WebApp Sec: RE: Article - A solution to phishing

[focus () karsites net]

Hi Mark and all!

On Sat, 27 Nov 2004, Mark Curphey wrote:

> To: webappsec () securityfocus com
> From: Mark Curphey <mark () curphey com>
> Subject: RE: Article - A solution to phishing
>
> <snip>
> My online bank uses a system of picking random numbers from my password, and
> asking me to match those numbers with a drop down box, instead of just
> typing in the exact password in the same format at each login.</snip>
>
> Can you describe this in detail? Without the details one might think this
> just reduces the amount of entropy an attacker has to guess so is a bad
> thing.
Take a look at http://www.nationwide.co.uk for the login
screen!

Regards - Keith Roberts

http://www.karsites.net