[Gllug] OT: PC banking security in New Zealand

[David L Neil Mailing list a/c]

Of possible interest: PC user's duty to combat malware cf Internet
bank's duty of care, and customer relations. Two articles from New
Zealand's Computerworld and general newspaper.


Having lived and worked in New Zealand, and been PM to build an
'Internet Bank' on behalf of IBM, I've long been intrigued at how much
better 'the banking experience' is down there, and how much better
protected are consumers (not just in their relationship with their
banks) compared to here - in particular the horrendous shift of
responsibility loaded onto the back of the 'secure' Chip 'n Pin...

When I was there (a few years ago now), the banks were falling over
themselves to encourage Internet banking and I was offered 'Internet
only' credit cards (additional to any existing normal and 'dual-use'
cards) to reduce the risk or perceived-risk, for example. I recall
having one issue, and there was virtually no questioning or implication
that I was 'in the wrong' before the funds were refunded.
(hard to believe I know, but it's true!)

Recently they seemed to be taking a page from British banking's play
book, and wanted the right to 'inspect' a user's computer to be sure
that (s)he was taking adequate precautions to prevent fraud (define
those if you can!) before refunds might proceed. "Er, no" said the great
British, um, New Zealand public...


Banking code backdown boosts user confidence
Bankers' Association removes controversial provisions from Code of Practice
By Stephen Bell Wellington | Monday, 30 June, 2008
The Bankers' Association has rewritten its Code of Practice, removing
controversial provisions allowing banks to inspect their customers'
computers in cases of online fraud.
...
 http://computerworld.co.nz/news.nsf/news/33B75B389A083E71CC257474001BFCD7


New internet banking code limits liability for fraud
By TOM PULLAR-STRECKER - The Dominion Post | Monday, 30 June 2008
An internet banking code released today limits the circumstances under
which customers can be held liable for online fraud losses, but stops
short of providing a strings-free guarantee that banks must reimburse
customers.
...
 http://www.stuff.co.nz/4601408a13.html


Regards,
=dn
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug