The Homograph Attack

Inside Risks 140, CACM 45, 2, February 2002

Oldtimers remember slashes (/) through zeros [or through the letter O where there was no difference] in program listings to avoid confusing them with the letter O. This has long been obsoleted by advances in editing tools and font differentiation. However, the underlying problem of character resemblance remains, and has now emerged as a security problem.

The Homograph Attack weiterlesen

Two-Factor Authentication: Too Little, Too Late

Inside Risks 178, CACM 48, 4, April, 2005

Two-factor authentication isn’t our savior. It won’t defend against phishing. It’s not going to prevent identity theft. It’s not going to secure online accounts from fraudulent transactions. It solves the security problems we had ten years ago, not the security problems we have today.

Two-Factor Authentication: Too Little, Too Late weiterlesen

Arbeitsgruppe Identitätsschutz im Internet