Can I pretend Trusteer Rapport is installed

mikereed · 10-02-2015, 04:09 AM

Hi,
A website I visit insists (for security reasons) that I have Trusteer Rapport installed. For security reasons I don't use Microsoft so obviously I don't (and can't) have it installed. But when I am using, say, Firefox how does the website check Trusteer Rapport is installed? Is it simply relying on cookies that it leaves after installing itself? In which case would it be easy to create fake cookies to make the website think I have installed Trusteer Rapport?
Thanks for any help,
Mike.

ardvark71 · 10-02-2015, 11:13 PM

Hi Mike...

I see you used Windows Vista to make your post, is this OS installed on your personal system? If so, the only recommendation I can make is to install Trusteer Rapport on Vista and do the transactions that need this program using Vista.

It doesn't look like they will be supporting Linux anytime soon.

Regards...

ntubski · 10-03-2015, 09:31 AM

Based on http://www.nationwide.co.uk/support/...t/how-it-works I think they might be doing something a little more clever than just setting a flag saying "Trusteer Enabled". Perhaps opening an extra connection?

Quote:

Rapport verifies that you are really connected to the bank's genuine website.
Once verification is complete, Rapport locks down communication between your computer and the bank's website.
Rapport protects your computer and internet connection by creating safe communication with your bank, preventing use of malware.

Though I guess that could describe just enabling https. I wasn't able to find any technical descriptions of how it really works.

waltinator · 10-05-2015, 01:19 PM

You could use `wireshark` to capture/view/interpret the TCP/IP packets exchanged with the bank, to try to determine what sort of "verification" and "lock down" it's doing. Even with packets having encrypted content, you can see source and destination IP Address, TCP Port, size, flags, etc.