Conversation
Notices
-
I just discovered that ISBC bank (originally Chinese but with an office in NL) offers Internet banking - and for that requires a browser extension. (Unfortunately it seems to support only Windows or Mac for the extension.) Now, apart from the lack of Linux support, would online banking 'supported' by a browser extension be more, or less secure than internet banking without such an extension? (Note that they do not have two-factor authentication as most Dutch banks use in one form or another these days.) Any insights? #banking #internet #security
-
@mk A bank using custom browser extension has probably written their own !crypto instead of using well-known libraries; !not good !security
-
@bobjonkman Yes, I was supecting something of the sort - not unlikley since it
-
@mk @bobjonkman ...since it's a Chinese bank - Chinese do their own solutions for a lot of things (not necessarily worse, but hard to check)
-
@windigo I was hesitant in the first place *because* it uses a plugin, which - in the .xpi form - is actually 2 plugins, one of which is a neatly-formatted JavaScript seemingly to clear the cache, the other a bunch of .dll files which appears to be the core proogram - there are some analysis tools for such, but no source; there's also a .dmg plugin which would be for Mac; I didn't try to download that but suspect it's a similar setup. A pity, since they have an excellent interest rate on their online savings account - but I don't dare to risk it :(