 | |
info-cardsi personally don't want to have to carry an info card around for my desktop pc at home which i use for nothing important (except cs:s  ) | |
|
 Tomek
Premium Member
join:2002-01-30
Valley Stream, NY |
Tomek
Premium Member
2005-Mar-30 3:34 pm
Too many frontsIn a way, that may solve some problems, but still there are lots of other dangers. I don't use passwords myself on the laptop. I have SmartCard verification integrated into a BIOS. I truly believe that hardware level security offers the best protection. And MS should focus, as said in the article, on making OS safe from trojans and man-in-the-middle attacks (my favorite ) | |
|
 | Xure
join:2003-11-14
Beverly Hills, CA |
Xure
Member
2005-Mar-30 4:24 pm
Are they for real?Now concentrate the information on one thing so it may be easier to hijack my identity, why don't ya?
I can see it now, instead of piecing all the info together, one just has to get a hold of one file! I can see people clicking on phishing e-mail attachments that "only" swipe your "info-card" and the user is left with a feeling that nothing bad happened.
"Nothing bad", Joe Blow wonders, "I just clicked on this and nothing happened." | |
|
| | | |
RDins
Anon
2005-Mar-30 6:53 pm
Re: Are they for real?Its already easy to hijack your identity. | |
|
 Matt3All noise, no signal.
Premium Member
join:2003-07-20
Jamestown, NC |
Matt3
Premium Member
2005-Mar-30 4:30 pm
BruceLet me start by saying I feel Bruce Schneier is one of the most knowledgable people in the security field and his site is a very good source of info.
I am just wondering why he rarely suggests a solution to the problem, instead of tearing down every little advance that is made?
He should use his knowledge and position of influence to drive viable solutions to our security problems.
Sure two-factor authentication isn't perfect, but it WILL mitigate a lot of the issues we have today.
If your Credit Card number, personal info and website login are compromised, unless it's used before your token changes it's random code (usually every 30 minutes), the info is useless to a would be hacker. The same is true for any phishing schemes.
The real issue is what happens when hackers break into the token authentication system. | |
|
| |
dtv-extortion
Anon
2005-Mar-30 4:34 pm
"Info-Card" sounds like a re-branded "Smartcard"Have we not had this ability all along?
AMEX smartcard credit cards have been used to verify online purchases for years now.
"Info-Card" sounds like a re-branded "Smartcard" solution to me!
Do they think a new name is going to bring this method of authentication back to life after DirecTV deemed all smartcard solutions illegal and sent out threat letters to thousands of innocent smartcard researchers/users?
All that will happen is DTV will start sending letters to innocent “Info-Card” users claiming they are illegal as well! | |
|
|  sabersaw
Premium Member
join:2001-08-21
Dayton, OH |
sabersaw
Premium Member
2005-Mar-30 5:17 pm
Re: "Info-Card" sounds like a re-branded "Smartcarsaid by dtv-extortion:
Have we not had this ability all along?
AMEX smartcard credit cards have been used to verify online purchases for years now.
"Info-Card" sounds like a re-branded "Smartcard" solution to me!
Do they think a new name is going to bring this method of authentication back to life after DirecTV deemed all smartcard solutions illegal and sent out threat letters to thousands of innocent smartcard researchers/users?
All that will happen is DTV will start sending letters to innocent “Info-Card” users claiming they are illegal as well!
yep, sdlogic was a legit company. » www.dbstalk.com/showthre ··· xtnewest | |
|
| |
You can have the best security in the world..but useless if you use your first name as your password. Humans are the weakest link in security.  | |
|
|  The Dv8orJust call me Dong Suck Oh, M.D.
Premium Member
join:2001-08-09
Denver, CO
Cisco 2811
TP-Link Archer AX10
|
Re: You can have the best security in the world..said by markopoleo:but useless if you use your first name as your password. Humans are the weakest link in security. Exactly. People dont want better security. They want their computing experience to be easier. Domain passwords have been the topic of conversation more than once between a couple of 50something women at lunch. "Oh, well I use my dog's name!" "I like to use my husband's middle name with an 11 at the end". The right guy sitting next to these women could easily wreck a major company. | |
|
| |
Nobody Will Use ThisWho's going go through all this just to log in to their PC? Home users won't use it at all and few corps will want the overhead of managing lost cards and other problems this will cause. | |
|
 marketex
Premium Member
join:2003-11-11
Chicago, IL |
marketex
Premium Member
2005-Mar-30 10:44 pm
Passport Warmed Over?Why do the wonderful guys on the campus at Redmond spend so much time trying to get everyone to "entrust" them with information you SHOULD keep in your head, rather than using THEIR heads to seal up the leaky vessel into which they wish us to pour our dearest secrets? HMMMMM?! Could it be the broken promises of MS stock options from der Billster? | |
|
| | |
Re: Passport Warmed Over?Microsoft doesn't really care about nothing except their own pockets. They are only using this scheme so hackers will have a harder time hacking windows longhorn when it comes out. I agree with one of the previous post that it would put you at a higher jeopardy of getting identity thefted since the would be hacker would just need to target one piece of info now. Why doesn't the federal government just break Microsoft up as they threatened them before. Windows and Office should be two separate entities. I think that way each product would bet better with individual attention. Microsoft is going crazy with all this extracurricular software and services. When it sees a company make money off of an idea. They hafta stick their noses into that part of the field and try to make money too even though they have no clue on what they are doing. All they do is buy a company and milk it for all its worth without really making advances for that software. | |
|
| | marketex
Premium Member
join:2003-11-11
Chicago, IL |
marketex
Premium Member
2005-Mar-31 3:51 am
Re: Passport Warmed Over?said by lostboy8:Microsoft doesn't really care about nothing except their own pockets. They are only using this scheme so hackers will have a harder time hacking windows longhorn when it comes out. I agree with one of the previous post that it would put you at a higher jeopardy of getting identity thefted since the would be hacker would just need to target one piece of info now. Why doesn't the federal government just break Microsoft up as they threatened them before. Windows and Office should be two separate entities. I think that way each product would bet better with individual attention. Microsoft is going crazy with all this extracurricular software and services. When it sees a company make money off of an idea. They hafta stick their noses into that part of the field and try to make money too even though they have no clue on what they are doing. All they do is buy a company and milk it for all its worth without really making advances for that software. There is nothing you have said with which I do not agree. Hear! Hear! | |
|
 Nsane_iceman
Premium Member
join:2001-02-26
North Richland Hills, TX |
Double use.I could see these Info-cards used with the serial number also so you have to have the right card and right number to install the OS. After the OS is in it hides the serial part and lets you addon the passwd and ect. | |
|
| | |
DeeplyShrouded
Anon
2005-Mar-31 4:40 pm
Re: Double use.With USB devices like 1gb flashdrives,
how about a flashdrive that can't be changed?
Bundle it with the OS, during OS install, it looks for
this drive to read a 1gb length encryption key.
A one-way hash within the install program generates a
complimentary key, if they match, the OS installs.
If not, you're SOOL. If you lose it, you contact MS,
prove you purchased the software (receipt, serial # etc)
and you pay for another hardware key. | |
|
|
|
)
