Ron, before you get into the chip-n-pin/smart-card stuff commonly used in Europe and Asia, you should probably check out the modern "Man-In-The-Browser" attack

Ron, before you get into the chip-n-pin/smart-card stuff commonly used in Europe and Asia, you should probably check out the modern "Man-In-The-Browser" attacks: http://www.irongeek.com/i.php?page=videos/derbycon2/3-1-1-dave-marcus-2fa-enabled-fraud-dissecting-operation-high-roller http://www.irongeek.com/i.php?page=videos/derbycon2/3-1-1-da... As the above shows, crypto is useful, but it's far from perfect due to its reliance on insecure stuff (i.e. web browsers, operating systems, ...). When the foundation is flawed, it's turtles all the way up. Also, don't let HN or the web in general get you down. Writing for those with a short attention span makes for short stories, not long ones. Being wedged could be an indication that you have a lot to say, too much to get it going properly. I've got a hunch you have a nice long story to tell, and it will be worth reading even if it comes out in a round about fashion. I ain't a crypto or security person, nor do I play one on TV, but if you want a proof reader contact me privately.