Comment on Tutorial - The Failure of 2FA / Two-Factor Authentication By Bruce Schneier
Comment Added by : Joe Bloggs
Comment Added at : 2013-04-22 13:40:24
Comment on Tutorial : The Failure of 2FA / Two-Factor Authentication By Bruce Schneier
All true, but the 2FA that has been implemented for some years by my bank (Barclays) requires transaction details (e.g. amount and destination account number) to be keyed into the authentication token (which has its own keypad) and the signed response to be keyed into the website.
The token uses the crypto module on my bank card's chip, so is a relatively cheap device interchangeable which is between all of the bank's customers.
This mitigates against both trojans and MITM as it prevents the attacker from performing any malicious activity once logged in without somehow getting me to enter their chosen amount and account number into the signing device (albeit they can still view my account statements, which may also be undesirable).
I'm pretty sure that Barclays are not the only bank in the UK to adopt this approach, and would be surprised if other countries had not also followed suit. Of course, the US are still to adopt chips on bank cards, so are many years behind the rest of the world on this one.
View Tutorial
- Data Science
- Android
- AJAX
- ASP.net
- C
- C++
- C#
- Cocoa
- Cloud Computing
- HTML5
- Java
- Javascript
- JSF
- JSP
- J2ME
- Java Beans
- EJB
- JDBC
- Linux
- Mac OS X
- iPhone
- MySQL
- Office 365
- Perl
- PHP
- Python
- Ruby
- VB.net
- Hibernate
- Struts
- SAP
- Trends
- Tech Reviews
- WebServices
- XML
- Certification
- Interview
categories
Related Tutorials
Java program to get location meta data from an image
Program using concept of byte long short and int in java
Update contents of a file within a jar file
Tomcat and httpd configured in port 8080 and 80
Count number of vowels, consonants and digits in a String in Java
Student marks calculation program in Java
Calculate gross salary in Java
Calculate average sale of the week in Java
Vector in Java - Sample Program
Archived Comments
1. good Article!! you can add context settings in app
View Tutorial By: Amit Nigam at 2009-06-10 07:35:20
2. It's very helpful to me... Thanks...
View Tutorial By: Nicks Patel at 2010-03-24 23:37:04
3. Thanks for this great tutorial... was looking for
View Tutorial By: Shashi at 2012-09-20 11:35:08
4. Thanks, It's exactly. A my friends has the same is
View Tutorial By: Slim at 2012-09-29 02:52:12
5. short notes to struts,but i expect more explanatio
View Tutorial By: jayashri at 2011-11-23 18:24:07
6. If I have reliance netconnect connected to my lapt
View Tutorial By: Shaik Allabakash at 2010-02-09 19:38:10
7. sir plz give ur sugissions for my golden future in
View Tutorial By: sridevi at 2012-06-06 10:26:36
8. Good info.. keep providing..
View Tutorial By: Shoaeb uddin khaleefah at 2010-07-27 05:28:19
9. Hi ,
Since both the methods in the
View Tutorial By: Chintan at 2013-11-21 03:42:32
10. hi friends thank you very much for the code but th
View Tutorial By: Surya at 2008-06-13 07:06:07