Skip to main content

The WiKID Blog

Viewing posts tagged Phishing and Fraud

Sector

Posted by: admin 15 years ago

I will be speaking at the Sector security conference in Toronto this week.  The title of my presentation is "Moving Toward a More Secure Online Banking Experience".   It is indeed mostly about authentication for online banking (session, host/mutual/, transaction authentication), but also about the structure of the industry. 

read more / 0 comments

Couple Allowed to Sue Bank for Failing to Implement Two-factor Authentication

Posted by: admin 15 years, 1 month ago

A judge has ruled that a couple can sue Citizens Financial Bank after they lost $26.500 to an online attacker:

read more / 0 comments

The lessons from Guy Kawaski's twitter attack

Posted by: admin 15 years, 3 months ago

The lessons are sadly the same.  Static passwords are weak and DNS is weak.  The answer is two-factor authentication and either mutual https authentication or better DNS.  Since DNS is unlikely to be fixed any time soon...

read more / 0 comments

Another nail for SMS authentication

Posted by: admin 15 years, 5 months ago

Now that European banks are using SMS messaging for authentication, criminals are paying top dollar for used Nokia phones that can be reprogrammed due to a bug to work with any phone number.  We've discussed why SMS authentication is a bad idea before.  Here's more evidence.

read more / 0 comments

incent-for-the-averages-insure-against-the

Posted by: admin 15 years, 8 months ago

One the comments on Emergent Chaos about my post Incentive plan for an information security team was from Andrew Jaquith of the Yankee Group:

read more / 0 comments

Recent Posts

Archive

2024
2022
2021
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom