What part of a button on a form can be dragged in order to change the button's size?

The SilentBanker man-in-the-browser attack depends on malicious code that is integrated into the browser. These browser helpers are essentially unlimited in what they can do. Suggest a design by which such helpers are more rigorously controlled. Does your approach limit the usefulness of such helpers?

What will be an ideal response?

For a bank, what are its most important assets? What are the minimal computing resources it would need to continue business for a limited period (up to 2 days). What other systems or processes could it use during the period of the disaster?

What will be an ideal response?