Full Disclosure: RE: Defeating Citi-Bank Virtual Keyboard Protection

["Aditya Deshmukh" <aditya.deshmukh () online gateway strangled net>]

The only most secure protection is a one time password with a challenge /
response scheme. Most of the banks in europe already do this.

They give out a calculator like device to the customers and when u want to
login you are presented with a challenge that you punch into you device
which spits a response that you enter that into the form....

Costly for the bank but very effective security for the customer and bank in
terms of gain in security and decrease in losses due to fraud ....


- Aditya




________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/