Taomech, on Jun 14 2010, 04:25 AM, said:
This is a good idea and I think an American bank was thinking of implementing it. However, if the banks implement this idea it presents more problems.
The current model is that banks will offer LiveCds with linux at their branches, which users use to access their bank account. There is still a problem with this. It only takes a disgruntled employee a few minutes to burn his own LiveCD with malware and then slip it in the pile at the bank. Hopefully someone will find a way to fix this security concern.
Thanks,
Taomech
That's easily fixed by adding a cryptographic signature. One can change the contents of the CD by only a single bit and the signature will fail to validate. Using public key cryptographic methods means that only the person(s) with access to the private key will be able to sign the CD's image.