Slashdot Mirror


Federal Reserve To Use Internet For Money Transfer

An anonymous reader writes "According to the New York Post, the Federal Reserve (i.e. Alan Greenspan and Co.) is going to change the way that it transfers money between banks so that transfers now take place over the internet instead of via a private banking network. They aren't specifying the types of security measures that will be used (security through obscurity?) Am I the only one who thinks that this is a very bad idea? Might a DDOS attack on the Fed's computers bring down the entire banking system?" The banks have put some thought into security.

23 of 318 comments (clear)

  1. First transaction by Anonymous Coward · · Score: 5, Funny

    First transaction

    1. Re:First transaction by ClippyHater · · Score: 4, Funny

      Bank error in your favor: +3 Funny.

  2. VPN and PGP encrypt! by chevman · · Score: 5, Informative

    VPN and PGP encrypt. That's over the internet, but pretty damn secure - I work in the healthcare industry and PGP is pretty standard, usually over a VPN or secure FTP.

    1. Re:VPN and PGP encrypt! by paganizer · · Score: 4, Interesting

      Not as secure as what they have.
      I worked on FRB hardware (back in 2001, so things might have changed a little). 486 CPU. 56k modem. essentially just a automated BBS style dial-in to the central systems, very cheap, uncomplicated, almost nothing that can screw up, and if it does, easy to fix; completely disconnected from local networks, info fed in by floppy (usually only a couple a day).
      So of course I can understand why they want to modernize; the maintenance budget for the whole system on a yearly basis probably hits $5,000.

      --
      Why, yes, I AM a Pagan Libertarian.
    2. Re:VPN and PGP encrypt! by LippyTheLip · · Score: 5, Informative

      I used to work at the FRB Boston on the staff of the Financial Service Policy Committee, the body that sets policy for the services that the Fed provides to US banks.

      This article is totally misleading. The Fed is not going to be transferring money over the Internet. Clearing and settlement will continue to take place over dedicated, leased, secured IP lines or in data centers with military-level security.

      The change being made is how individual commercial banks interface with the computers at the Fed in order in initiate wire transfers and transmit data for bulk transaction processing. FedLine for the Web is a great improvement over the MS-DOS-based systems that are currently in use for small and medium-sized banks. Through these systems, banks do a variety of things, including initiate wire transfers, check intraday overdraft balances, submit batch files for overnight ACH payments processing, and many others. More info here on what the Fedline is and the various ways of accessing it. The Fed had been developing FedLine for Windows, but abandoned that in the late 90's. Doing this over the web is no more risky than online banking for the consumer, except that the sums are greater -- but so are the benefits -- as long as precautions are taken, such as one-time-use TANs (transaction authorization numbers), certificates, etc.

  3. Mmmmm! by Anonymous Coward · · Score: 5, Funny

    Shocking. To think they'd use the INTERNET instead of analog phone lines!

  4. DDOS paranoia by rokzy · · Score: 5, Insightful

    what makes you think "using the internet" equates to "having a server completely open to the public with no backup processes"? in the UK you can do your taxes online, I guess if they get DDOS'd no one will have to pay?

    1. Re:DDOS paranoia by mrsev · · Score: 4, Funny

      what makes you think "using the internet" equates to "having a server completely open to the public with no backup processes"? in the UK you can do your taxes online, I guess if they get DDOS'd no one will have to pay? .....Hey thanks for the tip!

  5. Possibly. by khasim · · Score: 5, Insightful

    I'm more worried about another slammer-type attack that floods the Internet.

    Besides, encryption and such are fine, but just keeping everyone else off your network (the old method) makes the security model much simpler.

    The more access there is, the more possible attacks there are. Which means that more attention has to be spent testing and checking these systems.

    Which means more jobs! So it isn't all bad. :)

    1. Re:Possibly. by wfberg · · Score: 4, Informative

      There are multiple security risks to keep in mind
      a) the systems will be connected to the internet. Even if they are heavily firewalled, they will have to get their information somehow, so some port will be open listening for incoming requests; so watch out for buffer overrun exploits and spoofed packets.
      b) targetted denial of service attacks
      c) the network simply going down or being slowed; slammer slowed down the internet, not just a few machines. If that means some transactions get delayed, some people will be losing money.
      d) the traffic will be intercepted, and, if not decrypted, at least the volume of messages will be interesting information for corporate espionage (though the fact that unencrypted e-mail is used in business all the time makes this less of a priority).
      e) targetted BGP spoofing, DNS poisoning attacks and the like resulting in loss of service

      That's not to say a private network is always more secure (especially since on private networks less thought is given to authentication and things of that nature), but it does make life complicated.

      --
      SCO employee? Check out the bounty
    2. Re:Possibly. by vontrotsky · · Score: 5, Interesting

      I'm more worried about another slammer-type attack that floods the Internet.

      While I think that is a completely valid and important concern, it overlooks something key. If terrorists/gangesters/whomever want to damage US financial systems, it's good thing that slammer type attacks are the first thing to come to mind. One of the things that made the WTC such an appealing target on 9/11 was that private corporate networks were dependant on services provide in the towers. The hijackers managed to take down the New York Stock echange for five (?) days, by damaging critical infrastructure. If putting the federal reserve system on the public internet, encourages DOS attacks and decreases the incentive to blow things up (including people), I'm all for it.

      Jeff

  6. It seems that they already do. by khasim · · Score: 4, Insightful

    Well, they have DOS systems connected to a private network.

    The weird thing is that they're looking at moving to the Internet to get away from the limitations of their DOS system.

    Why don't they keep the current, private network and just upgrade the machines and the software on that? Why do the upgrade AND move to a less secure network?

  7. Oh, come on. You guys are so paranoid. by unassimilatible · · Score: 4, Funny
    If it's safe to vote and select the leaders of the free world on the Internet, then surely it's, uh, oh nevermind...

    --
    Slashdot "libertarians": Small government for me, big government for those I disagree with. -1, I disagree with you
  8. Re:What is the Fed? by DrAegoon · · Score: 4, Informative

    (I am not an Economist)
    The Federal Reserve "creates" (or "destroys") money by regulating how much money a bank is required to keep on hand. If a bank only has to keep 10% of its deposits on hand, then the rest of the money can be loaned out. The person who deposited the money doesn't lose their money and the money that is loaned out is still real so the bank has created money. In reality the bank didn't print up new dollar bills and hand them out, they are just allowing better use of the money that is in circulation. When the federal reserve changes the Reserve Rate (percent of deposits the bank has to hold) they increase or decrease the amount of money in circulation. Changes to the reserve rate are pretty rare and are the Fed's overkill method of controlling the economy.

    The Fed also makes overnight loans to banks when they have a shortfall of cash on hand. The rate of these loans is the discount rate that is always talked about in the news. This rate is also used by individual banks to set the rates of their loans. Changing the discount rate has the effect of encouraging banks to keep more or less cash on hand and changes the "cost" of money. Setting interests rates are the prefered method of the Fed to control things like inflation or deflation.

  9. The New Federal Reserve! by Anonymous Coward · · Score: 5, Funny

    (Formerly known as PayPal)

  10. Cardboard boxes by Dlugar · · Score: 4, Interesting
    Using encryption on the Internet is the equivalent of arranging an armored car to deliver credit-card information from someone living in a cardboard box to someone living on a park bench. (Gene Spafford)
    The problem isn't the security of the data that's encrypted--the armored truck isn't going to have any problems--but what about the cardboard box?

    Just as an example, the computer that the data is being sent to has to be connected to the Internet. How secure is this computer from attacks? If someone breaks into that computer, can they get to the unencrypted data?

    Dlugar
    --
    Computer Go: Writing Software to Play the Ancient Game of Go
  11. Not all that bad... by Anonymous Coward · · Score: 4, Informative

    From the deep memory:

    Disclaimer: This is OLD stuff and might be different today. But, banks are stodgy and don't like to change things that work.

    Most banks don't use the Fed wire for transfers all day long. They use private networks, like SWIFT to conduct their business. c.f Swift money transfer

    Back in the days before the internet, SWIFT used to require that you had an office in lower Manhatten (e.g. Wall Street) with a HIGH RANKING bank officer there. If something went wrong (and you stopped processing transfers for some reason), the SWIFT officers could meet and discuss the issue with you. They might float your bank for the day, keeping you from going under if it was something like broken computer equipment and not an insolvency issue.

    Computers and networks got much better, and with SWIFT's desire to be truly global, that's no longer required.

    So, what happens is that the banks all over the world do millions of transactions all day long on the SWIFT network, and no money really moves, it's just a bunch of credits and debits. Then, at an agreed upon time, they "fess up" and pay their outstanding balance (or get paid) on the Fed wire (or others methods in other countries).

    SWIFT also provides the banks with a general message service like sending a TELEX.

  12. Re:First Hacked Transaction Receipt by iCEBaLM · · Score: 4, Funny

    Shouldn't it be:

    All your bank account are belong to us!
    You are on the path to bankruptcy.
    You have no chance to withdraw make your time.

  13. Re:What is the Fed? by techno-vampire · · Score: 5, Funny

    Close, but no cigar. What gives money its value is our collective agreement to accept it in payment. When you come down to it, we're really bartering, but instead of having to have goods to swap, we swap something easy to carry and of a known (if artificial) value. Money is just an abstract representation of goods that simplifies commerce.

    --
    Good, inexpensive web hosting
  14. The Evil of Monopolies by buckhead_buddy · · Score: 5, Insightful

    Much has been made of the evil of monopolies on Slashdot (from Microsoft dominating the desktop to Apple regulating music formats).

    The Federal Reserve is a private corporation operated and owned by private banks and given special monopoly existence by congress back on Christmas Eve in 1913. This is a very scary monopoly that has (perhaps unconstitutionally) usurped Congress's power to coin, issue, and regulate the American money supply.

    While I won't attempt to proffer all of the observations (probably labeled as "tinfoil hat theories" because neither political party wants to call them into question) I will point out a very human readable web page that highlights some of these issues in a phone call to the Federal Reserve Bank of San Francisco.

    I realize that the Internet is a public network and that the Fed has every right to switch its internals over to using it. But it will likely cause two bits of controversy.

    First, they are a private corporation so if the receive a private set of Class A IP addresses or other special treats it will expose some flaws in the public vs. private issues of control of the internet. (This is probably of more interest to slashdotters.)

    Second, The Fed may be exposing tremendous auditability and accounting problems that don't exist on the private network. While their books and procedures are publicly audited, they have simply "lost" money (both physical and transactional). The paranoid would suspect that perhaps they've been inspired by the Diebold voting systems which can apparently cause votes to simply come and go in an unaccountable manner. The less paranoid should still see that this change will need a great deal more publicly auditable security to keep robber barrons from simply coming up with a new means of screwing over those of us who rely on cash & credit.

    I can understand the need to migrate from old proprietary technolgies to new ones, but this migration should be watched VERY closely and where possible should be opened up for further audit and regulation.

  15. Re:What is the Fed? by HBI · · Score: 5, Informative

    The Federal Reserve is a system set up by capitalists (banks) for capitalists (banks).

    Wrong. The Federal Reserve System was set up by an act of Congress December 23, 1913. The Fed is a public/private organization with a complex structure that makes the Board of Governors Federal employees (like Mr. Greenspan) and the staffs of the regional banks private sector employees. Your questions about what it does will be answered somewhat here.

    Instead of giving the money to individuals (which is the way it should be done in a truly free system), they pass it out to their buddies in the banking system who make a profit by leasing the money to individual borrowers.

    How is this crap insightful? The Fed makes short-term loans to individual banks. These loans are at low interest rates but must be paid back quickly also. Banks also deposit cash reserves with the Fed. There is no 'giving' of money. Even if there were, that's a silly sentiment. "Let's power the economy by giving away worthless paper currency to everyone." It would be worthless because everyone had it in equal measure without any value being attached.

    The Federal Reserve also has a very powerful way of making a shit load of money: inflation. They just print a lot more money that they would be allowed to print if the system were regulated by just laws. Who or where does all this money goes to? I have no idea.

    Yes, you don't have any idea. You're completely clueless about our financial system. You probably aren't aware that at any moment, there are a few hundred billion in coin and currency in circulation (600 bil or so in 2003). The US GDP in 2003, for instance, was something on the order of 11 trillion dollars. Search that document, it's there. Please note that we aren't even considering bank deposits, stock ownership or any other securities, like bonds.

    An intelligent person might come to the conclusion that most money doesn't exist as currency at all. It's only written on paper or stored in a computer somewhere. You'd be right if you came to that conclusion. Therefore, the Fed printing 100 billion more of $100 bills would have a negligible effect anyway.

    There's an even more compelling reason why your statement above is stupid. The Fed doesn't *GIVE OUT* money. The funds are either loaned in the short term, or given out of the member bank's deposits to the Fed. Therefore, there is no inflationary pressure associated with $100 bills going to Bank X since they are paid for one way or another.

    So how exactly were they making money off of this? Answer: they aren't. They make most of their money off of check processing and ACH transfers which they act as the middleman for.

    Essentially, we have the wolves in charge of the chicken coop. There're making a killing, so to speak, and there's nothing you and I can do about it. Other than complain.

    Next time you make a comment about something, how about knowing something...anything about what it is you are commenting about?

    Thank you.

    --
    HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
  16. Re:What is the Fed? by johnnyb · · Score: 5, Interesting

    "This is the system that has evolved, it works better than the alternatives, and it isn't going to go away."

    Actually, the founding fathers of the US thought that central banking was a bad idea, and Madison even said that central banking was more of a cause for the war than taxes.

    Thomas Jefferson:

    "I believe that banking institutions are more dangerous to our liberties than standing armies. Already they have raised up a moneyed aristocracy that has set the Government at defiance. The issuing power should be taken from the banks and restored to the people to whom it properly belongs."

    "If the American people ever allow private banks to control the issue of their money, first by inflation and then by deflation, the banks and corporations that will grow up around them (around the banks), will deprive the people of their property until their children will wake up homeless on the continent their fathers conquered."

    James Madison:

    "History records that the money changers have used every form of abuse, intrigue, deceit, and violent means possible to maintain their control over governments by controlling the money and its issuance."

    Henry Ford:

    "It is well enough that people of the nation do not understand our banking and monetary system, for if they did, I believe there would be a revolution before tomorrow morning."

    Alan Greenspan:

    "[The] abandonment of the gold standard made it possible for the welfare statists to use the banking system as a means to an unlimited expansion of credit.... In the absence of the gold standard, there is no way to protect savings from confiscation through inflation. There is no safe store of value. If there were, the government would have to make its holdings illegal, as was done in the case of gold.... The financial policy of the welfare state requires that there be no way for the owners of wealth to protect themselves.... [This] is the shabby secret of the welfare statist's tirades against gold. Deficit spending is simply a scheme for the 'hidden' confiscation of wealth. Gold stands in the way of this insidious process. It stands as a protector of property rights."

  17. This is my field... and it's not a bad idea by ajv · · Score: 4, Informative

    Carriers are notorious at bad security, particularly on PVC's and other "private" links. You enter this cloud and they claim it's secure.

    Going over the Internet is no different than using a modern frame PVC or ATM link, particularly if you're using C&W infrastructure as their GIN architecture *is* the Internet with VPNs over it.

    Properly risk assessed, and with appropriate key management, going over the Internet has only one major failing - quality of service. If you can work around that by using multiple providers, there is nothing really wrong with using the Internet as a transaction medium.

    --
    Andrew van der Stock