SiteKey to Prevent Phishing
Perekrestok writes "An article at CNN talks about a new system called SiteKey which will be rolled out at Bank of America across the U.S. by this fall. The system would require an online user to not only enter a password but also answer three personal questions. More interestingly, the system will have a button which will allow the user to verify that they are indeed at the bank's website and not at some scammer's fake site."
What is your name?
What is your quest?
What is your favorite color?
Finding other idiots on
Patriot Act Enhanced Questions
1. Religion?
2. Who you voted last election?
3. Are you a terrorist?
My city: Barcelona.
With the HTML they'll have to keep churning out, pretty soon phishing is going to seem like a real job.
BofA: What is your name?
Sir Lancelot: My name is Sir Lancelot of Camelot.
BofA: What is your quest?
Sir Lancelot: To seek the Holy Grail.
BofA: What is your favorite color?
Sir Lancelot: Blue.
BofA: Right, off you go.
Maybe
See, I thought so.
But then it's be easy to spot the scammer:
Of course your on the real bank website
The real website however would say:
Of course you're on the real bank website
I have a rebuttal to your comment, but I can't go into it at present. (Sorry)
See my journal for slashdot ID's by year. Mine created in 2005. http://slashdot.org/journal/289875/slashdot-ids-by-year
And still... all of this is useless when Bank of America lost my information on a tape backup during transfer. No wait... they finally admitted it was stolen. But I shouldn't worry. Sigh.
You mentioned 'email', 'login', 'mail', and 'browser window' in two sentences with instructions.
You just lost 1/2 your users. They won't get it.
damaged by dogma
I have a rebuttal to your rebuttal, but it it is too large to fit in the width of this much-indented comment thread. (Sorry)