two factor authentication

[Jefferson Ogata]

On 2006-07-25 21:06, William Ahern wrote:
> ATM cards are not like smart cards wrt to a very critical characteristic,
> you cannot "copy" a smart card.

> Well, a smart card
> is a computer you keep in your pocket or at your side 24/7, and even more
> it's a computer that is, in all practicality, impossible to install malware
> on.

The thing to remember is that those assertions are true in theory, but
because of the closed nature of a smartcard, such assertions are
actually much harder to test than equivalent assertions about other systems.

Smartcards are a bit like closed DRE voting machines in this respect.
And just as in election systems, the target market--high-security
applications--is inherently one which someone could benefit greatly by
exploiting.

-- 
Jefferson Ogata <Jefferson.Ogata at noaa.gov>
NOAA Computer Incident Response Team (N-CIRT) <ncirt at noaa.gov>
"Never try to retrieve anything from a bear."--National Park Service