Mitigating identity theft - Bruce Schneier

ronjor · Apr 14, 2005

But data privacy is more than just fraud. Whether it is the books we take out of the library, the Web sites we visit, or the contents of our text messages, most of us have personal data on third-party computers that we don't want made public. The posting of Paris Hilton's phone book on the Internet is a celebrity example of this.
Click to expand...

Article

Marja · Apr 15, 2005

That was interesting, Ronjor, it also had some interesting links. I like some of the things the author points out.

Criminals impersonate legitimate users to financial
institutions. That means that any solution can't involve the
account holders. That leaves only one reasonable answer:
Financial institutions need to be liable for fraudulent
transactions.
Click to expand...

And almost none of their security centers on trying to
authenticate the cardholder.

That's an important lesson. Identity theft solutions focus too much on authenticating the person. Whether it's two-factor authentication, ID cards, biometrics or whatever, there's a widespread myth that authenticating the person is the way to prevent these crimes. But once you understand that the problem is fraudulent transactions, you quickly realize that authenticating the person isn't the way to proceed.
Click to expand...

There is no payoff for security centers to even prevent ID thefts, in the long run the person who's identity is stolen is left to straighten the whole mess, without any support or most cases knowledge of 'what to do?'

Log in or Sign up

Mitigating identity theft - Bruce Schneier

ronjor Global Moderator

Marja Honestly, I'm not a bot!!

Log in or Sign up

Mitigating identity theft - Bruce Schneier

ronjor Global Moderator

Marja Honestly, I'm not a bot!!

Useful Searches