benohear

Turns out the thieves first hack your web browser (through the usual means) and then alter the web page of your bank to display instructions to install a "security" app on your smartphone (MITB attack). So then they have access to both factors and you're boned. Google "Eurograbber" to find out more.

What I find kind of scary is the usual caution is likely to fail. After all, this is the correct URL and the correct SSL cert, so if the fake visuals are well produced it will appear completely legit.

I suppose one approach is to make sure you always logon with a clean browser, so I was thinking of a portable VirtualBox with a copy of Linux used solely for the purpose of online banking. I could even hand out keys to my friends.

Do you think this would be effective? And what precautions do you take with online banking?

The improvements I'm looking for over "normal" hosting is more reliability, consistent performance and competent tech support. Titan Internet in the UK used to be just that, but they got acquired and "things ain't what they used to be".

VPS's exist in that price range, but I don't need the control nor the hassle of self management. Then there's a huge leap between that and the managed VPSs of someone like Rackspace ($200 / month seems to be the starting price there).

Suggestions, anyone?