• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Online banking hosted on IIS...

beatmix01

Golden Member
I just found out my banking institution uses IIS as their platform to run their online banking. For some reason this does not sit well.

 
So long as the admin isn't a complete chucklehead it's not as insecure as people think.
 
if my bank uses IIS i would feel like my money is slow... very slow

other than that, i think it's as secure as it being hosted in java or whatnot.
 
Originally posted by: beatmix01
Well it is either 5.0 or 6.0, I have yet to figure that out.

Why might you need to "figure it out"?

Are you some kind of super admin or security guru and have a well versed knowledge of the security concerns with IIS or are you some /. weenie who reads a headline and thinks he knows everything about something? Start a poll to answer that question please. Thanks.
 
Originally posted by: Rogue
Originally posted by: beatmix01
Well it is either 5.0 or 6.0, I have yet to figure that out.

Why might you need to "figure it out"?

Are you some kind of super admin or security guru and have a well versed knowledge of the security concerns with IIS or are you some /. weenie who reads a headline and thinks he knows everything about something? Start a poll to answer that question please. Thanks.


Actually I am a security guru / admin... However, from the rest of their web site/ infrastructure, I am not sure how well their internals are managed.
 
north fork is a huge bank and is FDIC insured. who cares if they got hacked and you lose all your money. the feds got your back unless ur bill gates-rich.
 
Originally posted by: beatmix01
Originally posted by: Rogue
Originally posted by: beatmix01
Well it is either 5.0 or 6.0, I have yet to figure that out.

Why might you need to "figure it out"?

Are you some kind of super admin or security guru and have a well versed knowledge of the security concerns with IIS or are you some /. weenie who reads a headline and thinks he knows everything about something? Start a poll to answer that question please. Thanks.


Actually I am a security guru / admin... However, from the rest of their web site/ infrastructure, I am not sure how well their internals are managed.

Then I'm guessing that you're freelancing right now or you're violating some type of privacy agreement. Either way, go ahead on if you feel it's right. Seems to me you're up to something though and posting your inquiry results to a public forum doesn't seem prudent for a "security guru/admin" looking to gain trust from an organization.
 
It just depends on what kind of people are managing things there. Even Apache can be terribly insecure if you have a complete moron managing it.
 
Originally posted by: beatmix01
I just found out my banking institution uses IIS as their platform to run their online banking. For some reason this does not sit well.

when you say online banking....what do you mean? can you transact online or are you just viewing your statements and checks online?

Also, IIS6 is pretty secure. And even if someone hacked into the bank, they'd need intimate knowledge of how the banking software and backend infractructure is setup in order to get to the data.

Now if their tapes were stolen like Bank of America and your data was on it...then you're screwed 😉
 
Online banking to perform transactions online. Regarding the Bank of America tapes... wouldnt you think the data backed up on the tapes would be encrypted?
 
Originally posted by: beatmix01
Online banking to perform transactions online. Regarding the Bank of America tapes... wouldnt you think the data backed up on the tapes would be encrypted?

you'd think....
 
Originally posted by: vi_edit
So long as the admin isn't a complete chucklehead it's not as insecure as people think.

:thumbsup:

An incompetent admin can setup Apache more insecurely than IIS, so what's your point?
 
Back
Top