Re: [OT] ...ish....New Natwest online banking security hardware

[MailingLists <mailinglists@xxxxxxxxxxx>]

Can't see the point of these things myself...
I've worked for several banks and used the SecureID token generators to
access systems remotely and very good for that, but...

As a defence against internet phishing attacks it's a complete waste of
time.
Eg. Scumbag phisherman send email to gullible internet bank user, GIBU
clicks the link in the email and gets taken to phishing site, phishing
site asks for generated token, GIBU keys in token from 'fancy new card
reader gadget', phishing site immediately keys token into read bank
site, scumbags have access to site, granted it's a one time access, but
that'll be enough to loot the account and cause GIBU more grief than he
can image...


noel_pilot wrote:
>
> Kinda offtopic but I know how we all like techy things.
>
> Received a new natwest switch card this week way before the other one
> expires, so called to query, apparently im due to receive a calculator
> sized card reader, completely standalone that when you put your bank
> card in it it gives you a one time password a la vasco/rsa tokens.
>
> fine I accept that they need to improve security etc and i guess thats
> better than an rsa token as it'll prove you've got the card,
> however....what about when you want to access banking from away from
> home, its trial at the moment but if that was to become mandatory it
> could prove very inconvenient!!
>
> far better would be something called PocketID which we're about to
> trial at work, these are cards (which can include credit cards with
> chip and pin I believe) that have a one time password generator and
> screen inside them, absolutely the same size and thickness as a normal
> card, very very cool and works incredibly well!!
>
> Anyways....is anyone else got this thing through from Natwest? any
> thoughts on the wider subject??
>
> Noel
>
>
>
------------------------------------------------------------------------
>
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.5.484 / Virus Database: 269.12.9/975 - Release Date:
26/08/2007 21:34
>