Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×
Crime Privacy Security The Almighty Buck IT

Everything You Know About Password-Stealing Is Wrong 195

isoloisti writes "An article by some Microsofties in the latest issue of Computing Now magazine claims we have got passwords all wrong. When money is stolen, consumers are reimbursed for stolen funds and it is money mules, not banks or retail customers, who end up with the loss. Stealing passwords is easy, but getting money out is very hard. Passwords are not the bottleneck in cyber-crime and replacing them with something stronger won't reduce losses. The article concludes that banks have no interest in shifting liability to consumers, and that the switch to financially-motivated cyber-crime is good news, not bad. Article is online at computer.org site (hard-to-read multipage format) or as PDF from Microsoft Research."
This discussion has been archived. No new comments can be posted.

Everything You Know About Password-Stealing Is Wrong

Comments Filter:
  • by interkin3tic ( 1469267 ) on Tuesday February 12, 2013 @10:43AM (#42871025)

    It puzzles me when I see that people work really hard to come up with difficult passwords for their bank accounts

    And do you see people coming up with such passwords often?

    Most online banking systems intentionally do not even give full account or routing numbers to logged in users, and I've never seen one give out SSN or DOB either.

    Hmm... you're familiar with most banking online systems?

    You almost had me convinced to make a super easy bank password. Nice try, identity thief!

  • by pixelpusher220 ( 529617 ) on Tuesday February 12, 2013 @11:21AM (#42871499)
    yeah, the guy stealing your money would totally balk at spending $50 bucks of your money to do that ;-)
  • by VortexCortex ( 1117377 ) <VortexCortex@pro ... m minus language> on Tuesday February 12, 2013 @11:31AM (#42871595)

    That's wrong terminology! Passwords are not Stolen!

    Look, if you have a car and I steal that car then you don't have a car anymore.
    If you have a password, and I get a copy of it, then you still have your password! We can both use the password, IT'S NOT STEALING.

  • by mlts ( 1038732 ) on Tuesday February 12, 2013 @11:49AM (#42871807)

    Mattresses seem to be the banking instrument of the future:

    1: No overdraft fees.
    2: No fees on withdrawals.
    3: No fees due to having a balance under x amount.
    4: Accessible 24/7, not just "banker's hours".
    5: No need to worry about a username/password.
    6: No ID theft can slurp your balance dry.
    7: Assets can only be frozen if your heater fails.
    8: Interest rate is about the same as most CDs.
    9: Computer glitches won't make the balance disappear.
    10: No need to give all your personal info when starting a new account.

  • by S.O.B. ( 136083 ) on Tuesday February 12, 2013 @12:13PM (#42872075)

    That's exactly what TFA says. Banks like the fear of lost passwords, because they can use that fear to their (profitable) advantage:

    "When perceived risk is greater than actual risk it can be protable to absorb the risk and charge for it. Rental car companies are not merely willing, but anxious to accept liability for any damage to the car for $35 a day; various companies aggressively market identity theft protection for $12 a month. Banks enjoy a huge information advantage over consumers: they know how much fraud costs them, while consumers merely hear horror stories of cyber-crime losses. Passing liability to consumers...would seem to be wasting a protable opportunity."

    Protable? WTF is protable?

    How can you possibly introduce a spelling mistake...TWICE...with a cut/paste?

And it should be the law: If you use the word `paradigm' without knowing what the dictionary says it means, you go to jail. No exceptions. -- David Jones

Working...