« PrivacyMatters Gets A Facelift | Main | Your ZIP code and identity theft »

Message to phishers – phob off!

With PayPal recently announcing the availability of a password generating keyfob for all of its 133 million+ customers, expect keyring or keyfob authentication tokens to play a bigger role in your life. And take up much more space in your life.

PayPal’s token is one of a number of initiatives to increase security and reduce the dangers of identity spoofing by using two-factor authentication to make life a little harder for the bad guys.

If it hasn’t already done so, your bank or credit union may soon be offering you a security keyfob, as may your credit card company and a number of other service providers. These devices work in a variety of ways but generally around the same principals. Instead of forcing you to rely on the ever-vulnerable password, keyfob authentication devices are supposed to add an extra layer of security – by requiring you to have a password and the keyfob in order to gain access; to use the keyfob to securely store your password; or as in the case of PayPal have the keyfob generate a unique one-time password every time you need to access your account.

All great ideas, although not foolproof as we see more evidence of attackers finding ways to spoof these defenses. Not to mention the cost of each device (anywhere from $5 to $50), and the possibility that a typical user may end up having to haul around a handful of these fobs simply to survive in a digital life.

Posted on Friday, February 16, 2007 at 02:14PM by Registered CommenterNeal O'Farrell in | CommentsPost a Comment

PrintView Printer Friendly Version

EmailEmail Article to Friend

Reader Comments

There are no comments for this journal entry. To create a new comment, use the form below.

PostPost a New Comment

Enter your information below to add a new comment.

My response is on my own website »
Author Email (optional):
Author URL (optional):
Post:
 
Some HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>