A Warning on Internet Cafes
Tuesday, April 25th, 2006I just read a good post on IrishEyes about the dangers of banking in Internet Cafes. With the recent influx of immigrants, netcafes are more popular than ever, and are springing up all over the place, largely in Cork. I wouldn’t be surprised to learn if our immigrant community does more of their banking online than in a bank - for example, last month AIB announced that over 1 in 6 online-banking transactions were to banks in Poland. I would expect that a large proportion of these took place in internet cafes. IrishEyes mentions that keystroke-logging software is a big risk in the Irish net cafes now. Despite having seen first-hand some of the dodgy dealings that can go on in an internet cafe - spammers, disgruntled employees with webmail, and kids installing back orifice, for example - this comes as a surprise to me.
Lar Veale, in the comments suggests that there be a code of practice established which cafes must sign up to. This is a very interesting prospect. I know that Nethouse used to (maybe they still do) automatically re-image each PC over the network every morning at 5am or something. Some cafes have very high quality security systems, with each station fully visible to a camera. Some other cafes give no administrative rights to the user, who can use nothing but their web browser and MSN. The unfortunate reality is that there are many internet cafes opened by people who know very little about computers and nothing about security, and they are endangering their customers. I remember one cafe which opened in the greater Cork area that had no antivirus installed, no firewall, and never ran Windows Update, and never reimaged their PCs.
With all the publicity that the ATM fraud got a few months ago, its about time somebody spoke up about the dangers of internet banking in the net cafes. Educating the masses will only get you so far, there should be a standard introduced, a League of Secure Internet Cafes, with a sticker on the window with a golden lock indicating that they follow the basic security procedures recommended by <insert relevant party here>. It won’t stop Krzysztof from using the Windows 98 PCs down the back of O’Dwyer’s Fishing Tackle & Internet Cafe, but at least its a step in the right direction. I know its frustrating when you can’t save your Quake config on the computer for future use because it will be wiped out at 5am, or when you can’t use IRC because its not in the start menu, but this is a small price to pay for knowing that your passwords probably aren’t getting stolen.

