommends using a Linux-based "Live CD" or a Mac:

But regardless of the methods used by the bank or the crooks, all of the attacks shared a single, undeniable common denominator: They succeeded because the bad guys were able to plant malicious software that gave them complete control over the victim's Windows computer.

Why is the operating system important? Virtually all of the data-stealing malware in circulation today is built to attack Windows systems, and will simply fail to run on non-Windows computers. Also, the Windows-based malware employed in each of these recent online attacks against businesses was so sophisticated that it made it extremely difficult for banks to tell the difference between a transaction initiated by their customers and a transfer set in motion by hackers who had hijacked that customer's PC.

snip...

Also known as "Live CDs," these are generally free, Linux-based operating systems that one can download and burn to a CD-Rom. The beauty of Live CD distributions is that they can be used to turn a Windows-based PC temporarily into a Linux computer, as Live CDs allow the user to boot into a Linux operating system without installing anything to the hard drive. Programs on a LiveCD are loaded into system memory, and any changes - such as browsing history or other activity -- are compeltely wiped away after the machine is shut down. To return to Windows, simply remove the Live CD from the drive and reboot.

snip...

"I would strongly recommend looking at whatever systems you're using if you're doing electronic banking," the Gazette quotes Bernie Burns, the Arc's executive director. "And if it is a Microsoft system, perhaps looking at something different."

http://voices.washingtonpost.com/securityfix/2009/10/avoid_windows_malware_bank_on.html

[alfredo]

1. Yeah, live CD's are a secure way to go. It also gives you a chance to try

Linux without committing drive space. It won't be as fast as it would be installed, but it will give you a glimpse at the world of Linux.

[parasim]

2. As a Mac user, I encourage users of Windows to go the Live CD route.

I enjoy my virus-free life and if everybody switches to Mac, here come the viruses!

[cliffordu]

9. Not really.

When you understand how Linux, OSX and their work-alikes are structured, you'll understand they are harder by nature to infect - if the user takes some basic precautions...There are ways to secure Linux and OSX that are simply unavailable to Windowz, and the M$'ers know it.


I would NEVER keep financial information on a windows computer. Never.

[Greyhound]

3. "If you wouldn't feel comfortable with it painted on the side of your house,

don't put it on line in a M$ environment" - Greyhound 1990

Nothing has changed since then.
:kick: & R

[Kokonoe]

4. Thank You, I'll try it.

[MilesColtrane]

5. Computer security expert warns against using Microsoft Windows operating systems for online banking.

...or anything else.

[targetpractice]

6. Use a Microsoft Sidekick instead. ;-)

Umm... HAHAHAHAHAHAHAH!

[PJPhreak]

7. As a Windows user in "Recovery"

Linux=Epic Win!

[Name removed]

8. Deleted message

Message removed by moderator. Click here to review the message board rules.

[Better Today]

10. Uhm, wouldn't someone know if someone else had hijacked their computer?

I don't have any problems with viruses or any of that. I only let certain programs go online, Firefox is locked down through Adblock and NoScript, and I only go to sites I'm familiar with, my internet connection is locked if I'm not actively browsing, and turned off when I leave it for more than 30 minutes (hence I believe I would know if someone were hijacking my puter, I've also never understood this idea that puters should never be turned off). I guess I've just never gotten the gist of all the problems everyone else seems to have.

As an added note, I also don't keep detail personal information on my computer, no SSNs, no passwords are memorized, all have to be entered each time, and so on. I guess someone could steal my Quickbooks with my customer and client list, but it just has addresses and phone numbers. . . any routing or credit card data is kept hand written in their files.

I've been on computers since they were still the size of file cabinets or larger, there are just some things that shouldn't be on any computer.

As soon as (and if) Macs or Linux become the popular choices, hackers will adjust and go after them instead of Windows.

[KaoriMitsubishi]

11. Lazy advice

Gotta love how these so-called security experts are too lazy to teach people how to secure Windows. I am running two systems here (WinXP Pro & Vista Ultimate X64) both of which are used by children whose ages range from 4 to 15. All users have basic user accounts. Both systems are behind a NAT router/SPI firewall. Both have Software Restriction Policy enabled in whitelist mode. Custom NTFS permissions further restrict where software is allowed to run and where it is not.

Default Deny. No unauthorized software can be executed, period.

Best thing about it is there is no overhead. You wouldn't know SRP is enabled until you attempt to run an unauthorized application.

[ShadowLiberal]

12. The only reason why they only go for windows is the others have too small of a market share

Studies have shown that an operating system needs to hit the 20% mark (or close to it) to have people who make virus' and other malicious infections go after those operating systems. They don't think it's worth making a virus that'll only effect like 2% of the computer users in the world.

And don't think that Mac and Linux and the other operating systems would be perfectly safe from viruses even if they did have 100% of the market, they aren't, a few people have made viruses for them just to prove the point (though they were usually pretty harmless ones simply posted at computer forums with instructions on how to get rid of it). In fact they'd probably be much more vulnerable then windows once they hit the 20% share of the market mark, because who needs virus protection software for an operating system that no one makes viruses to attack?

[kenny blankenship]

14. More websites are served by Linux than Windows, so the "small market share" argument is false

for example: democraticunderground.com
if you wanted to attack the internet, and what hacker doesn't, you would want to write exploits against Linux servers. But that's hard and attacking Windows is easy, often trivially easy because of its poor design and security model.

[Trekologer]

18. Small market share referrs to on the desktop

Desktop verses servers is not an equal comparison.

[mkultra]

13. or, run OSX or Linux in a virtual machine and fire it up when needed

also a good way to contain browsing issues by setting up a snapshot image that can be used to browse.

[TreasonousBastard]

15. So, after 20 years 98% of the world's computers are running...

a Microsoft OS and NOW this guy says there's a problem?

All things being equal, Linux and Mac are marginally tougher to hack into but so what?

300 million PCs are suddenly going to change OS?

And, yes, I've used live CDs and they're really a pain in the ass if you're trying to get actual work done.

[formercia]

16. A user account only used for online banking.

That will minimize local infections.

[Shanti Mama]

19. Can you explain how this would help?

Doesn't seem to make sense to me.

[formercia]

20. A different computer user account, not a bank account.

Perhaps I should have worded it differently.
A separate user account, used only for banking, is not likely to contain infected files.

Using a different browser might help as well.

[Trekologer]

17. While its true that Linux is less of a target, that is mostly due to its small market share

If it reached the penetration that Windows has with the general populations, virus writers would target it as well. Most of the time, a Windows machine gets infected from the user doing something stupid such as running executable files they receive via email from "Barrister John" who needs help smuggling a dead widdow's "EIGHTY MILLION DOLLARS ($80,000,000.00)" out of a small country in Africa. Stupid users would still do stupid things, such as always logging in as root or just enter their password when prompted.

[Statistical]

21. Interesting factoid the estimated number of linux desktop installs is ~30 million.....

The estimated number of PIRATED copies of windows ~70 million.

There are over twice as many stolen copies of windows than there are linux desktop installs.