full-disclosure - Defeating Citi-Bank Virtual Keyboard Protection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0BKn9uKnWEeCDU7Vx+IAQ8KAAAAQAAAARIydCHAd10CG0aNU/QpWfwEAAAAA@online.gateway.strangled.net>
Date: Sat Aug  6 02:52:38 2005
From: aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh)
Subject: Defeating Citi-Bank Virtual Keyboard Protection

The only most secure protection is a one time password with a challenge /
response scheme. Most of the banks in europe already do this.

They give out a calculator like device to the customers and when u want to
login you are presented with a challenge that you punch into you device
which spits a response that you enter that into the form....

Costly for the bank but very effective security for the customer and bank in
terms of gain in security and decrease in losses due to fraud ....

- Aditya

________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)