Skip to main content

The WiKID Blog

The WiKID Blog, musings on two-factor authentication, information security and some other stuff.

pci-expanding-to-europe

Posted by: admin 16 years, 3 months ago

According to Security Fix Visa is going to enforce PCI DSS in Europe:

Visa Inc. on Monday dramatically expanded its credit and debit card security requirements to retailers in Europe, an unexpected move that could be a financial boon to security auditing companies, but a huge cost for European merchants already feeling the pinch from the global financial crisis.
I'm fascinated that this is a surprise. My reaction was, "hmm I would have thought the PCI already applied in Europe".

read more / 0 comments

how-about-stop-using-social-security-numbers-as

Posted by: admin 16 years, 3 months ago
Today I read on Martin McKay's blog that you should change your default passwords and Adam Shostack has pointed out that colleges should usen't use SSNs to track students.

read more / 0 comments

google-looks-to-protect-its-business-with

Posted by: admin 16 years, 3 months ago

I think Google's purchase of GreenBorder is very intersting. It shows that they see the threat that malware has to the online commerce and that they intend to do something about it. What's not clear is whether this acquisition was done with the goal of protecting payment processing (Google CheckOut) or whether it is meant to shore up security around their office application suite and their new offline access system Google Gears. Perhaps, Google is smart enough to know that both need additional security and is organized in such a way to make it happen.

read more / 0 comments

Updates-on-the-blog-the-extranet-WiKID-etc

Posted by: admin 16 years, 3 months ago

I have ended the experiment of using anonymous two-factor authentication as a turing test. I don't know for sure if it kept people from posting, but I did get at least one whiny email from a potential commenter saying he didn't have time to sign up for WiKID just to post to my lame blog. I won't say who it was, but I guess your new paymaster must keep you pretty busy, though you seem to have enough time for your own side projects. I have implemented a standard captcha instead.

read more / 0 comments

interesting-analysis-of-passmarks-technology

Posted by: admin 16 years, 3 months ago
Adam has pointed out a friend's new blog who has a set of interesting new blog posts, most about security and some about authentication and one in particular about Passmark's Sitekey - now deployed by Bank of America - and the issues he has with it. They fall into two categories: user interaction predictions and security

read more / 0 comments

Recent Posts

Archive

2024
2022
2021
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom