Home
I received email today from USAA and therein, they recommended I install: Trusteer Rapport.

Alas, I have no knowledge of this app and wonder if others here 'bouts have experience with it and what your opinions/recommendations may be.

Perhaps if I better understand how it works rather than what it is supposed to do I would feel less apprehensive. As it is, I'm confused.

Musings most welcome.
I received no such email from USAA (and, yes, I do have an account). I know nothing about this app but, on the possibility that your email was a phishing email or spam, I would contact USAA directly (via phone or a known bookmark) and inquire.
I installed Trusteer Raport on a recommendation from USAA some months ago. It does not interfere with access but provides an additional level of authentication when logging into your USAA account. It can also provide an automatic login to the USAA site. I don't use the automatic login as I have that covered elsewhere, but the additional authentication does provide a warm fuzzy feeling of security.
Neither of my two banks, Ally & Chase, is listed in the "Banks" drop-down on the Trusteer d/l page. (Maybe Chase isn't big enough to matter?)

Have you got any idea what the significance of that drop-down is?

Edit: Opened ticket.

Update: The drop-down is a list of Trusteer clients.

Edit: I did a bit of searching, and I think Trusteer's protection against MitB(rowser) attacks is not a duplication of DNSCrypt's MitM(iddle) protection. Am I correct?

Update: Nope! Looks like it is (Couldn't get a working URL.)...

Originally Posted By: Trusteer
Which attacks does Rapport protect against?

Phishing

A phishing attack is when the attacker builds a phony website (the phishing site) that looks exactly like a website you know and trust (for example your bank's website). The attacker then lures you to visit the phishing website (for example by sending you a fraudulent email). When you arrive at the phishing website you mistakenly believe that this is the real website. As soon as you try to sign into the phishing website, the attacker grabs your login credentials and can now use them to login to the real website, impersonate you and initiate fraudulent transactions.

Pharming

A pharming attack is when the attacker causes your computer to go to fraudulent website each time you type a real website's name in your web browser address bar. The attack accomplishes this using various techniques such as infecting your desktop with malware or by compromising servers in your ISP's network. Once you arrive at the fraudulent website and try to sign in, the attacker grabs your login credentials and can now use them to login to the real website, impersonate you and initiate fraudulent transactions.

Keyloggers

A Keylogger is malicious software that hides itself inside your computer. The keylogger records keystrokes (i.e. each time you type something on the keyboard) and then sends this information to the attacker. By grabbing your sign-in credentials and other sensitive information and sending them to an attacker, keyloggers enable an attacker to login to your accounts, impersonate you and initiate fraudulent transactions.

Man in the Middle

Man in the middle is an advanced variation of Phishing and Pharming attacks. In this particular attack you sign into the website and start working all the while entirely unaware that all the information exchanged between you and the website is passing to the attacker. The attacker can view any private information and can alter your transactions. For example, if you request to transfer a certain amount of money to a specific payee, the attacker can change the payee's identity and have the money transferred to a different account.

Man in the Browser

"Man in the Browser" is malware that resides inside your browser in the form of an add-on (e.g. toolbar, BHO, browser plug-in). This malware controls everything that happens inside your browser. It is capable of reading sensitive information such as your sign-in credentials and passing them to the attacker. It can also generate transactions on your behalf, such as transferring money from your account to the attacker's account.

Screen Capturing

This term refers to malware that takes pictures of your computer screen and sends them to the attacker. Screen shots can include your account details, balance, and even credentials when the website uses keypads for login.

Session Hijacking

This term refers to malware that steals your session parameters with a specific website and sends this information to the attacker. These session parameters can then be used by the attacker to take over your session with the website and to bypass the authentication process that is required to log into the website.

This app from IBM sounds like a must have, so why is it so obscure?
Artie,

One can add sites to the monitored list by clicking on the Trusteer icon (to the right of the Address bar). Once clicked, a drop down menu will present an option to protect that specific site. That feature works with all sites, not just financial institutions.

> ...all sites, not just financial institutions.

I assume, then, that the client list is for their own info and has no impact on functionality.

Thanks, Harv, and thanks for starting this thread. Trusteer appears to be a useful and desirable app.
Originally Posted By: artie505
> ...all sites, not just financial institutions.

I assume, then, that the client list is for their own info and has no impact on functionality.


If palliative bromides help, then perhaps the list is of value. Otherwise, fugedaboudit.

Now that USAA is Trusteer champion, I expect we will see more of this app in the marketplace.

Have you looked at the list of Trusteer clients on the d/l page? It's extensive enough that I'm surprised that it hasn't popped up sooner, particularly since it's an IBM product.
Originally Posted By: artie505
Have you looked at the list of Trusteer clients on the d/l page? It's extensive enough that I'm surprised that it hasn't popped up sooner, particularly since it's an IBM product.


Yes, though I see it of no user benefit. The sites I added are now at the bottom of the list and they may be edited, and that is fine. But I take exception that IBM's list is not editable, nor can it be hidden. Also, I think the list should be searchable... Maybe in my next life.

Still, I'm glad I have it and 'twas well worth the price.
Originally Posted By: jchuzi
I received no such email from USAA (and, yes, I do have an account). I know nothing about this app but, on the possibility that your email was a phishing email or spam, I would contact USAA directly (via phone or a known bookmark) and inquire.


Jon, my apologies for not promptly getting back with you. A bit red-faced am I.

Yes, I did call USAA and they did affirm that the email I received was from them.
Feedback filed...along with other stuff! (If the list is editable, does it really need to be hide-able?)

The user benefit is that clients of Trusteer clients get extra protection...spelled out in SysPrefs > Trusteer Endpoint Protection > Security Policy (when the disclosure triangles are disclosing).
Originally Posted By: artie505
Feedback filed...along with other stuff! (If the list is editable, does it really need to be hide-able?)


I would suggest hide-able over edit, just in case one ever wanted (without reinstalling) the deleted data.

And thanks for noting the Trusteer Endpoint Security/Disclosure Triangles.
I suspect that the client list is presented in all its glory for promotional purposes; it'd be plenty easy to have the list cached somewhere and to move a client from the cached list to the active list the first time a user visits its site.

Edit: Note that clicking on many of the names in the client list calls up an ad.
For those who have an interest in the mobile version of Trusteer, I began a thread Here.
To access SysPrefs > Trusteer Endpoint Protection > Security Policy you've got to get past a CAPTCHA pane that says

Quote:
You have chosen to perform an action that requires user approval.

To me, that suggests that an Admin password should be required...that Rapport is insecure in at least one respect, but the CAPTCHA pane suggests that somebody thinks otherwise.

Any ideas?

Edit: Feedback submitted. (This app was clearly not designed by a team that's familiar with OS X.)
I needed to turn Rapport off as a troubleshooting step, and I was amazed to find that doing so required getting past both an admin authentication pane and a CAPTCHA pane.

Huh? confused
Originally Posted By: artie505
... [turning off Rapport] required getting past both an admin authentication pane and a CAPTCHA pane.

Huh? confused

Think about it: that requirement can be considered an additional safety feature to prevent (or at least make more difficult) malicious disabling of Rapport.
I've given it considerable thought, and my criminal mind hasn't been able to dream up a single situation in which a CAPTCHA pane would stymie any individual, other, perhaps, than an imbecile, who knows or can guess my admin password.

I'm curious to hear what scenario yours thinks would benefit from one.

This use of CAPTCHA, taken together with its use as the sole security measure protecting Rapport's Security Policy pane, leaves me with the distinct impression that as adept as Rapport's devs are at Internet security, they're equally obtuse about local security.

Addendum: I just turned Rapport back on, and I (only) had to enter my password.

Think about this: Three different situations in which the devs felt that security is required, and three different solutions, two of them relying, either solely or in part, on a security feature that's specifically designed to stymie Internet bots, not people.

Edit: And considering its vulnerabilities, why isn't a password required to access the pref pane in the first place?

Edit 2: And when I asked tech support why user added protected sites can be deleted, poof, just like that...no password, no CAPTCHA, their answer was that the applicable security feature is that users will notice that their icons have turned from green to (a very similarly colored) grey on the unprotected sites. (And what about users who don't opt for an icon in their address bar?)

Again... Huh?

Edit 3: IBM paid a GigaBuck for Trusteer, and while they may have gotten their money's worth in concept, it can be argued that they overpaid, because, at least in part, the implementation neutralizes the concept.

Edit 4: And just for laughs, I'll mention that clicking on any of the options under "Help and Support" in Rapport's pref pane while Safari is already open results in the launch of a second Safari that doesn't show the Rapport icon in its address bar even though the original Safari does. And nobody ever noticed! And they expect us to notice that the icon has changed color?
Originally Posted By: artie505
I've given it considerable thought, and my criminal mind hasn't been able to dream up a single situation in which a CAPTCHA pane would stymie any individual, other, perhaps, than an imbecile, who knows or can guess my admin password.

I'm curious to hear what scenario yours thinks would benefit from one.

I wasn't thinking so much of the CAPTCHA pane than of the admin authentication it was associated with. I suspect the CAPTCHA module was included 'by default', and for the same reason it's included elsewhere despite its limited utility. I do agree with you regarding other questions you can ask about the rationale behind certain aspects of Rapport's functionality and its UI.
Attention Rapport users: I learned from a response to a bug report that changes you make to Rapport's "Security Options" pane are not implemented until your Mac has been restarted.
Originally Posted By: artie505
Attention Rapport users: I learned from a response to a bug report that changes you make to Rapport's "Security Options" pane are not implemented until your Mac has been restarted.


That's good info and 'tis well to remember. Thanks!

BTW, since Rapport is free, why do you suppose IBM is mucking about with this?
It's free to end users, Harv, but if you take a monstrously long, one-at-a-time trip through Rapport's client list...the list of "Trusted Websites" in its pref pane, you'll see why IBM paid a gigabuck for Trusteer.

By the way, my bad for not noting that "Warn when I submit security data to insecure sites", one of Rapport's "Security ( tongue ) Options" is set to "NEVER" by default.

Originally Posted By: Rapport Tech Support
Please be advised that the default status of the policy in question is automatically set to "Never". This has been decided by the organization or banking institutions through which you were offered the Trusteer Rapport software.

My response to the effect that I was not offered Rapport by any institution...that I learned about it only because of your OP, has not been addressed. (And unless I'm completely misunderstanding the pref, I've got no idea why anybody would want it set to "Never" by default.)
Perhaps you understand...

When first going to a [new] bank site or such and presented with the window to enter your name and PW, is it that window that should be added to Rapport or the subsequent window (after log-in) that is to be included? Or both?
When you visit a new site on which you'd like protection, as soon as you get to its login page (Edit: Actually, the first page you get to, login or not.) you need to click on the Rapport icon in your browser's address bar and accept the resultant dropped-down offer.

Then, after you've entered your password and clicked on "Submit", you should get a second drop-down with an offer to protect your password, which you should also accept.

I'll note that the process is subject to glitches: By way of example, I've been unable to protect my Chase Bank p/w on the login page I've traditionally used and have had to log out and access a different login page in order to gain protection. Further, I've had major problems getting my eBay p/w protected, and while I have worked it out, I'm unable to explain how.

As you've noticed, your personally protected sites turn up at the bottom of Rapport's "Trusted Websites" list, but you've got to look under "Warn When Login Information is Used in Unknown Websites" under "Security Options" to see your protected p/w's.

Hope this helps, Harv.
Latest update:

To make a long story short, Rapport automatically d/l's and installs updates, but you've got to restart to get them to take effect, and unless it pops up notifications in versions of OS X later than Snowy there's no way of knowing that an update has been issued without repeatedly checking the pref pane and repeatedly enduring the 15 second delay until it opens. You can't even find out from their Website, because version numbers aren't posted (but I'm working on it).

Edit: That is, of course, only posted for the benefit of those who don't restart regularly.
Thanks, Artie. Another tidbit that would have escaped me.

And while you've got the developer's attention, perhaps you can get them to fix/resize their icon in System Preferences...

And maybe, just maybe, in some far distant region of the galaxy, they will, someday, have an option to auto-sync desktop settings with mobile settings.

Posted By: Pendragon New Update 3.6.1404.15 - 10/04/14 10:43 AM
FWIW: My Trusteer Rapport did not automatically update. I am not sure when the new version was published, but Here is the link for the new/updated version.

Aside from a new icon in System Preferences, I know not of what changed/improved.

P.S. The "app" (in system preferences) now instantly launches.
Posted By: artie505 Re: New Update 3.6.1404.15 - 10/11/14 06:16 AM
Rapport has been an ongoing nightmare for me, Harv; I've long since lost count of how many e-mails I've exchanged with tech-support.

If you're saying that you weren't auto-updated to v 3.6.1404.15 even though you have got the box checked, it may be because (as per tech-support) updates that are available on the website have not always been released for auto-d/l (lord only knows why). On the other hand, you may actually have been updated but hadn't restarted, which is necessary despite the fact that it's nowhere stated (nor are we even explicitly advised that a silent update has occurred).

The .15 update was the result of my finally beating it into tech-support's heads that SysPrefs hung for 15 seconds before Rapport's prefpane launched, but their solution moved the hang, rather than corrected it...

The initial hang was the fallout from Rapport's pref pane loading a ton of garbage into its "Trusted Websites" pane before launching, and the solution has resulted in the hang being bumped up a notch so it now occurs after the pref pane has launched, the new fallout being that "Trusted Websites" now takes ten seconds to load after the pref pane has launched, and if you click on it too soon, SysPrefs freezes and must be force-quit.

V 3.6.1404.16 is now available (I got it via auto-d/l.), and I believe it 's supposed to fix the new hang, but it doesn't.

I hope that's clear.

PS: How many apps other than Rapport have you seen stop in the middle of the installation process to present a Captcha pane?
Posted By: Pendragon Re: New Update 3.6.1404.15 - 10/11/14 10:07 AM
Originally Posted By: artie505
Rapport has been an ongoing nightmare for me, Harv; I've long since lost count of how many e-mails I've exchanged with tech-support.


No surprise there; that's been my experience. I have now quit mucking about with them. I had the "Safari quit unexpectedly while using the RapportDaishi.dylib plug-in" problem. I sent crash logs and references/links to several Mac sites containing postings of others with this same problem. Finally a call from the one of the Rapport experts. He wanted Remote Access. As he already had my crash logs, I asked what else he intended to determine/see. He couldn't tell me, so I declined his invitation. For me, v3.6.1404.15 resolved the issue.

Despite shut downs & restarts, my auto DL still did not work correctly. Even if I manually checked, I was advised I was up to date (not so). Were it not that you mentioned v3.6.1404.16, I would still be on the previous version. Perhaps this latest version fixes my DL issue.

Of course, I suggested they announce/post their updates on MacUpdate and the like, but it seems that suggestion was not well received.

And I still can't find the link that references the current version number and the changes/fixes.

A visually impaired gent in my local MUG says that Captchas drive him (and his screen reader) nuts. Having such mid-stream is bizarre in the extreme. What are those Rapport folks thinking? Perhaps they were absent the day installers were discussed...
Posted By: artie505 New Update 3.6.1404.18 - 10/22/14 07:48 AM
Where to start?

Here, I guess... Rapport v 3.6.1404.18 is available for d/l. It wasn't d/l'ed silently, nor did "Check..." advise me of its existence; I had to seek to find. This go-round, installation resulted in an immediate version number update in Rapport's pref pane, so I guess a restart is no longer required (if, in fact, one ever really was). (Here's a direct d/l link: <http://download.trusteer.com/Gcur4Wtnu/leopard/Rapport.dmg> Just click on it, and the d/l begins.)

In the past, their advising me that they've "escalated [my] email to [their] experts for further analysis" has yielded an update within 3-4 days, and this time was no exception, but if the update was intended to correct the "Trusted Websites" loading freeze...my issue, it was unsuccessful.

I also experienced the Daishi issue, and that was the second time they asked me to submit my logs. The first time, their auto-gathering function had worked, but it failed, with a pop-up, the second time. This time, the auto-gather button was gone, and I was pretty put-off having to gather and compress logs from 8-9 different locations, and then they didn't get my e-mail attachment, so I had to resubmit through their ftp panel. (Happily, I had had the foresight to save the logs.)

And the kicker is that one of the logs they ask for is owned by root, fer cryin' out loud! Do they seriously expect their users to either enable root or change the permissions on 5 levels of folders to access that file?

Not me dude!!!

Like you, I've had it with them...at least until they abandon their arrogant attitude and accept and deal with constructive criticism - Captcha panes? Hah! - as readily as they accept and attempt to deal with bug reports.

Addressing your other points: As far as I can tell, the only way to determine the version number of a d/l is to install it and look in Rapport's pref pane. (What I've taken to doing is d/l'ing and using command-I to determine creation date.)

A change log??? Surely you jest!!!

On several occasions I've seriously wondered whether anybody on their development team is actually running a Mac. tongue

Edit: I keep forgetting to ask whether you're running Rapport as a client of one of their member institutions or as a freelancer, as I am? There's apparently a difference in the way updates are disseminated to the two groups.
Posted By: Pendragon Re: New Update 3.6.1404.18 - 10/22/14 02:58 PM
Thanks again, Artie.

As for the updates, I checked immediately before accessing the DL link and shorenuf, no indication that an update was needed.

That a third party developer would require the user to get Root access is a new one for me.

I agree, if any of that gang has Apple expertise, well, they have done a great job in concealing that from me.

AFAIK, I am running Rapport as a freelancer, though I was strongly encouraged to use same by USAA.

Alas, I can't help but question the quality/validity of the product when the customer support is so dreadful. No wonder IBM is in turmoil...


Posted By: artie505 Re: New Update 3.6.1404.18 - 10/22/14 03:26 PM
Alert, Harv!

I just awoke to discover that v .18 has got a serious bug: my screensaver coming on while my MBP's lid is closed causes my deuced Mac(hina) to freeze, requiring a forced shutdown.

If you're running a laptop, I advise against your installing the new version; I intend to revert after some experimentation.
Posted By: artie505 Re: New Update 3.6.1404.18 - 10/22/14 03:46 PM
If USAA is one of your protected websites, Rapport may treat you as a client of a member institution, which may affect your auto-d/l situation. (In case you're unaware, you're entitled to extra protection on member institution websites.)

Rapport is not an IBM developed product, rather it's an acquisition.

More to follow on the screensaver issue, and it may now be time to bring up another issue that I've long chosen to overlook.

To me Rapport is kinda like a doctor: They're all the greatest until they screw up. (Is there any way to determine that Rapport is actually doing all the stuff it says it's doing without paying a price?)
Posted By: joemikeb Re: New Update 3.6.1404.18 - 10/22/14 08:39 PM
I am running Trusteer Rapport that I got through a download from USAA and when I "Check for updates now" in the System Preferences > "Trusteer Endpoint Protection it reports I am running version 3.6.1404.16 which is the latest version and it appears to be working perfectly with Safari 8.0. the latest version.

The only thing I have to restart for a Rapport update to take effect is Safari and although my computer runs 24x7 Safari gets launched and relaunched several times a day so that is not a problem for me.
Posted By: Pendragon Re: New Update 3.6.1404.18 - 10/23/14 11:11 AM
I installed v .18 a few 2 or 3 days ago, and have yet to discover a problem/conflict (other than as already discussed). But what gremlins await, ah, that is the question.

That the Trusteer/Rapport coding is lacking, would not come as a surprise. To me, it seems very much in the beta stage.
Posted By: artie505 Re: New Update 3.6.1404.18 - 10/26/14 05:46 AM
Originally Posted By: joemikeb
I am running Trusteer Rapport that I got through a download from USAA and when I "Check for updates now" in the System Preferences > "Trusteer Endpoint Protection it reports I am running version 3.6.1404.16 which is the latest version and it appears to be working perfectly with Safari 8.0. the latest version.

The only thing I have to restart for a Rapport update to take effect is Safari and although my computer runs 24x7 Safari gets launched and relaunched several times a day so that is not a problem for me.

Although Rapport's pref pane reports that the current version is v .16, v .18 is available via the link I gave Harv, and tech support has advised me on numerous occasions to d/l "the latest version" - via said link - in the event of issues. (For what it's worth, when v .16 was the then-current equivalent of v .18 I was told that it had not yet been released to all member institutions.)

When my installation was silently updated from v .14 to v .16 I had to restart before my version number changed in my pref pane, but when I d/l'ed and updated to v .18 my version number changed after I quit and relaunched Safari. Confusing the issue, though, was tech support's consistently having advised me to restart after installing "the latest version", so, and particularly in view of the obscure nature of the beast, I couldn't be 100% certain that the updated pref pane was proof-positive of anything...and I restarted for good measure.

Aside: Precisely how did you get Rapport "through a download from USAA"? Does that mean that you didn't have to visit Rapport's web site? (The only institution on Rapport's member list with which I deal is PayPal, and they've never even advised me of Rapport's existence.)
Posted By: artie505 Re: New Update 3.6.1404.18 - 10/26/14 06:05 AM
Update...

I feel like Audie Murphy!

When I experienced the closed-lid freezes immediately after installing Rapport v .18 I assumed that the update was responsible because I had been living with an ongoing Rapport/closed-lid issue since installing the app.

Unfortunately, though, I forgot that my existing issue involved NoSleep, so although my new issue was real, it wasn't necessarily the least bit relevant to most of the world.

Now, to make a long story short, after a horrendous and fruitless night of troubleshooting, including performing a clean install of OS X 10.6.8, it was looking like my issue was really hardware related, and I was on the verge of swapping out my DIMMs when I remembered that in addition to updating Rapport, I had also begun placing a protective layer between my keyboard/trackpad and display when my MBP's lid was closed, both immediately prior to the onset of the freezes, so I experimented, and it turned out that therein lay the roots of my problem...

The layer was too thick (explanation on request), and that resulted in the trackpad being depressed when the lid was closed, and that caused my freezes (but only with NoSleep on).

I've since customized the protective layer so it no longer presses on the trackpad, and my issue has been resolved.

Sorry for being an alarmist.

Under any circumstances, though, I've now uninstalled Rapport. Clean installations of the newest versions (I've yet to see the new EULA that's supposed to pop-up during installation.) didn't recognize and, therefore, subsequently protect my transmitted passwords, and, as has always been the case, it slowed Safari 5.1.10 to a crawl.

Rather than continue to beat my brains out dealing with an abysmally slow Safari and the Rapport tech-support team's arrogance, burdensome demands, and non-responsiveness, I've decided to live with "bogeyman-in-the middle" vulnerability (unless somebody can direct me to Rapport-similar protection for OS X 10.6.8, DNSCrypt apparently being a dead issue as respects Snowy) until the Rapport house is in order. tongue

Footnote: Rapport has a new d/l procedure: You can't access a d/l link until you give them your name and e-mail address and select their member institution with which you deal (apparently for no more than data collection purposes, though). Although v .18 is the latest available version, two nights ago I was given v .14, and last night and tonight (24th/25th) I was given v .16.

Following installation, you're taken to a page that asks "Did you see our new EULA pop-up?" but doesn't offer you an opportunity to say "Nooo, I didn't!"

I certainly hope Rapport functions faaar better than it presents itself.
Posted By: Pendragon Re: New Update 3.6.1404.18 - 10/26/14 12:13 PM
Originally Posted By: artie505
[quote=joemikeb]

Aside: Precisely how did you get Rapport "through a download from USAA"? Does that mean that you didn't have to visit Rapport's web site? (The only institution on Rapport's member list with which I deal is PayPal, and they've never even advised me of Rapport's existence.)


Alas, much is lost in the fog of time, but as I remember, USAA sent me email suggesting I install that critter and included the link to do so. I do know that I first called USAA Security and verified that they had indeed sent the email and recommended such. Exactly how I initially did so, ah, more fog. But I do not believe the DL was mirrored or hosted on the USAA site.

Re the mess about waiting for a prompt to install the update, just sounds like [more] incompetent tech support, at least to me.
Posted By: joemikeb Re: New Update 3.6.1404.18 - 10/26/14 12:15 PM
Originally Posted By: artie505
Aside: Precisely how did you get Rapport "through a download from USAA"? Does that mean that you didn't have to visit Rapport's web site? (The only institution on Rapport's member list with which I deal is PayPal, and they've never even advised me of Rapport's existence.

It was via a download link from USAA but I did not check to see where the link was from.
Posted By: Pendragon Re: New Update 3.6.1404.18 - 11/13/14 12:00 PM
Finally! Sometime within the last 24 hours, the Auto Update worked. My version is now 3.6.1404.22. smile

But what changes were made? Ah, now that I haven't a clue...

AFAIK, there is no posting of What's New. mad
Posted By: Pendragon Re: New Update 3.6.1404.18 - 08/21/15 11:53 AM
Even though I had the "Auto Update" enabled, it didn't happen. Thus, when I went to the IBM site to verify my version, I discovered (after the download) that the current version is 3.6.1507.14.

But what fixes, changes, etc.? Ah, now that I haven't a clue. confused

All said, the DL, install (with Captcha mid point), and restart were uneventful.

The only change I have so far noticed (if it is in fact new), is that the Origin (USAA) is now displayed.
Posted By: Pendragon Re: New Update 3.6.1404.18 - 10/11/15 03:12 PM
I wrote to Trusteer, because the "safe" icon that is to appear in the Address Bar is missing in El Capitán.

IBM's reply (in part):
"Please be informed that Trusteer Endpoint Protection is not yet compatible with Mac OS X 10.11 ("El Capitan") and Microsoft Edge web browser.

f you're using one of the platforms above, Rapport's icon will not be visible next to your address bar and your online activity will not be protected by Rapport."

Of course, no ETA was made re date fix/new version release.
Posted By: Pendragon Re: New Update 3.6.1404.18 - 10/20/15 07:43 AM
IBM's response to incompatibility with El Capitán:

"Please be advised that the issue you have experienced is related to the new version of Mac - OSX 10.11 "El Capitan" which is not currently supported by Rapport.

OS X 10.11 "El Capitan" will be supported in the following release of Rapport. Unfortunately there is no official release date, but we do expect the update to be released in the near future.

The Rapport version you have installed will be automatically updated, once the supporting version is released.

In the meantime, you can access your bank account using another computer with a supported operating system by Rapport, included mobile devices."


That last paragraph seems like a well-thought solution, a most sound & common sense approach. Aww, c'mon man...
Posted By: joemikeb Re: New Update 3.6.1404.18 - 10/20/15 10:04 PM
Just to add injury to insult, I got Trusteer from the same original source you did — USAA — and the current version no longer lists USAA as a Trusted Website. I am not sure whether to ding IBM or USAA about this, but I suspect I will get a better response from USAA.
Posted By: Pendragon Re: New Update 3.6.1404.18 - 10/22/15 09:39 AM
Trusteer v3.6.1.1507.44 (now) works with El Capitán.

FWIW 1. The auto updater did not indicate the availability of the update, but it is available from/through the IBM site. When I got there, it suggested I get the DL via a link they had to the bank that referred me (USAA). And that's what I did.

FWIW 2. At the conclusion of the install, the Trusteer address bar icon did not appear, even though it was enabled and I relaunched my browser as directed. For me, to view the icon, I needed to Restart the OS. Then, sweetness and light.

FWIW 3. USAA is still not listed amongst the Trusted Websites.

FWIW 4. I sleep tight knowing that IBM writes the code for the FAA.
Posted By: artie505 Re: New Update 3.6.1404.18 - 10/22/15 10:00 AM
Quote:
I sleep tight knowing that IBM writes the code for the FAA.

If you mean the Federal Aviation Administration, that may be so, but I believe that Trusteer is maintained by the Israelis who created it.
Posted By: Pendragon Re: New Update 3.6.1404.18 - 12/07/15 03:12 PM
FWIW, I just noted this posted on the USAA Site:

"Beginning Nov. 20, 2015, we will no longer offer Trusteer Rapport on usaa.com, but you'll still be able to download it for free from Trusteer.com. The software will still work with usaa.com, but you may have to manually activate it on your own.

Here's how...

• If Trusteer Rapport is not enabled to protect a website, the Trusteer Rapport icon in the address bar will be gray.
Click the gray Trusteer Rapport icon in the address bar. A dropdown dialog box appears.
• In the drop down dialog box, click Protect this Website. The Trusteer Rapport icon on the address bar turns green, indicating that this website is now protected by Trusteer Rapport.

Contact Trusteer/Support with any questions.

For the best security USAA has to offer, we recommend you enhance the security of your online account with a CyberCode option, which is available in your Security Preferences.

You have our commitment to continuously enhance our security measures to help protect your personal and financial information."

What, exactly, this portents, and why the turnabout, I dunno. But for sure, USAA's endorsement of Trusteer has been withdrawn.

BTW, One needs the installer to run the Uninstaller. Also, a search of Trusteer after the "Successful Uninstall" still results in (much) detritus that requires manual removal.
Posted By: artie505 Re: New Update 3.6.1404.18 - 12/07/15 11:13 PM
Originally Posted By: Harv
"Beginning Nov. 20, 2015, we will no longer offer Trusteer Rapport on usaa.com, but you'll still be able to download it for free from Trusteer.com. The software will still work with usaa.com, but you may have to manually activate it on your own.

Here's how...

• If Trusteer Rapport is not enabled to protect a website, the Trusteer Rapport icon in the address bar will be gray.
Click the gray Trusteer Rapport icon in the address bar. A dropdown dialog box appears.
• In the drop down dialog box, click Protect this Website. The Trusteer Rapport icon on the address bar turns green, indicating that this website is now protected by Trusteer Rapport.

That sounds pretty much more or less in line with my observations about about Rapport here.

Edit: I wouldn't trust Rapport to pick up all the correct settings, rather I'd go into its pref pane and check.
© FineTunedMac