How to protect your Online Customers' passwords?

How to protect your Online Customers' passwords?

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
How to protect your Online Customers' passwords? G2iDStaff 05-27-2006
Posted by G2iDStaff on May 27, 2006, 12:26 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Try online demo at www.g2id.com to find out how....

http://www.g2id.com/G2ID_affordable_strong_authentication_SecurInput.htm


Posted by Ludovic Joly on May 28, 2006, 9:15 am
If you were  Registered and logged in, you could reply and use other advanced thread options

If I understand your technology, it tries to defeat spyware by adding
some noise to the captured data.

How can this resist to some repeated observation and the fact that
human movements follow a rhythm?

What about an attacker observing both the screen and the keyboard
input? Wouldn't this allow him/her/it to select the real keystrokes?

Kind regards
Ludovic Joly


Posted by G2iDStaff on May 29, 2006, 5:29 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Excellent Question!!!

There are two reasons a hacker is unlikely to succeed:

1) G2iD has programmed the cursor movement to randomly move at
different speeds and strike the keys at different spots on the Virtual
Keyboard (VKB), as close to imitating the user as possible. The hacker
can never tell if the first or last click is real or fake.

2) It is highly unlikely that the hacker will accurately capture a
strong password in its entirety, thus will likely end up locking the
user's account assuming that the institution uses a 3 times and your
out rule.

G2iD's technology uses a virtual keyboard on the screen, thus there are
no keyboard strokes to record. There is spyware, however, that can
record mouse clicks and cursor coordintates. Since we employ java
technology, the "noise" that throws the hacker off is actually java
applet generated mouse clicks (generated by our patent pending
generator). These are seen at the system level as real mouse clicks,
thus anyone monitoring mouse click and cursor coordinates will not be
able to determine the user generated ones from the applet generated
ones. Our applet sends only the user generated clicks for the actual
login.

SecurInput fills the "gap" between a newly release key logger and or
screen capturing trojan and the release of a new definition by the
Anti-Virus and Spyware vendors (Typically the turnaround time for a new
virus / spyware definition is between 24 to 48 hrs on a average if not
longer), thus providing real time password protection even if the
trojan is already installed on the victim's PC.


Posted by Volker Birk on May 30, 2006, 1:57 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> G2iD's technology uses a virtual keyboard on the screen, thus there are
> no keyboard strokes to record. There is spyware, however, that can
> record mouse clicks and cursor coordintates. Since we employ java
> technology, the "noise" that throws the hacker off is actually java
> applet generated mouse clicks (generated by our patent pending
> generator). These are seen at the system level as real mouse clicks,
> thus anyone monitoring mouse click and cursor coordinates will not be
> able to determine the user generated ones from the applet generated
> ones. Our applet sends only the user generated clicks for the actual
> login.

Sorry, this sounds like a bunch of bullshit.

I fear, it would be better for you to deal with security basics than
to implement security by obscurity systems and to sell snake oil.

> SecurInput fills the "gap" between a newly release key logger and or
> screen capturing trojan and the release of a new definition by the
> Anti-Virus and Spyware vendors (Typically the turnaround time for a new
> virus / spyware definition is between 24 to 48 hrs on a average if not
> longer), thus providing real time password protection even if the
> trojan is already installed on the victim's PC.

Ridiculous.

Yours,
VB.
--
At first there was the word. And the word was Content-type: text/plain

Similar ThreadsPosted
Protect Your Online Privacy And Internet Security November 6, 2004, 1:46 pm
Armed Robbers Pose as Craiglist Customers July 20, 2006, 12:16 pm
Encryption Wizard Offers Large Object Binary support for Oracle Customers. May 20, 2005, 12:52 pm
fetish online adds January 20, 2006, 8:12 pm
Online Arcade Game Protection February 6, 2006, 9:57 am
?SECURITY THREATS TO ONLINE GAMERS? March 10, 2006, 9:50 am
Online Class CISM Certification March 25, 2008, 7:48 pm
Internet / Online Security for Home Users March 6, 2006, 1:41 pm
Online Cryptography course offered by University of Washington June 6, 2006, 10:42 pm
New - Most Comprehensive Online Reverse Hash Look-Up Database (MD5 and more) February 18, 2007, 1:50 pm

The site map in XML format XML site map

Contact Us | Privacy Policy