Paypal Security Key :: Phishing practically defeated

Something for you security geeks

[sun818]

[paypal.com...]

Generates a unique six-digit security code about every 30 seconds. You enter that code when you log in to your PayPal or eBay account with your regular user name and password. Then the code expires - no-one else can use it.

[LifeinAsia]

It looks identical (except for the corporate logos) to what CitiBank issued months ago. (No charge, by the way.)

I don't know how PayPal will implement it, but I like CitiBank's implementation- without using the key, you can still logon and see current transactions. But you need to logon with the key to transfer money and lookup transactions older than a certain time period. Also, if you logon without the key and later want to access key-only sections, you can just enter they key then- you don't have to log all the way off and then log back on with the key.

[aleksl]

You click on "View Demo", and it promts you to "upgrade Flash" ...even when you have latest version isntalled... great, some security if they can't even get the demo play right. :)

[LifeinAsia]

Oh, and when you click on the link to order a key, you get a message saying the Security Key isn't available yet. Nice.

---

continued
[webmasterworld.com...]

[edited by: Brett_Tabke at 4:07 pm (utc) on Jan. 15, 2007]
[edit reason] [/edit]