|
It's perfectly safe. IP cannot be spoofed with the exception of UDP packets. TCP needs to establish a connection in two directions (if someone sends a SYN packet with a fake source, they won't get an ACK packet back). Every online bank I've seen doesn't ask for your entire password or pin at once, but for random chars, in order to negate the threat of keyloggers. Most require one set of details to log in and view information, and another which you only use to make transactions and do 'dangerous' stuff.
Of course there is a lot of publicity surrounding online banking scams, etc. This does not mean it is unsafe for anyone except novice users. Most of the scams are phishing scams, where scammers send out mass-mails claiming to be from a bank, and hoping that someone with an IQ lower than their shoe size will think "wow, my bank wants me to visit their homepage at ht1p://www.geocities.com/~mybank/really.html and type in my password, ssn, pin, credit card number, etc in order to [insert lame reason here]".
|