Re: Article on passwords in Wired News

2004-06-07 Thread Peter Fairbrother
Peter Gutmann wrote: >> An article on passwords and password safety, including this neat bit: >> >> For additional security, she then pulls out a card that has 50 >> scratch-off codes. Jubran uses the codes, one by one, each time she >> logs on or performs a transaction. Her bank, Nordea PLC, aut

Re: Article on passwords in Wired News

2004-06-07 Thread Greg Rose
At 21:04 2004-06-06 -0400, Adam Fields wrote: On Sat, Jun 05, 2004 at 10:06:20AM +0530, Udhay Shankar N wrote: > Citibank in India experimented with a special case of this a few years ago > - "online credit cards" - basically, a credit card number valid for one use > only, which would be ideal for

Re: Article on passwords in Wired News

2004-06-06 Thread Adam Fields
On Sat, Jun 05, 2004 at 10:06:20AM +0530, Udhay Shankar N wrote: > Citibank in India experimented with a special case of this a few years ago > - "online credit cards" - basically, a credit card number valid for one use > only, which would be ideal for online purchasing. > > IIRC, the offering w

Re: Article on passwords in Wired News

2004-06-06 Thread Anne & Lynn Wheeler
At 02:19 AM 6/5/2004, Ernst Lippe wrote: What is that card? There are some schemes that use debit cards with an embedded smartcard. If you are referring to one of these schemes I don't think that they are more secure than TAN's. If it is a card that you carry along with you, the risk that it will b

Re: Article on passwords in Wired News

2004-06-05 Thread Ernst Lippe
On Friday 04 June 2004 02:24, martin f krafft wrote: > also sprach Peter Gutmann <[EMAIL PROTECTED]> [2004.06.03.1014 +0200]: > > One-time passwords (TANs) was another thing I covered in the "Why > > isn't the Internet secure yet, dammit!" talk I mentioned here > > a few days ago. From talking to

Re: Article on passwords in Wired News

2004-06-05 Thread Udhay Shankar N
At 01:44 PM 6/3/2004, Peter Gutmann wrote: One-time passwords (TANs) was another thing I covered in the "Why isn't the Internet secure yet, dammit!" talk I mentioned here a few days ago. From talking to assorted (non-European) banks, I haven't been able to find any that are planning to introduce t

Re: Article on passwords in Wired News

2004-06-04 Thread martin f krafft
also sprach Peter Gutmann <[EMAIL PROTECTED]> [2004.06.03.1014 +0200]: > One-time passwords (TANs) was another thing I covered in the "Why > isn't the Internet secure yet, dammit!" talk I mentioned here > a few days ago. From talking to assorted (non-European) banks, > I haven't been able to find

Re: Article on passwords in Wired News

2004-06-03 Thread Roy M. Silvernail
Eugen Leitl wrote: Banks tried to push smart cards, but very half-heartedly (didn't offer free readers, which could have created critical mass). Ther was one of those "net-only" bank-like operations in the last days of the bubble that did offer free smart-card readers. That's what prompted me t

Re: Article on passwords in Wired News

2004-06-03 Thread Eugen Leitl
On Thu, Jun 03, 2004 at 08:14:39PM +1200, Peter Gutmann wrote: > One-time passwords (TANs) was another thing I covered in the "Why isn't the > Internet secure yet, dammit!" talk I mentioned here a few days ago. From > talking to assorted (non-European) banks, I haven't been able to find any that

Re: Article on passwords in Wired News

2004-06-03 Thread Peter Gutmann
>An article on passwords and password safety, including this neat bit: > > For additional security, she then pulls out a card that has 50 > scratch-off codes. Jubran uses the codes, one by one, each time she > logs on or performs a transaction. Her bank, Nordea PLC, automatically > sends a

Re: Article on passwords in Wired News

2004-06-02 Thread Perry E. Metzger
FYI, /. has posted a story on this, but, true to form, they confuse one time passwords with one time pads. Perry - The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PROTECTED]

Article on passwords in Wired News

2004-06-02 Thread Perry E. Metzger
An article on passwords and password safety, including this neat bit: For additional security, she then pulls out a card that has 50 scratch-off codes. Jubran uses the codes, one by one, each time she logs on or performs a transaction. Her bank, Nordea PLC, automatically sends a new c