Banking Problem

Explosive_Cornflake

Hmmm, this is one I can't figure out.
My parents use ulster bank internet banking.
I'm not great on this stuff, so my description may be a bit crap. When you sign up it generates a ????????.der file.
You use that 8 digit number together with a pass phrase and you get in. There's some jazz with applets(you see my nievety ). Now, what i used to do before was backup the *.der files, and stick them into the appropiate directory( windows/java for IE, and doucuments and settings/username seems to be it for firefox). This has worked between, 98SE and XP home, but the other day I went up to XP PRO SP1. All i'm getting in error on page...., i don;t think the applets downloading.
Firefox is a different matter, have to go to the log in site, hit submit, doesn't do anything, and then pick connecting to secure server from the go menu to get it to work.
Thing is this a bit roundabout, and my father doesn't like using firefox... Oh yeah, i downloaded the sun java 2 platform, cuz firefox wanted it.
I have mcaffee firewall installed, but i don't think thats the problem, because i've set it to allow IE to do what it likes.
Anyway, if you have any idea's let me know, or if you need any more info, etc.
Thanks.

Martyr

I've been working on an SSL Cracker for some months now.
But certainly not for releasing to public as to crack SSL sessions offline.
SSl/TLS is outdated..using particular algorithms, it is weak.
But this is just an opinion, I won't provide proof of my own,
because I don't care what some experts think.
I have my own views, and personally, if I had a substantial
amount of money in a bank, I would never bank online.
But, you rest assurance, unsure with the bankers, who are
always practical.
I admire them.

Tom Dunne

Ah yes, Ulster Bank Anytime. I have had nothing but trouble with the damn thing and those .der files.

From what I can determine, the .der files are used to check the password you enter (so it isn't broadcast over the interweb) via the Java applet. This is where the fun starts. Make sure that the .der file is in C:\WINNT\java - it may have been deleted by the service pack patch.

The easiest option is to ring Ulster Bank up again and reset the password - this will re-generate the .der file. Once you re-register and log in, make a backup of the .der file so you can copy it to other machines, if need be.

secret_squirrel

Originally posted by Average Joe
I've been working on an SSL Cracker for some months now.

And this has what to do with the original post??

Afaics he wants to get ulsterbank anytime working with Firefox.

Cornflake - if you get it working properly let me know. I've had no luck getting it working with opera or IE... Im on XP pro sp1 too. works fine on my NT machine, only on IE tho.

Tom Dunne

Originally posted by Average Joe
I've been working on an SSL Cracker for some months now.

Yes, WTF was that about?

I forgot to mention that I have UB internet banking working with both IE and Mozilla version 1.6.

theciscokid

Originally posted by Average Joe
I've been working on an SSL Cracker for some months now.
But certainly not for releasing to public as to crack SSL sessions offline.
SSl/TLS is outdated..using particular algorithms, it is weak.
But this is just an opinion, I won't provide proof of my own,
because I don't care what some experts think.
I have my own views, and personally, if I had a substantial
amount of money in a bank, I would never bank online.
But, you rest assurance, unsure with the bankers, who are
always practical.
I admire them.

um.. why did you mention that then?

i mean you tell people that it's weak (in your opinion)

but don't ask you for proof ; you just satisfied your own curiousity..

ok if you recommend people not to use/trust it , you have to show them proof.. and you say you don't want to, so why bloody mention it?

Explosive_Cornflake

No, I ain't got it working yet. Have backed up the .der files and threw them into the right directorys. Used to work in IE on XP HOME SP1, i never tried it with firefox. Works in a roundabout way in Firefox on XP PRO SP1, but i'm getting no joy with IE.
Actually, i meant to post this the last time, Where i'm getting stuck in IE is where it checks the applect version.
Getting an error on page:
Line: 55
Char: 3
Error: Object Doesn't support this property or method
Code: 0

I think this is line 54-56

if ( document.applets.UBjaver )
{ iJavaVer = 1*("" + document.applets['UBjaver'].getJavaVer() )	}; 
checkit();

I know SFA about this. Anyway, the only difference is i'm using XP pro, does it do anything different with java?

Martyr

i mean you tell people that it's weak (in your opinion)

Yeah, OK.
I made some silly remarks, but i still wouldn't bank online.
As it is I wouldn't mind, i've only 7 euro in one account and
an overdraft in the other.

but don't ask you for proof ; you just satisfied your own curiousity..

some software still exchanges keys between client and server,
which is enough in itself.
then others require brute force, offline usually.