stargeek
PHP news website logo.
home    PHP scripts    articles    seo tools    links    search    contact    shop    realtors


Identity Theft: It's The Transaction, Not The Authentication That's The Issue







Identity Theft: It's The Transaction,
Not The Authentication That's The Issue

Identity Theft: It's The Transaction,
Not The Authentication That's The Issue
04/14/2005 01:21 PM

Bruce Schneier is continuing on earli er points he's made about problems with authentication methods, by breaking down identity theft and noting that it's really two different issues: impersonation and fraudulent transactions. Almost all of the ideas on how to deal with identity theft focus on stopping the first part, the impersonation, instead of the second part, the transaction. Schneier claims this is backwards -- and notes that it's almost the exact opposite of the way the credit card industry works. Of course, the response would be that if you can properly authenticate the person, then it does make it more difficult to even get to the fraudulent transaction. On top of that, despite Schneier's claims that the credit card industry is in good shape, plenty of identity theft does involve fraudulent credit card transactions. Either way, the points do make some sense, and it's important to clearly break down the real problems involved, instead of just letting a bunch of politicians come up with some law that they claim solves the problem -- when it's clear they barely understand the problem at all.




This is a GrokNews Entry: (what is grok?)





Similar Items

Identity Theft: It's The Transaction, Not The Authentication That's The Issue

Grok Headline matches for Identity Theft: It's The Transaction, Not The Authentication That's The Issue

Two-Factor Authentication Could Stem
Rising Tide of Identity Theft


Two-Factor Authentication Could Stem
Rising Tide of Identity Theft
04/15/2005 08:33 PM
Washington panelists tout the value of the small, digital token devices that provide users with a random, six-digit code that changes every 60 seconds.

Hacked data boots identity theft to
critical issue


Hacked data boots identity theft to
critical issue
03/14/2005 05:56 PM

Hardening Linux authentication and user
identity


Hardening Linux authentication and user
identity
09/23/2004 10:56 AM

NewsForge: Hardening Linux
Authentication and User Identity


NewsForge: Hardening Linux
Authentication and User Identity
09/24/2004 01:43 PM

NY AG Wants Do Not Identity Theft Law


NY AG Wants Do Not Identity Theft Law 04/18/2005 02:28 PM
New York's Attorney General (and gubernatorial candidate) Eliot Spitzer seems to show up wherever there's an issue that's getting a lot of press. He took on Wall Street companies, spammers and insurance scammers among many others. So, is it really any surprise that he's now decided to take on identity theft? Of course, there already are laws against identity theft and fraud. While they could be made better, it's not clear that's what's happening here. In fact, one of the proposed laws speaks directly to all of those recent data leaks from ChoicePoint, LexisNexis and others. It would create a "Do Not Share" list that people could sign up for, forbidding any of these companies to share your data. While this might sound good on its face, it seems to be based on the idea that there really isn't a good reason for companies to ever share your data -- which isn't quite true. Many of the conveniences we have these days is because of the data that's available. Granted, in plenty of cases it may have gone too far, and these companies have done a dreadful job -- but a full stop "do not share" list (which many people would quickly sign up for without realizing the impact) could greatly inconvenience many people. A much more reasonable solution isn't to ban all sharing of information, but to give people more control and visibility into (1) what information companies have about them and (2) how it's being used. That way, individuals can work to prevent the misuses, while still getting the benefits.

Is identity theft inevitable?


Is identity theft inevitable? 04/01/2005 11:21 AM

Avoid Identity Theft


Avoid Identity Theft 07/27/2004 09:21 AM
A few changes in behavior can spare you a world of trouble.

Identity Theft - The Real Cause


Identity Theft - The Real Cause 05/24/2004 05:38 PM

BOFH: Identity theft


BOFH: Identity theft 03/24/2005 08:28 AM
Episode 11 Name, number, biometric

Identity Theft on the Rise


Identity Theft on the Rise 01/23/2004 03:54 AM
Complaints are up 45% from the previous year to the FTC over Identity Theft. The problem continues to grow with...

You Can Be Anyone You Want: Identity
Theft Is Easy


You Can Be Anyone You Want: Identity
Theft Is Easy
09/02/2004 05:50 PM
MSNBC, which has been covering identity theft stories for quite some time, is now running a very long excerpt from a book about identity theft called < i>Your Evil Twin : Behind the Identity Theft Epidemic. It goes over the stories of a few of the biggest identity theft criminals around, showing just how they impersonated the rich and famous to take their money. The scary part, of course, was just how easy it was -- and how unsophisticated the scams really were. While the press hyped up the capture of one of the criminals, in looking at the details, it becomes clear that the guy made a lot of silly mistakes (such as using the same free email account for a variety of his scams -- often within the same bank). The real culprit is the system by which the credit card companies and the credit bureaus run their businesses. As it stands, they have very little incentive to actually secure the system. Instead, they let it the crimes occur, and let everyone else deal with the mess.

Plenty Of Identity Theft Going Around


Plenty Of Identity Theft Going Around 01/22/2004 02:06 PM
The FTC has put out their list of what people were complaining to them about, and it seems that identity theft tops the list for the fourth straight year - with 42% of complaints concerning the crime (up from 40% the year before). What's most interesting to me about this, though, is that despite all this identity theft, we still haven't done much to prevent it. It still seems like most lawmakers and authorities don't see it as a serious problem.

Identity Theft Insurance


Identity Theft Insurance 03/22/2005 04:32 PM

Allstate launches identity theft coverage in Tennessee: Allstate insurance has started offering identity-theft insurance as a rider to homeowners' policies.

Allstate's new identity theft expenses coverage is available for Allstate homeowners and renters in Tennessee for approximately $30 a year. It provides customers access to professional identity restoration assistance. If a customer chooses to do the work on their own, Allstate's policy provides up to $25,000 in reimbursement coverage for expenses incurred to restore their identity, including attorney fees, loan reapplication fees, credit report fees, and lost wages.

Along with spam, identify theft is another parasite propeled by the Net. Funny how these things open up entire revenue streams of their own. For every problem, there is a solution...and someone who will sell it to you.

I wonder if they could increate the premium based on Net usage? Do they Google for you before they write the policy?


Mitigating identity theft


Mitigating identity theft 04/14/2005 06:14 AM
Security expert Bruce Schneier says solutions being proposed in Congress won't stem a worrying trend.

Offshored Identity Theft


Offshored Identity Theft 04/12/2005 11:10 AM

Types of Identity Theft


Types of Identity Theft 12/30/2004 12:05 PM
Learn what to look out for, and protect yourself!

Identity Theft And Meth


Identity Theft And Meth 06/08/2004 10:50 AM
USA Today is running an AP article talking about how law enforcement is working on bet ter ways to combat identity theft, where someone mentions that all of those involved with identity theft also are involved with methamphetamine. That was certainly true of the profile of an identity theft ring we wrote about last year, but it seems like focusing on that aspect shouldn't be useful for very long. With the rate at which identity theft crime is growing, it seems likely that it, too, will start to get taken over by organized crime groups - and will become increasingly sophisticated. In other words, if you thought identity theft was bad now, it's only going to get worse. At what point will credit agencies and financial institutions realize that they need to take the issue of identity theft more seriously?

Identity Theft Victim Gets Last Laugh


Identity Theft Victim Gets Last Laugh 03/25/2005 09:35 PM

New Law Gets Tough on Identity Theft
(Reuters)


New Law Gets Tough on Identity Theft
(Reuters)
07/15/2004 01:26 PM
Reuters - President Bush signed legislation on Thursday that toughens penalties against identity theft, a problem that federal officials estimate cost U.S. consumers and businesses over $50 billion last year.

Avoid "Brokerage Identity Theft"


Avoid "Brokerage Identity Theft" 02/11/2004 08:03 AM
Identity theft doesn't just happen to individuals. Even brokerages can be victims.

Identity theft isn't always online crime


Identity theft isn't always online crime 12/19/2004 03:54 PM
Indystar.com - Sun Dec 19, 08:44 am GMT

Surf and turf and identity theft


Surf and turf and identity theft 04/06/2005 06:23 PM
globetechnology.com Apr 6 2005 9:57PM GMT

Is A Spoofed Email Identity Theft?


Is A Spoofed Email Identity Theft? 06/01/2004 10:55 AM
There are a ton of currently hazy legal issues being raised by a case heading to the Maine Supreme Court concerning one family's attempt to find out who sent out an unflattering email about them to neighbors - using a fake email address. The email address in question was made to look as though it were from Ron Fitch (the person now suing to find out who sent the email), though it used a fake email address, and not Fitch's real email address. The email included a cartoon making fun of Fitch and his family for their ongoing efforts to change the small island they live on. The family is now suing to try to find out the identity of who sent out the email. So, there are a variety of legal questions that need to be answered - and not all of them are that clear. First, is sending out an email that could possibly (but not necessarily) be interpreted as being from someone else be considered "identity theft" of that person, as Fitch is claiming? Next, is sending out an unflattering cartoon of your neighbor over email protected free speech - such as satire? Finally, should an ISP be forced to reveal the identity of an email sender just because someone doesn't like the content of the message - or does the sender have a right to privacy? The answers to the first two questions probably impact the last one - though, the lawyers are likely to argue with that. The last question, if you listen to the entertainment industry these days, is already answered - but that might get a little murkier when people realize that just about anyone can try to get the identity of anyone else sending emails. It's easy to say that the right to privacy online ends when you break the law, but it's not always such a clear cut case.

FTC's Identity Theft Help Site


FTC's Identity Theft Help Site 03/17/2005 03:49 AM
The recently updated site describes what steps to take if you are a victim of identity theft, your legal rights, how to handle specific problems you may encounter on the way to clearing your name, and what to watch for in the future.

The growing problem of identity theft


The growing problem of identity theft 12/04/2003 06:06 AM
Europe catching up with USA

Identity Theft Resources Center


Identity Theft Resources Center 05/10/2004 05:49 AM
Identity Theft Resources Center
http://www.idtheftcent er.org/local.shtml

Identity Theft Resources Center is a private non-profit site which provides information and resources for "consumers, victims, law enforcement, the business and financial sectors, legislators, media and governmental agencies" concerning the crime of identity theft. Information available includes forms and procedures for victims, prevention tips, laws and publications. This has been added to Internet Hoaxes Subject Tracer Information Blog.

Congress takes on identity theft


Congress takes on identity theft 04/15/2005 04:52 AM
Congress proposes legislation aimed at forcing companies to inform customers when their personal data is compromise. It's a good start, but it doesn't go far enough.

Liberty Aims to Contain Identity Theft


Liberty Aims to Contain Identity Theft 06/17/2005 03:18 PM
The federated identity group forms a task force to thwart fraudsters who steal Web users information.

Computer tech in $72m identity theft


Computer tech in $72m identity theft 09/14/2004 04:28 PM
The Australian Sep 14 2004 8:10PM GMT

UK wide open to identity theft


UK wide open to identity theft 03/25/2005 04:56 PM

Most identity theft cases never get
resolved


Most identity theft cases never get
resolved
06/22/2005 02:29 AM

Identity Theft and Social Networks


Identity Theft and Social Networks 01/02/2004 06:09 PM
scubacuda writes "This Security Focus article looks at the lack of security social network sites have, particularly their lack of SSL logins, which means a ...

Identity Theft Victim Is Prosecutor (AP)


Identity Theft Victim Is Prosecutor (AP) 06/25/2004 07:10 AM
AP - If you're going to steal someone's identity to draw from their bank account, you might as well go for someone with a good job.

How to avoid identity theft on public
computers


How to avoid identity theft on public
computers
03/29/2005 06:49 AM
CBS Marketwatch Mar 29 2005 10:31AM GMT

Cameraphone Identity Theft Myth In The
News Again


Cameraphone Identity Theft Myth In The
News Again
12/24/2004 12:18 PM
Earlier this year, we had a story about the possibility that someone might, possibly, maybe use a cameraphone to snap a photo of your credit card when you pulled it out to pay at the supermarket. There was no evidence that this was actually happening, and it seemed a bit far-fetched for a variety of reasons. One of Techdirt's readers even took out a fairly good cameraphone and tested it out, noting that it's impossible to accurately photograph a credit card with current cameraphone technology. That isn't to say this won't become an issue as the quality gets better -- and the quality has gotten better in the past year. However, there's still no evidence that this is really happened anywhere. Instead, we get Gizmodo pointing to another article with quotes from police officers who say it's happening all the time in South Florida. They don't give any evidence. They haven't found anyone doing it. Someone says that "it's real easy to capture someone's information by standing behind somebody," without actually proving it. In fact, it's not that easy. The article also notes that identity theft is "the fastest growing crime in Florida," but puts it in context to make you think that identity theft by cameraphones is the fastest growing crime in Florida. Well, I guess if it's gone from 0 to 1, that's an infinite increase, but there isn't any evidence that it's ever happened anywhere. They quote one guy who claims his aunt's bank account was wiped out, and he assumes they got her ATM card number this way. Yes, apparently, without anyone noticing, they're assuming this criminal first took a photo of the ATM card in a clear enough manner to see the numbers, and then again used the camera phone to look over her shoulder to capture each button should pushed on the keypad to record her pin. Sounds likely.

Social Security Number The Key To
Identity Theft


Social Security Number The Key To
Identity Theft
01/05/2004 04:54 AM
You've all seen them (and most people have probably filled them out): some random form for something or another that asks for your social security number. Many retail shops (such as video rental stores) ask for them - but they have no reason to know that information. People are growing increasingly concerned because having someone's social security number is usually a key piece for doing some identity theft. Of course, these days, getting your hands on someone else's social security number is pretty damn easy - and part of that is because people ask for it all the time, and most people comply. Many people either don't realize how important the number is or just don't want to complain about it being asked for - even if, in many cases, these firms have no right to know. Of course, that's never going to change. Instead, what we should be working towards is a system that doesn't require a permanent and easily copied number like a social security number to prove you are who you say you are. It's like having a not very secret password that's impossible to change. Not very secure. Until a more secure system is standard, the problem isn't likely to go away.

IRS flaws open door to identity theft


IRS flaws open door to identity theft 04/18/2005 11:49 PM
ZDNet Apr 19 2005 3:57AM GMT

Bush signs identity theft sentencing law


Bush signs identity theft sentencing law 07/15/2004 06:44 PM

U.S. Senator Seeks Safeguards After
Identity Theft


U.S. Senator Seeks Safeguards After
Identity Theft
03/30/2005 01:33 AM
U.S. Sen. Dianne Feinstein called for more government protection against identity theft after a laptop storing nearly 100,000 Social Security numbers was purloined from a California university.
Grok Description matches for Identity Theft: It's The Transaction, Not The Authentication That's The Issue
GrokA matches for Identity Theft: It's The Transaction, Not The Authentication That's The Issue

Identity Theft: It's The Transaction, Not The Authentication That's The Issue

The following phrases have been identified by the grok system as matching this entry:

















Also check out:


Grok

Ipod Porn on the
Rise

Brief Abstract of
Wikipedia's
Mesothelioma Cancer
page

Get first aid
instructions in your
cell phone

IE is crap
JSPWiki gains
podcasting support

Convergence -- where
is it taking the
CIO?

British bank warns
180,000 over
retailer's security
breach

Q&A: HP's Ann
Livermore on life
after Carly

Cisco to acquire
Topspin for $250M

Mac, iPod sales
bring Apple record
Q2 earnings

Google Video (Beta)
- Video Upload
Program

Mayor Is Said to
Have Deal to Ease
Job Cuts in Plaza
Overhaul

Senator Threatens to
Block Vote on E.P.A.
Nominee

For Capital's
Baseball Fans, Time
Is Set to Begin Anew

At Least 11 Are
Killed in Twin
Suicide Bombings in
Baghdad

Texas Businessman
Indicted in Iraq
Oil-for-Food Program

Mail Access Monitor
for MDaemon v2.7d

Internet Access
Monitor for WinGate
v2.7d

TEXTools v2.0
Shark Tank: Not the
consequences he had
in mind

Analysts believe in
iPod 'halo effect'

Apple stock falls
following Q2 2005
financial results

First search engine
for podcasts set to
launch

Internet Explorer
wininet.dll URL
parsing memory
corruption technical
details

Teenager fatally
stabbed in town

Ex-UDA leader's
accounts frozen

Gujarat riot Muslims
'eliminated'

Police dig French
killer's garden

Mexico mayor 'could
be pardoned'

Bid to start Ivorian
disarmament

Kilroy achieves lift
off

Soldier cleared of
Gaza killing

Glazer submits fresh
Man Utd bid

Apology over police
officer death

dbkAssociates, Inc.
Announces
Affiliation with
EnCompass Knowledge
Systems, Inc. for
Corporate Governance
and Change
Management
Requirements

MMA Provides Limited
Release of First
Fully-Integrated
Marketing ROI
Service

QmailLDAP/Controls
20050414 (Default
branch)

DarkIce 0.15
(Default branch)

The Shadow's Rage
1.0 (Default branch)

Perl Panel 0.9.1
(Default branch)

Dwarf Mail Server
1.1.0 (Default
branch)

trackerbt 0.1.1
(Default branch)

SAM Jr 0.2 (Default
branch)

itomatOS Icons 2.0
rc1 (Default branch)

G-Wrap 1.9.6
(Default branch)

arpalert 0.4.0
(Release Candidate
branch)

Dressed for Fly
Fishing

Mac OS X 10.4 will
be launched at the
end of April

The big roundup
Have VPN, Safe to
Travel

World War II DVD
Giveaway Launched on
PBS American
Experience Site

Muppets Take Tribeca
Sweepstakes

Walt Disney World
podcast

Comic book
illustrated with
Half Life 2
screenshots

RIAA prez grilled on
Internet2 lawsuits

what is grok?