The WiKID Blog

Viewing posts tagged Phishing and Fraud

with-phishers-its-a-job

Posted by: admin 14 years ago

Great article in the WSJ - I believe it's freely available at least for today - on phishers.

world-of-warcraft-gets-two-factor-authentication

Posted by: admin 14 years ago

As we noted way back in 2006 the value in gaming credentials will bring out the fraudsters.. Now Blizzard is offering tokens for WoW. Queue the "If I can get it for WoW, why not my bank" blog posts:

I agree with the sentiment but I wanted to start a conversation regarding why you won't be seeing these tokens in the mail from your bank any time soon. The reason most banks, e-commerce sites, and even corporate VPN connections aren't protected by two-factor authentication can be broken down into a few reasons:

• cost: additional cost to customer, shipping, inventory, infrastructure, licensing, staff, overhead, etc.
• complexity: dealing with lost tokens, mistyped numbers causing locked acconts, countless help desk calls, etc. If you are locked out of your WoW account you can't play a game, when you are locked out of your bank account you can't pay bills, transfer funds, check your balance, etc. Simply put, the downside risk of customer convenience is greater than the upside risk of greater levels of security.
• motive: Blizzard is providing these tokens to help secure customers accounts, but also to further secure their future revenue stream and also to combat piracy and cheating, in short, it makes business sense. Banks don't typically suffer very much if a customer account is breached as they very rarely take the hit themselves but instead either insure against the loss (either federally or privately) or simply passing the costs onto customers.

wsj-on-rfid-smashers

Posted by: admin 14 years ago

There is a front-page article in today's WSJ about people smashing their RFID-enabled credit cards due to security concerns. Subscription required, sorry.

cmu-anti-phishing-toolbar-study-out

Posted by: admin 14 years ago

Download CMU's Phinding Phish: An Evaluation of Anti-Phishing Toolbars.

visa-adds-carrot-to-stick-for-pci-goulash

Posted by: admin 14 years ago

This will be interesting to look back on in a year: Visa is creating a $20,000,000 bonus pool to incent their members to be PCI compliant. :

Visa's new Visa PCI Compliance Acceleration Program is designed to spur entities that are covered by PCI rules to comply in a speedy fashion, said Jennifer Fischer, a director with Visa USA. "This program is part of our larger strategy for protecting card holder data and to ensure that we are doing everything we can to protect it from compromise," she said.

Why is it needed? Because:

Though nearly 18 months have passed since PCI rules went into full effect, only 36% of Tier 1 merchants and 15% of Tier 2 merchants are currently compliant with the requirements, according to Visa.

I think this might be the more effective bit:

At the same time, acquiring banks that fail to ensure compliance by Sept. 30, 2007 will be assessed fines starting at $5,000 a month for each non-compliant merchant. The fines increase to $25,000 per month for each non-compliant merchant after Dec. 31, 2007. Until now, fines have only been assessed in cases where actual data breaches occurred.

That will get them going!

• Page 17 of 23
• ←
• 9
• 10
• 11
• 12
• 13
• 14
• 15
• 16
• 17
• 18
• 19
• 20
• 21
• 22
• 23
• →