Two-factor authentication using hardware tokens to log on to internet banking sites (among other things) is intended to make banking over the Internet more secure. It turns out that it isn’t as great as it seems to be on first blush. Bruce Schneier has talked about this problem several times. Why is this problem so difficult?
Continue reading “Authenticating transactions, not people”
If you’re a member of some organization, or have some certification that entitles you to sign up for services somewhere, you need to be able to prove that you have that credential somehow. In real life, you’d carry a plastic card issued by a reliable organization and that you could flash in the face of whomever needs to see it. But how do you do this in the Etherworld?
Continue reading “Proving membership online”
After using Windows in one version or another for many years, I got myself an Apple iBook just three months ago. I use that iBook for everything I can use it, that is, everything except developing applications, since my customers still are stuck with Windows. What has struck me with the iBook is that working as a non-admin on these machines is absolutely no problem, while it’s an incredible pain in the derriere if you try to do that under Windows.
Continue reading “Microsoft’s logon model problem”
So, here I am, enriching the world with another blog you can’t live without. I know you’ve all been waiting with bated breaths on my words of wisdom, that the internet has been standing still, hushed and quiet, to see what I have to say.
Continue reading “As if the world needs yet one more blog…”