« e-mail vs. handwritten notes... | Main | What I Teach - EMC Symmetrix Business Continuity »
July 13, 2006
Attacks on two-factor authentication...
Phishers are seeking to circumvent two-factor authentication schemes using man-in-the-middle attacks. Last October, US federal regulators urged banks to adopt two-factor authentication as a means to combat the growing problem of online account fraud.Two-factor authentication involves the use of a password-generating device along with conventional passwords. That means a thief must know more than just a password to gain access to a user's account. Although the technology helps guard against fraud, a recent attack against Citibank shows the technique is far from foolproof.
A bogus security warning ostensibly from Citibank, and targeting customers of its Citibusiness service, urged prospective marks to visit a website and enter not only their account details and password (as with conventional phishing scams) but also the code generated by the customer's token. These authentication key codes change every minute or so.
Two-factor authentication has been around for a while now, but its use has usually been limited to VPN tunnels, corporate nets, etc. Giving consumers a number-generating "token" to authenticate access in addition to a password has been done in Europe and is growing in the US.
So, a bank or company requires you to use a password, for your security and theirs. They then give you a token and say "key in the number you see on here." Still, people get suckered by phishing sites. Social engineering is powerful, and the old Fox Mulder axiom "trust noone" is so appropos today.
Posted by Edward J. Branley at July 13, 2006 11:12 AM
Trackback Pings
TrackBack URL for this entry:
http://www.nola-blogs.com/cgi-bin/mt/ruebourbon.cgi/428
Listed below are links to weblogs that reference Attacks on two-factor authentication...:
» phentermine from phentermine
About... [Read More]
Tracked on March 30, 2007 1:14 PM
» Uncommon side effects of zoloft. from Zoloft.
Zoloft. Zoloft generic. Zoloft side effects with alchohol. Zoloft muscular side effects. [Read More]
Tracked on May 5, 2007 3:48 PM
» Wellbutrin and liver enzymes. from Wellbutrin.
Wellbutrin xl. Wellbutrin xl and results of. Wellbutrin. [Read More]
Tracked on October 26, 2007 12:47 PM
» Vicodin side effects. from Vicodin.
What is vicodin. Cheap vicodin. Vicodin user message board. Signs of vicodin addictio. Vicodin. [Read More]
Tracked on December 12, 2007 10:16 AM
» Generic tylenol recall. from Tylenol allergy sinus daytime.
Tylenol 3. Tylenol recall puerto rico. Tylenol rapid release gels pictures. Can naproxin and tylenol be used together. Tylenol. [Read More]
Tracked on December 13, 2007 12:58 AM
» Ephedrine. from Ephedrine abuse.
Ephedrine. Ephedrine hcl. Ephedrine faq. Ephedrine and pregnancy. Brewing your own ephedrine. [Read More]
Tracked on December 13, 2007 9:32 AM
» Oxycodone. from Oxycodone extraction.
Picture of oxycodone. [Read More]
Tracked on December 17, 2007 12:47 AM
» Tramadol drug concerns. from Tramadol.
Ibuprophen and tramadol. Tramadol. Tramadol cheap no rx. [Read More]
Tracked on December 17, 2007 8:33 AM
» Viagra. from Viagra.
Viagra. Viagra for order lamisil viagra. Natural viagra. Viagra sale. Viagra without a prescription. [Read More]
Tracked on December 18, 2007 1:00 PM
» Ephedra. from Ephedra pills.
Chronic ephedra abuse. Ephedra yellow swarm. Ephedra pills. Colorado ephedra lawyer. Ripped fuel without ephedra. Ephedra. [Read More]
Tracked on December 18, 2007 6:58 PM
» Delirium elderly oxycodone. from Oxycodone.
Oxycodone extraction gel. 80 mg oxycodone. Delirium elderly oxycodone. Oxycodone. Oxycodone prescription. [Read More]
Tracked on December 19, 2007 6:14 AM
» Ambien side effects. from Ambien overnight.
Ambien during pregnancy. Ambien with alcohol. Ambien addiction. Sex ambien night. [Read More]
Tracked on December 20, 2007 10:01 AM
» Drugs online cheap hydrocodone buy. from Hydrocodone.
Www.bulevart.net hydrocodone-withdraw-symtoms.html. [Read More]
Tracked on December 20, 2007 6:46 PM
» Side effects of wellbutrin. from Wellbutrin.
Smoking marijuana and taking wellbutrin. Wellbutrin side effects. Wellbutrin effects depression rxlist. Wellbutrin bleeding. Wellbutrin xl no prescription. Headaches from wellbutrin. Wellbutrin. Generic for wellbutrin. [Read More]
Tracked on December 25, 2007 11:53 PM