Author Topic: Two factor authentication, Banks and Fraud!  (Read 44420 times)

Offline Jiehua

  • Newbie
  • *
  • Posts: 1
Re: Two factor authentication, Banks and Fraud!
« Reply #15 on: January 20, 2008, 04:40:08 AM »
For the man-in-the-Middle attack and trojan attack,how can two-factor Authentication system prevent them efficiently?Is there any idea which can be suggested for the bank to use thus it can improve its security?

Offline Melih

  • CEO - Comodo
  • Administrator
  • Comodo's Hero
  • *****
  • Posts: 14651
    • Video Blog
Re: Two factor authentication, Banks and Fraud!
« Reply #16 on: January 20, 2008, 10:03:50 AM »
our solution does prevent MIM (man in the middle) attacks.

some financial institutions are starting to use our solution. If your bank doesn't pls recommend us to them.
thank you

Melih

Offline MorphOS REBOL

  • Comodo's Hero
  • *****
  • Posts: 1203
Re: Two factor authentication, Banks and Fraud!
« Reply #17 on: January 24, 2008, 09:12:35 PM »
I will do as you said, Melih. But I sincerely doubt there are any kinds of ears existing here, where I am.

Still, in hope, don't know why.


Offline arjunpa

  • Comodo's Hero
  • *****
  • Posts: 392
  • Iam Cool
Re: Two factor authentication, Banks and Fraud!
« Reply #18 on: January 25, 2008, 05:49:50 AM »
Phishing is the one of the major problem faced in my country and it has become a common thing.I just read in newspaper that phising is done mainly from Kenya and Nigeria.I dont know whether its true....
Core i5 750 [at] 2.66 GHz
MSI GD65 Motherboard
2 GB RAM
Sapphire HD 5770 1 GB

Offline Melih

  • CEO - Comodo
  • Administrator
  • Comodo's Hero
  • *****
  • Posts: 14651
    • Video Blog
Re: Two factor authentication, Banks and Fraud!
« Reply #19 on: January 25, 2008, 08:35:23 AM »
Phishing is a huge problem!
We have solved it using a whitelisting approach with Verification Engine

thanks
melih

Offline Stanr

  • Comodo Family Member
  • ***
  • Posts: 56
Re: Two factor authentication, Banks and Fraud!
« Reply #20 on: January 26, 2008, 08:44:47 PM »
For the man-in-the-Middle attack and trojan attack,how can two-factor Authentication system prevent them efficiently? <snip>



Evidently they can't .

"Silent Banker Trojan Targets 400 Banks, Circumvents Two-Factor Authentication, Just For Starters..." full story here: http://www.nationalcybersecurity.com/blogs/300/Silent-Banker-Trojan-Targets-400-Banks-Circumvents-Two-Factor-Authentication-Just-For-Starters.html

This is probably old news here but it's the first I've seen it.

Will CFP/D+ catch this?

Sure hope so, it sounds nasty.

Thanks,
s.

Offline Melih

  • CEO - Comodo
  • Administrator
  • Comodo's Hero
  • *****
  • Posts: 14651
    • Video Blog
Re: Two factor authentication, Banks and Fraud!
« Reply #21 on: January 26, 2008, 09:52:07 PM »
V3 will catch this!

melih

Offline Stanr

  • Comodo Family Member
  • ***
  • Posts: 56
Re: Two factor authentication, Banks and Fraud!
« Reply #22 on: January 26, 2008, 10:41:35 PM »
Some how I just knew it would.   (B)

Thanks,
s.

Offline Kaufhof

  • Newbie
  • *
  • Posts: 8
Re: Two factor authentication, Banks and Fraud!
« Reply #23 on: January 27, 2008, 07:27:36 AM »
Another security application has a "Banking" mode, in which the firewall element  will deny access by your browser to any site not on your "My sites" list.
Obviously you must set up your own listings, but it's simple enough to do by copy and paste of the URL into the list, when you are certain that you are on your bank's site.
All that is required for a transaction with your bank, or other money handling institution, is to enable banking mode, afterwards returning to standard mode.
How do you see the benefits of this approach?

My BIG question (to which I have yet to find an answer) is - how am I ever certain I am on the correct site?

Offline Melih

  • CEO - Comodo
  • Administrator
  • Comodo's Hero
  • *****
  • Posts: 14651
    • Video Blog
Re: Two factor authentication, Banks and Fraud!
« Reply #24 on: January 27, 2008, 04:37:52 PM »
My BIG question (to which I have yet to find an answer) is - how am I ever certain I am on the correct site?

Answer: Verification Engine

Melih

Offline giraffe

  • Comodo's Hero
  • *****
  • Posts: 730
Re: Two factor authentication, Banks and Fraud!
« Reply #25 on: January 27, 2008, 06:15:41 PM »
Answer: Verification Engine

Melih

On that link it says "Unique browser independent verification - Supports all major browsers" but [still] doesn't mention Opera :-(

If Opera isn't considered 'major', then lower down there is:

"VerificationEngine™ supports all the major browsers, so no matter how you choose to navigate around the Internet, VerificationEngine will provide the essential identity assurance you need."

and I choose Opera.

Any chance that Opera will be supported, please?
XP Pro SP3
Comodo FW
Avira
Pale Moon
SAS and MBAM on-demand.

Offline Melih

  • CEO - Comodo
  • Administrator
  • Comodo's Hero
  • *****
  • Posts: 14651
    • Video Blog
Re: Two factor authentication, Banks and Fraud!
« Reply #26 on: January 27, 2008, 06:54:30 PM »
On that link it says "Unique browser independent verification - Supports all major browsers" but [still] doesn't mention Opera :-(

If Opera isn't considered 'major', then lower down there is:

"VerificationEngine™ supports all the major browsers, so no matter how you choose to navigate around the Internet, VerificationEngine will provide the essential identity assurance you need."

and I choose Opera.

Any chance that Opera will be supported, please?

We will... as soon as we have some dev time free (they are developing some very important stuff of phishing)

melih

Offline Coolio10

  • Computer Security Testing Group
  • Comodo's Hero
  • *****
  • Posts: 464
Re: Two factor authentication, Banks and Fraud!
« Reply #27 on: January 27, 2008, 07:25:07 PM »
We will... as soon as we have some dev time free (they are developing some very important stuff of phishing)

melih
I wouldn't worry too much about opera support because a lot of software is not working with opera due to it being closed source. That is why the popular plugin roboform is not for opera but everything else.
(\__/)
(='.'=)
('')_('')

Giveaway of the Day" style="border: none

Offline giraffe

  • Comodo's Hero
  • *****
  • Posts: 730
Re: Two factor authentication, Banks and Fraud!
« Reply #28 on: January 28, 2008, 09:09:37 AM »
I wouldn't worry too much about opera support because a lot of software is not working with opera due to it being closed source. That is why the popular plugin roboform is not for opera but everything else.

Yes - that also means Opera is not so vulnerable. I use Open DNS and have Opera's fraud system on, then Opera always asks if scrips should run on secure pages and warns me if the encryption is weak/certif. out of date.

Be good when VE is available - thank you Melih, yet again Comodo does the right thing.
XP Pro SP3
Comodo FW
Avira
Pale Moon
SAS and MBAM on-demand.

Offline landsker

  • Comodo Family Member
  • ***
  • Posts: 62
    • Costa del Sol, Spain
Re: Two factor authentication, Banks and Fraud!
« Reply #29 on: January 30, 2008, 09:15:55 AM »
Is open DNS helpful in this respect, on its own?

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek