Tag Info

New answers tagged

1

I know several banks use "profiling data" from previous logins in order to try to determine the identity of the user based on: Credentials (obviously) Secret question (not all banks use this method though) IP address (Geo Location + time zone) and internet provider The device(s) previously used to communicate with the bank: a. Type of web browser, its ...


2

This is what I considered when determining what type of 2FA to use. Once I determined the solution type then I needed to identify which vendors were leaders in that space. I have the scoring document and all that if you want: EVALUATION CRITERIA ➢ Security/Compliance – Must be a secure solution that meets security standards as well as those of our ...


1

Authentication methods Are you only authenticating or also other stuff? You might also need smartcards. Are you sure you only need SMS or do you also need to choose from a vast variety of tokens? Token You might want to choose a solution, which is not provided by a token vendor. The thing behind this is: You can keep the software system but easily mix and ...


0

Breaking a knowledge factor have a theorical cost we can easily assure beyond human capability (a password with 12 dicewares words will never be unhashed using unbroken 256bit hash), if we exclude human vulnerability and implementation vulnerability (and the fact nobody use a 12 words password) this is a perfect security and provable as is. (as long as we ...


2

As with any two-factor authentication (2FA) method, then you're back to essentially only having a password protecting your account. But with grids I'd consider the printout a greater security risk than the server getting hacked. The thing that I find hilarious about grids as a 2FA method is that A) they are too complex to memorize, so you HAVE to have a ...



Top 50 recent answers are included