<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Quest for a good boot CD for Internet banking</title>
	<atom:link href="http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/feed" rel="self" type="application/rss+xml" />
	<link>http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking</link>
	<description></description>
	<lastBuildDate>Thu, 02 Sep 2010 08:45:04 -0700</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Michael McDonald</title>
		<link>http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/comment-page-1#comment-46887</link>
		<dc:creator>Michael McDonald</dc:creator>
		<pubDate>Fri, 30 Apr 2010 13:56:28 +0000</pubDate>
		<guid isPermaLink="false">http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/#comment-46887</guid>
		<description>Andrew and Kai, thank you!  I love the LiveCD distro http://webconverger.org/.  It worked better for Internet Banking than the other Linux LiveCDs that I tried.

Ubuntu and PCLinux worked fine but I found the install options too risky.  My attempt to customize my Ubuntu LiveCD wasn&#039;t successful (I am still trying).

Knoppix is good LiveCD but it wasn&#039;t as well suited for Internet Banking as webconverger.

I had no trouble going to my Internet Banking sites.  I love that Flash is preloaded.  It is so easy to use that my Mom could use it.  To shut off Webconverger, I just had to press the power button.  I love the fact that there is no way that a user could inadvertantly install Linux on their hard drive (Ubuntu, PCLinux and others with &quot;install&quot; options).

I will try the other features that you mentioned this weekend: pdf viewer; shortcut keys: CTRL-+ and CTRL– for controlling the font size, CTRL-T and CTRL-W for creating and closing tabs, and CTRL-K to get to the search form, and CTRL-L for moving to the address bar.</description>
		<content:encoded><![CDATA[<p>Andrew and Kai, thank you!  I love the LiveCD distro <a href="http://webconverger.org/">http://webconverger.org/</a>.  It worked better for Internet Banking than the other Linux LiveCDs that I tried.</p>
<p>Ubuntu and PCLinux worked fine but I found the install options too risky.  My attempt to customize my Ubuntu LiveCD wasn&#8217;t successful (I am still trying).</p>
<p>Knoppix is good LiveCD but it wasn&#8217;t as well suited for Internet Banking as webconverger.</p>
<p>I had no trouble going to my Internet Banking sites.  I love that Flash is preloaded.  It is so easy to use that my Mom could use it.  To shut off Webconverger, I just had to press the power button.  I love the fact that there is no way that a user could inadvertantly install Linux on their hard drive (Ubuntu, PCLinux and others with &#8220;install&#8221; options).</p>
<p>I will try the other features that you mentioned this weekend: pdf viewer; shortcut keys: CTRL-+ and CTRL– for controlling the font size, CTRL-T and CTRL-W for creating and closing tabs, and CTRL-K to get to the search form, and CTRL-L for moving to the address bar.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: DDan</title>
		<link>http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/comment-page-1#comment-42392</link>
		<dc:creator>DDan</dc:creator>
		<pubDate>Fri, 05 Feb 2010 22:25:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/#comment-42392</guid>
		<description>For those new to the scene, or even old-time Puppy Linux users, you can configure your complete system, including network, firewall, printer, and any other setups.

You can also get Puppy Linux variations (&quot;puplets&quot;) with programs such as OpenOffice which has an XLS-compatible spreadsheet program.

(Note: On an older computer (especially Compaqs) you may get bad video after boot using Xorg video.  Simply reboot and choose Vesa video.)

For the Mozilla-based browser:

Open /etc/fstab with a text editor and add these lines at the bottom:
# Set 256MB RAM drive for tmp
tmpfs /tmp tmpfs size=256M,noatime,mode=1777   0       0

In your Mozilla-based browser&#039;s address bar, type in:
about:config
Right-click in the main window and choose Add, String.
Type in:  browser.cache.disk.parent_directory
For the value enter: /tmp/ff_cache

Then, in Tools, Options, Network, set the browser to use a proxy (of 0.0.0.0) for all protocols, and add in exceptions for your bank&#039;s site(s).  Close your browser.

Now open a terminal and ping your bank&#039;s sites, including all of the sites used when you login/work with your account. Then edit your /etc/hosts file to include all of these IP addresses and URIs, each on a separate line.  (if the bank changes it&#039;s IP addresses later on, you will have to re-do this portion.)

Then save that whole thing to an ISO file on the hard drive, USB, whatever by using the System, Remaster Puppy live-cd menu choice.

Reboot Puppy Linux and make sure you save your personalized file to hard drive/USB/whatever.

After reboot, open Multimedia, ISOMaster, open the ISO file and copy the /mnt/home/pupsave.* file into the ISO file.

Burn that Puppy (no pun intended...) to CD, remove all drives on the computer other than the CD drive and Viola!  You&#039;ll be about as secure as you can get.

It will run on any computer you can throw at it with 512MB of RAM or more, and will be freaking fast.</description>
		<content:encoded><![CDATA[<p>For those new to the scene, or even old-time Puppy Linux users, you can configure your complete system, including network, firewall, printer, and any other setups.</p>
<p>You can also get Puppy Linux variations (&#8220;puplets&#8221;) with programs such as OpenOffice which has an XLS-compatible spreadsheet program.</p>
<p>(Note: On an older computer (especially Compaqs) you may get bad video after boot using Xorg video.  Simply reboot and choose Vesa video.)</p>
<p>For the Mozilla-based browser:</p>
<p>Open /etc/fstab with a text editor and add these lines at the bottom:<br />
# Set 256MB RAM drive for tmp<br />
tmpfs /tmp tmpfs size=256M,noatime,mode=1777   0       0</p>
<p>In your Mozilla-based browser&#8217;s address bar, type in:<br />
about:config<br />
Right-click in the main window and choose Add, String.<br />
Type in:  browser.cache.disk.parent_directory<br />
For the value enter: /tmp/ff_cache</p>
<p>Then, in Tools, Options, Network, set the browser to use a proxy (of 0.0.0.0) for all protocols, and add in exceptions for your bank&#8217;s site(s).  Close your browser.</p>
<p>Now open a terminal and ping your bank&#8217;s sites, including all of the sites used when you login/work with your account. Then edit your /etc/hosts file to include all of these IP addresses and URIs, each on a separate line.  (if the bank changes it&#8217;s IP addresses later on, you will have to re-do this portion.)</p>
<p>Then save that whole thing to an ISO file on the hard drive, USB, whatever by using the System, Remaster Puppy live-cd menu choice.</p>
<p>Reboot Puppy Linux and make sure you save your personalized file to hard drive/USB/whatever.</p>
<p>After reboot, open Multimedia, ISOMaster, open the ISO file and copy the /mnt/home/pupsave.* file into the ISO file.</p>
<p>Burn that Puppy (no pun intended&#8230;) to CD, remove all drives on the computer other than the CD drive and Viola!  You&#8217;ll be about as secure as you can get.</p>
<p>It will run on any computer you can throw at it with 512MB of RAM or more, and will be freaking fast.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: SteveR</title>
		<link>http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/comment-page-1#comment-42196</link>
		<dc:creator>SteveR</dc:creator>
		<pubDate>Tue, 02 Feb 2010 18:23:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/#comment-42196</guid>
		<description>I&#039;m amazed that there are not many more recent posts to this, given the seriousness of the issue and the wide-spread prevalence of online banking.  I have used Puppy and Knoppix LiveCD and with some finagling, you can get the job done.  There are a couple of problems.  One is that my bank insists that there be a cookie on my computer or it will reject my login until I authenticate receipt of a special code via either email or my cell phone. So many steps, so little time. What a pain!  The second problem is that I often use my online banking and my MS Money program at the same time. Oh, I know I can use open source financial software, instead.  But you start to see the problem with having to install stuff everytime and/or getting software to run each time. Anyway, I&#039;m not clever enough to get all this on one fine LiveCD but it would sure be nice. I have not yet checked on www.school-machine.org.uk but I&#039;m curious enough to do so soon,  Regards, all.</description>
		<content:encoded><![CDATA[<p>I&#8217;m amazed that there are not many more recent posts to this, given the seriousness of the issue and the wide-spread prevalence of online banking.  I have used Puppy and Knoppix LiveCD and with some finagling, you can get the job done.  There are a couple of problems.  One is that my bank insists that there be a cookie on my computer or it will reject my login until I authenticate receipt of a special code via either email or my cell phone. So many steps, so little time. What a pain!  The second problem is that I often use my online banking and my MS Money program at the same time. Oh, I know I can use open source financial software, instead.  But you start to see the problem with having to install stuff everytime and/or getting software to run each time. Anyway, I&#8217;m not clever enough to get all this on one fine LiveCD but it would sure be nice. I have not yet checked on <a href="http://www.school-machine.org.uk">http://www.school-machine.org.uk</a> but I&#8217;m curious enough to do so soon,  Regards, all.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: EkimBbew</title>
		<link>http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/comment-page-1#comment-42137</link>
		<dc:creator>EkimBbew</dc:creator>
		<pubDate>Mon, 01 Feb 2010 23:12:04 +0000</pubDate>
		<guid isPermaLink="false">http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/#comment-42137</guid>
		<description>I&#039;m with phantomlistener. I&#039;ve used Puppy Linux for almost 3 years now and love it. I&#039;m using an old 800 mhz machine with 512MB of RAM and it runs like a greyhound. Take THAT, Windows 7!

The one limitation of Puppy for this purpose is that it does not come with Firefox (though there are derivatives of Puppy that do). It comes with Mozilla Seamonkey, which is a community-supported continuation of the former Mozilla Suite. I will say that I can log into my bank&#039;s online banking with it with no problem. In addition, there *are* install files available for installing Firefox, Opera and some other browsers. Puppy can create a file on your hard drive for storing settings, installed programs and such so you don&#039;t have to wait for it to redetect hardware every time. And of course, you still get the greatly enhanced security (built-in from the ground up) of the Linux operating system.</description>
		<content:encoded><![CDATA[<p>I&#8217;m with phantomlistener. I&#8217;ve used Puppy Linux for almost 3 years now and love it. I&#8217;m using an old 800 mhz machine with 512MB of RAM and it runs like a greyhound. Take THAT, Windows 7!</p>
<p>The one limitation of Puppy for this purpose is that it does not come with Firefox (though there are derivatives of Puppy that do). It comes with Mozilla Seamonkey, which is a community-supported continuation of the former Mozilla Suite. I will say that I can log into my bank&#8217;s online banking with it with no problem. In addition, there *are* install files available for installing Firefox, Opera and some other browsers. Puppy can create a file on your hard drive for storing settings, installed programs and such so you don&#8217;t have to wait for it to redetect hardware every time. And of course, you still get the greatly enhanced security (built-in from the ground up) of the Linux operating system.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tom</title>
		<link>http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/comment-page-1#comment-42133</link>
		<dc:creator>Tom</dc:creator>
		<pubDate>Mon, 01 Feb 2010 22:28:47 +0000</pubDate>
		<guid isPermaLink="false">http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/#comment-42133</guid>
		<description>Interesting choices of LiveCd&#039;s. 

There is an existing resource that is constantly updated 
http://distrowatch.com/dwres.php?resource=cd

Dsl seems to have stalled a little but TinyCore is developing fast and seems designed for this type of use.

Ubuntu would seem an obvious choice given that familiarity of interface is a stated goal. The FireFox icon is easy to spot. Lots of magazines give hints&amp;tips about Ubuntu often alongside their Windows articles. Ubuntu does have a lot of extras you probably don&#039;t need just to login to your bank, such as being able to easily open Office documents and email but these give more reason to use the Live Cd (or a full dual-boot install alongside Windows) &amp; hence gain more familiarity with it.

Knoppix is excellent at hardware detection so it handles a huge variety of different setups and can run on fairly old machines. It&#039;s quite pretty to watch while its booting up. Wolvix is possibly an easier off-shoot of Slax &amp; has a gui rather than command-line (so does Slax now), again it has excellent hardware detection, not quite as good as Knoppix tho. For really ancient machines such as PII there is always Puppy. 

For screenshots and details ... 
http://distrowatch.com/table.php?distribution=ubuntu
http://distrowatch.com/table.php?distribution=knoppix
http://distrowatch.com/table.php?distribution=wolvix
http://distrowatch.com/table.php?distribution=puppy
or just try the main page at DistroWatch and navigate from there
http://distrowatch.com

Ubuntu and knoppix are safer and of course all boot-times have dropped drastically even in the last 6months

Good luck and regards from
Tom :)</description>
		<content:encoded><![CDATA[<p>Interesting choices of LiveCd&#8217;s. </p>
<p>There is an existing resource that is constantly updated<br />
<a href="http://distrowatch.com/dwres.php?resource=cd">http://distrowatch.com/dwres.php?resource=cd</a></p>
<p>Dsl seems to have stalled a little but TinyCore is developing fast and seems designed for this type of use.</p>
<p>Ubuntu would seem an obvious choice given that familiarity of interface is a stated goal. The FireFox icon is easy to spot. Lots of magazines give hints&amp;tips about Ubuntu often alongside their Windows articles. Ubuntu does have a lot of extras you probably don&#8217;t need just to login to your bank, such as being able to easily open Office documents and email but these give more reason to use the Live Cd (or a full dual-boot install alongside Windows) &amp; hence gain more familiarity with it.</p>
<p>Knoppix is excellent at hardware detection so it handles a huge variety of different setups and can run on fairly old machines. It&#8217;s quite pretty to watch while its booting up. Wolvix is possibly an easier off-shoot of Slax &amp; has a gui rather than command-line (so does Slax now), again it has excellent hardware detection, not quite as good as Knoppix tho. For really ancient machines such as PII there is always Puppy. </p>
<p>For screenshots and details &#8230;<br />
<a href="http://distrowatch.com/table.php?distribution=ubuntu">http://distrowatch.com/table.php?distribution=ubuntu</a><br />
<a href="http://distrowatch.com/table.php?distribution=knoppix">http://distrowatch.com/table.php?distribution=knoppix</a><br />
<a href="http://distrowatch.com/table.php?distribution=wolvix">http://distrowatch.com/table.php?distribution=wolvix</a><br />
<a href="http://distrowatch.com/table.php?distribution=puppy">http://distrowatch.com/table.php?distribution=puppy</a><br />
or just try the main page at DistroWatch and navigate from there<br />
<a href="http://distrowatch.com">http://distrowatch.com</a></p>
<p>Ubuntu and knoppix are safer and of course all boot-times have dropped drastically even in the last 6months</p>
<p>Good luck and regards from<br />
Tom <img src='http://www.andrewpatrick.ca/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Report: 48% of 22 million scanned computers infected with malware &#124; Zero Day &#124; ZDNet.com</title>
		<link>http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/comment-page-1#comment-41928</link>
		<dc:creator>Report: 48% of 22 million scanned computers infected with malware &#124; Zero Day &#124; ZDNet.com</dc:creator>
		<pubDate>Wed, 27 Jan 2010 22:46:47 +0000</pubDate>
		<guid isPermaLink="false">http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/#comment-41928</guid>
		<description>[...] adaptive approach you&#8217;d consider (Time to ditch Windows for online banking and shopping; Live CDs), cybercriminals have clearly adapted to the currently implemented multi-factor authentication [...]</description>
		<content:encoded><![CDATA[<p>[...] adaptive approach you&#8217;d consider (Time to ditch Windows for online banking and shopping; Live CDs), cybercriminals have clearly adapted to the currently implemented multi-factor authentication [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Paul Boggia</title>
		<link>http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/comment-page-1#comment-36219</link>
		<dc:creator>Paul Boggia</dc:creator>
		<pubDate>Mon, 13 Jul 2009 22:37:38 +0000</pubDate>
		<guid isPermaLink="false">http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/#comment-36219</guid>
		<description>I&#039;ve updated HospitalityMachine &amp; HospitalityMachineKiosk some time ago, and rolled another distro for schools using a kiosk environmant (www.school-machine.org.uk). Both are being used successfully in various organisations &amp; businesses. Feel free to have a look if interested!</description>
		<content:encoded><![CDATA[<p>I&#8217;ve updated HospitalityMachine &amp; HospitalityMachineKiosk some time ago, and rolled another distro for schools using a kiosk environmant (www.school-machine.org.uk). Both are being used successfully in various organisations &amp; businesses. Feel free to have a look if interested!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Richard Mackney</title>
		<link>http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/comment-page-1#comment-18214</link>
		<dc:creator>Richard Mackney</dc:creator>
		<pubDate>Wed, 05 Nov 2008 22:40:35 +0000</pubDate>
		<guid isPermaLink="false">http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/#comment-18214</guid>
		<description>Great post, thank you. I don&#039;t know why there isn&#039;t a common solution to this problem.

I have used Slax and BartPE with Firefox.

Thanks

@mackney</description>
		<content:encoded><![CDATA[<p>Great post, thank you. I don&#8217;t know why there isn&#8217;t a common solution to this problem.</p>
<p>I have used Slax and BartPE with Firefox.</p>
<p>Thanks</p>
<p>@mackney</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Andrew</title>
		<link>http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/comment-page-1#comment-8394</link>
		<dc:creator>Andrew</dc:creator>
		<pubDate>Wed, 13 Aug 2008 21:50:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/#comment-8394</guid>
		<description>@Amit P

Thanks for the comment. Using a Boot CD protects you from some forms of attacks (i.e., malware on your computer), but it does not provide 100% protection. Attacks that take place during the authentication and transactions with the bank, such as man-in-the-middle attacks, are still possible. Attacks based on DNS poisoning, where you end up at a false bank site, are still possible. And, if the Boot CD was built with faulty software, then there could be problems.

So, the protection is not 100% fool-proof, but it is still much better than using a normal, possibly-infected PC.</description>
		<content:encoded><![CDATA[<p>@Amit P</p>
<p>Thanks for the comment. Using a Boot CD protects you from some forms of attacks (i.e., malware on your computer), but it does not provide 100% protection. Attacks that take place during the authentication and transactions with the bank, such as man-in-the-middle attacks, are still possible. Attacks based on DNS poisoning, where you end up at a false bank site, are still possible. And, if the Boot CD was built with faulty software, then there could be problems.</p>
<p>So, the protection is not 100% fool-proof, but it is still much better than using a normal, possibly-infected PC.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Amit P</title>
		<link>http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/comment-page-1#comment-8386</link>
		<dc:creator>Amit P</dc:creator>
		<pubDate>Wed, 13 Aug 2008 19:54:11 +0000</pubDate>
		<guid isPermaLink="false">http://www.andrewpatrick.ca/security-and-privacy/quest-for-a-good-boot-cd-for-internet-banking/#comment-8386</guid>
		<description>I just tested the Ubuntu live CD on my Dell laptop (about  12months old).. it worked great.. Wireless was picked up straight away..

Now my question is.. if all your doing is visiting a bank site, and with no where to store a virus.. is there any way someone could hack into your system?</description>
		<content:encoded><![CDATA[<p>I just tested the Ubuntu live CD on my Dell laptop (about  12months old).. it worked great.. Wireless was picked up straight away..</p>
<p>Now my question is.. if all your doing is visiting a bank site, and with no where to store a virus.. is there any way someone could hack into your system?</p>
]]></content:encoded>
	</item>
</channel>
</rss>
