danger/u/
This thread is permanently archived
Open-source moguls, privacy hounds, foil hat monsters... How do you stay secure while Banking Online?

| I have a checking/savings setup and try to stay security conscious concerning important passwords and emails connected to them.

What are your tips about checking balances, using online payment systems, and otherwise keeping your info and by extension your money safe?

I've yet to make any online accounts outside of providing my IRL email to the bank when I made my account in person.


| 2factor authentication?


| >>421268
>What are your tips about checking balances, using online payment systems
I can recommend Kmymoney. It's part of KDE and available in many GNU/Linux distributions. It supports open standards like HBCI to get data from your bank and GPG for local encryption. Afaik there are unfortunately no transactions possible currently.


| >>421268
I just use my banks e-banking, man. I use as much Free Software as I can but I'm not gonna sperg out because a bank is not gonna put LibreJS on their javascript. They also have 2FA so I mostly trust them. But mobile banking apps is where shit goes too far imho. My phone is the very worst side of my computing. I can't ensure everything is safe there unlike my ThinkPad.


| >>421590 Thats what I was mostly thinking. I wouldn't check anything on my phone that involves my bank's website.


| >>421681
If you use an authentication method like "mobile TAN" for transactions then of course you shouldn't use the mobile that is registered for it, because the point of a mobile TAN is to confirm a transaction with a physically independent device from the one that you use for the transaction (e.g. a desktop, laptop or tablet)
Beside this, to increase security on mobile devices only use FOSS on it and no system wide integrated web-services like google play.


| Don't use Windows for online banking and shopping. While using a GNU/Linux distro isn't in itself a guarantee that you'll never be compromised, in general, Linux-based distros have better security and privacy defaults compared to Windows.

Also, Firefox multi-account container tabs are pretty nifty: https://addons.mozilla.org/en-US/firefox/addon/multi-account-containers/


| Double check your bank website's certificate. Check out Firefox's privacy tweaks at privacytools.io (implementing most or all of them may cause breakage with some/most sites)


| >>421491 Don't trust mobile authentication, 2G is so fucking insecure. Anyone who can be not further than ~70m from you while you doing your bank stuff can steal your money.


| Use a Live version of a linux system when you want to connect. Don't use the WiFi. Use a script blocker.

Total number of posts: 10, last modified on: Thu Jan 1 00:00:00 1540412967

This thread is permanently archived