Do Banks Really Not Know The Biggest Threat Comes From Insiders?
from the you-have-to-be-kidding dept
We've been hearing this story for ages, but it's beginning to ring hollow (or, perhaps, is just an attempt by security consultants to get their name in the news). Reuters is quoting just such a security consultant claiming that banks are too focused on external threats and haven't paid enough attention to insiders who could just walk out the door with customer info and money. The article itself reads a little strange -- as if the author was looking for some sort of "banking problem" story, but couldn't come up with anything new. Instead, it just quotes a bunch of people all saying the same things that have been said before about bank security. Unfortunately, that leaves open the question: are banks just waking up to this threat now? Or is a case where a reporter needed a story about banking security and reran the same story from the last five years? It's true that there have been so many reports of data leaks via lost laptops recently to suggest that perhaps companies aren't careful enough with what information walks out the door with employees -- but it's hardly a new problem, and hopefully one that they're not just waking up to.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Reader Comments
Subscribe: RSS
View by: Time | Thread
Say what?
[ link to this | view in chronology ]
it's better
[ link to this | view in chronology ]
Re: it's better
Please enlighten me as I'm certain that if you're right I have missed something in this article that I probably care about.
[ link to this | view in chronology ]
The only real way...
[ link to this | view in chronology ]
Speaking as an Auditor of Bank Information Systems
[ link to this | view in chronology ]
bullshit
But what I want to know is: how are the banks supposed to operate? For that matter, how is anyone supposed to operate? The simple fact is that the "experts" that are often quoted would lock up everything so tight nobody can do their job.
[ link to this | view in chronology ]
Not just since the 1970s
[ link to this | view in chronology ]
Keyboard Logging
So the banks obviously wasn't watching who they ‘hired’ to 'clean them out' during the night time while they was installing new safes. If that was my bank and $400 million mazumas the computers administer would be a good suspect and definitely would be on the unemployment line.
Why didn’t they install computer programs that can detect keyboard logging? So the reporter is bringing up employee back ground checks even if it‘s just a dude cleaning the banks shit holes.
The thief could have just use a USB thumb drive, scan disk or a keyboard logging memory spot for information storage. ‘Memory Spots’ could be embedded inside a business cards self-adhesive dots with a fake shell-companies name on it.
Smaller then a grain of rice the little built-in antenna with chip could be programmed to capture keyboard logs or more via wireless LAN signals from inside the bank. The private information from the banks biggest clientele being diligently recorded by the surreptitiously placed memory spots in the ink on the business card.
I janitor could walk in a few day's later with a music cell phone taps a button and at 15 megabits per-second faster then Bluetooth wireless technology the stolen illicit data that was needed was uploaded in mere moments from the card placed a few day‘s prior and he just simply throws away the evidence and retires some where in Hawaii.
Besides that from what I've read banks probably well use memory spots to help protect their clienteles money in the future. So possibly things banks look into with employees they don't share to the public.
[ link to this | view in chronology ]
view from within
[ link to this | view in chronology ]
How True.
[ link to this | view in chronology ]
Banks!
[ link to this | view in chronology ]