Topic: Hhmm...
Totage's photo
Wed 04/29/09 02:55 PM
I was reading some information about my credit union and I read:

The second facet of our security is protection of the credit union's internal network and member information from access by Internet users. Internet transactions are routed to the credit union via an T1 connection. When they reach our router, the traffic is either sent to the Online Banking server (a specific, secure address), or to a proxy server. The proxy server allows us to isolate our local network from the public Internet. The Online Banking server is connected via a serial port to the main computer that houses the account information. So, only a valid transaction request can cause information to be downloaded from the main computer. There is no physical wire connection between the Internet and either our PC LAN or our data processing system. In this way, we disallow unauthorized access to our network and any private information.


The last part:

There is no physical wire connection between the Internet and either our PC LAN or our data processing system. In this way, we disallow unauthorized access to our network and any private information.


sounds kinda off, wouldn't a wirless connection be less secure?

ladywolf9653's photo
Wed 04/29/09 03:55 PM
Actually, wireless networks have come amazingly far in the area of security. Demand is so high for wireless that companies have thrown tons of money at developing better components, and that has resulted in the wireless having a few small advantages over traditional networks security wise. If the bank's IT people know their stuff, you're as secure (or slightly more so) as you would be if they were on a traditional wired network.

nogames39's photo
Wed 04/29/09 06:28 PM
Edited by nogames39 on Wed 04/29/09 06:29 PM
They do not mention wireless. They are connected with T1 line. There is nothing specifically secure about their setup.

Their whole security concept is still based on validity of their authorization. Fool their server into trusting your request, and you're in. Serial port does not matter in this case.

The bit about no physical wire is misconstrued, probably by a bureaucrat writing the description.

No wire, normally means either their own physical network, such as is the case with major banks. They have their own "internet". Or, it refers to an optical link.

The lack of security of wireless connection stems from the fact that there is a physical access to the medium, from anywhere withing the wireless reception range. Wired connections are inaccessible, if you want them to be.

Encryption strength is inversely proportional to the computing power of an intruder. A determined intruder will use clustered computing resources at his disposal, and that will break any standard in minutes.

Philosophically speaking, if there is a lock, there will be a key. You can't make it secure, because you will have to use only a small portion of resources, available to the codebreaker.