HSBC sites vulnerable to XSS flaws, could aid phishing attacks

TalkBack 1 of 5:

Next »

• Thread View
• Flat View

How many users understand or care....

Your article raises a number of good points. But the best advice for not getting phished is to bookmark a secure page on the bank's website and use ONLY that bookmark to access your account. You will get redirected to the genuine login page. Another piece of advice is to use a sandbox program and create a sandbox that you only use for accessing bank sites. And use the bookmark to the secure web page to do your online banking. By not having any other web sites open in the sandbox, there is little chance of getting struck by cross domain scripting. I agree that the banks should tell customers how they protect them, but it should be in non-technical terms. Both sides have take precautions to protect themselves. If a customer gets careless, well, it's his money, and his responsibility. If the bank gets careless then they are not doing their job of caring for the customers money. To my way of thinking, a free anti-virus program is only useful in these cases if it can detect web threats. Clamwin, for example is not a real time AV program, so it should not be allowed as a customers AV program. Free Zone Alarm has no anti-phishing or web detection capabilities, rather, per the comparison chart on the web site, "stays out of the way; does not interfere with the way you surf the web", so I fail to see the relevance of this program to protection against phishing.

Posted by: howiem   Posted on: 06/30/08 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• CLOUD-CLIENT ENTERPRISE SECURITY IMPACT REPORT: INCREASED PROTECTION AT A LOWER COST Trend Micro Malware, spam and other threats on the Internet are an increasing problem ... Download Now
• July 1st: The Virtual Presenter's Series: Start Right! Design Right! Present Right! Citrix Online Presenting online is a completely different ballgame from presenting in ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now