3 ms·
The reader connecting (and transmitting) via USB would sort of defeat the secondary-device security point, wouldn't it?
by bryne 16y ago
The reader connecting (and transmitting) via USB would sort of defeat the secondary-device security point, wouldn't it?
- corin_ 16y agoPossibly but... would still be a lot more complex than just having a password. For example a standard keylogger wouldn't pick it up.
- rwmj 16y agoThat's security through obscurity. All existing techniques have been attacked (eg. keyloggers now take screenshots to defeat the silly pull-down menu "security"), so it's only a matter of time before they start capturing USB output and using it to attack the account in real time. What's wrong with a key fob displaying numbers with no physical connection to the computer? Edit: The first UK retail bank to offer this as standard would definitely get my custom. I'm quite serious about that. Also drop "VerifiedByVisa" nonsense at the same time and replace it with similar real security.
- ZoFreX 16y agoNatWest require the secondary factor if you either add a new payee or send a payment for the first time to a particular payee. You can still login and do almost anything else without it, though.