Enter Ubuntu. With Ubuntu and remastersys you can make a cd (called a Live CD) that can boot up and allow your windows PC to be transformed into a secure platform for your internet banking. This task is not what this post is about. For that checkout this very good tutorial. There are also great tutorials on making a bootable USB drive, however, this will end up being less secure. Why? If you also happen to use that flash drive to store files on then it can be a target for malware and viruses. That's why a read only copy of the OS is the best idea.
"But mybank uses two factor authentication". Nice... but there is no way to assure the security of your transaction if you are operating from a compromised PC. Check out http://blogs.zdnet.com/security/?p=4402
All you banks looking to spring for the RSA token for each account holder, it's not going to help your customers.
What I would like to explore is the idea that Ubuntu has the perfect opportunity to get avg Windows users to experience the Ubuntu OS. Once they become at ease with the look and feel it can't be too much of marketing effort to get them to switch for good. To that end Ubuntu should promote this use of their OS heavily.
And with more power! Firefox should benefit too being the default browser in the Live CD. This ensures that the user also gets a taste of FireFox as well. This would drive their penetration too.
But wait there's more! Banks want you to use the internet to do business with them. It cuts down on their paper and processing costs. So much so that some banks are already considering providing these live CDs. Just think of the opportunity here Mr. Shuttleworth. Work with the banks and facilitate them distributing your software. You can't get any more Tom Sawyer than that!
Here are some other sources for thought on this subject.
- http://voices.washingtonpost.com/securityfix/2009/10/avoid_windows_malware_bank_on.html
- http://www.cyberciti.biz/tips/use-linux-live-cd-usb-for-online-banking.html
- http://blogs.computerworld.com/15815/can_ubuntu_save_online_banking
Any utility that would need to be created around this would be a good idea. The one I can think of is a utility to save off a users bookmarks from their windows installation and then allow those to be imported into the Ubuntu image before it is packaged up into the Live CD... Perhaps one that allows you to select the browser to be included? Can you think of any others?