Posted on Thu, Apr 01, 2010 @ 08:30 AM
Authored by Mike Gargiullo, Sr. Security Consultant at Pivot Point Security.
In my last article I detailed a discussion I had with my parents about using an Ubuntu Live USB Drive to do their banking. I realized that it may be helpful to show the steps involved in creating one. It doesn't take long at all. So as a follow up to my previous article "Banking With Live CDs", here's "How to Create a USB Live Drive for Banking"
A few notes before we get started. Older computers won't allow you to boot from a USB drive so you will have to use the CD method instead. For the Live CD visit http://www.ubuntu.com, download, burn and enjoy. Something else I've notice is older Dell computers may have issues with networking. There are fixes available, but they are beyond this article.
UNetbootin is the program that makes creating a USB Live Drive quick and simple. It allows you to create a USB key from which you can boot your computer with Ubuntu. To get started, point your browser to: http://unetbootin.sourceforge.net
This program allows for a lot of nice customizations, but we're going for a straight setup. Since I'm on my Windows computer (and I assume you are as well), download the Windows Version.
Insert an empty USB key into your computer and note the Drive letter Windows assigns it. Launch UNetbootin once it has finished downloading. In the left-hand dropdown, scroll to the bottom and select Ubuntu. The right-hand dropdown should automatically pick the latest version. At the bottom, select the drive letter of the USB drive. This will allow the tool to automatically download Ubuntu and install it to the selected USB drive.
Click OK. The tool will then start the process.
Depending on your internet connection speed it may take a while. For instance, my download took 20 minutes on a good sized cable modem.
Ok, the USB drive is ready. You should choose "Reboot Now" if you'd like to test your USB Live Drive.
Most computers have a method of selecting the medium to boot from. My Thinkpad uses F12. Holding the F12 key while booting brings up a menu.
Select the USB Drive you just created.
A few seconds later you will see the boot screen. Select Default and hit Enter.
In a few moments you will see the Ubuntu desktop. You can see that it immediately saw our wireless network and asked me if I would like to connect.
Since the all the files live on the USB disk the configuration changes you make should be saved.
You can now safely visit your bank online using the Firefox icon on the top menu bar without fear of the current generation of Malware that targets Windows computers.
(ONE NOTE OF CAUTION: After using the USB loaded with Ubuntu, be sure to check your computer's clock after restarting in Windows. There have been some incidences where the clock has reset after starting in Ubuntu. It's an easy "fix" in the Accessories.)
Posted on Sun, Mar 28, 2010 @ 08:06 AM
Authored by Mike Gargiullo, Sr. Security Consultant at Pivot Point Security.
With all the information out there on the Zeus bot and malware like it, we made a decision at home not to use Windows to access any of our online banking sites. Now to be honest, we probably had a head start in that arena as we only run Windows on our Work laptops. The home laptops and desktop all run Linux of one flavor or another. One evening not too long ago we were at my parents' house and the discussion of these bots and their method of operation came up. I'll skip the part of the conversation where we discussed how they "protect" themselves now with changing their complex passwords often, etc. The conversation wound up with the question of what to do. Do you discontinue the use of online banking and roll back the convenience clock or do you find a safer way to do these things?
I showed my parents the Ubuntu Live USB key I have in my bag and grabbed my father's laptop. A live CD (or USB key in this case) allows you to run another operating system without altering the Windows operating system. If you like it, there are menu options that will auto-install Ubuntu on either the whole hard drive or in the free space. That, however, is for another blog article. A few seconds after turning on the laptop with my Live USB key in, we were looking at the Gnome desktop. 
My mother was the first to recognize the Firefox icon on the top menu bar and within seconds she was surfing the web with Ubuntu. They decided that this was an easy way to stay safer while using their bank's web portal. You can download your own live CD from http://www.ubuntulinux.org/getubuntu/download .
One last note before I go. While you are less likely to get "infected" while using Linux, it is not impossible. It's all a numbers game, once Linux gains more popularity; the bad guys will start writing malware for Linux... Until then, happy computing.
Find further help at our blog posting on Creating an Ubuntu USB Live Drive