archives  If you want an RSS feed try this xml rss V0.91 feed

Saturday, March 27, 2004

Giving Identity Theft the Thumbs Down

finger print recognitionLike some form of modern day Roman Emperor Jamie Jameson told the BBC Radio 4's Money Box Program how he intends to protect his Identity and credit rating by using his thumb, or rather his thumb print.
While the article does give some useful air time to the growing and increasing threat of identity theft it was a little light on substance and critical examination of the practicalities of Jamie's approach.
His attempt to protect himself is based upon the use of a real 'ink' thumb print that he will place alongside any signature to validate it. He has informed the UK's main credit agencies, including Experian, that unless the print is present then then any document is invalid. According to him ..I think I am the best protected person against identity fraud.
However there are some significant drawbacks in this rather simple approach, the first of which is how is anyone going to check the 'print' is indeed Jamie's and not just a similar one provided by the fraudster? Presumably The lender, credit agency or indeed Jamie would need to have the print checked by a Law Enforcement agency, the article refers to 'the police'. Not only would this be time consuming but probably expensive. Even then the degree of certainty is by no means absolute. Indeed the FBI in a recent finger print identification test found an average failure rate of 1 in 5.
Identity Theft will be one of the key topics of discussion at the The North East Fraud Forum Annual Conference 10th and 11th May 2004
Related Links
Taking identity fraud in hand : By Jennifer Clarke BBC Radio 4's Money Box
Practical Fingerprint recognition systems for Authentication
Precise Biometrics
Reckoning With Risk by Gerd Gigerenzer ISBN 0-140-29786-3
Fingering Fingerprints. (2000), December 16) The Economist, 103~104
APACS Card Watch web site with special focus on 'plastic card fraud'
Card Security Week 10-15 November 2003 Keeping Your Card Safe on the New High Street
Chip and PIN programme in the UK
CIFAS - The UK's Fraud Prevention Service

posted by Robert Campbell 4:04 PM

Wednesday, March 24, 2004

North East Fraud Forum Annual Conference

north east fraud forumDetails of the the North East Fraud Forum Annual Conference, to be held on the 10th and 11th of May 2004 are available. The venue is again to be St. James's Park, home of Newcastle United FC .
The conference is covering Identity Theft and Retail Fraud especially and includes speakers from The Metropolitan Police as well as representation by local forces such as Durham and Northumbria; retail experts from Marks & Spencer, Superdrug and the British Retail Consortium, and financial industry experts from APACS; HSBC; Barclaycard and Mastercard.
Key topics will be : Identity Theft; Payment Card Fraud; Retail Fraud; and Catering Fraud
Related Links
North East Fraud Forum
APACS Card Watch web site with special focus on 'plastic card fraud'
Card Security Week 10-15 November 2003 Keeping Your Card Safe on the New High Street
Chip and PIN programme in the UK
CIFAS - The UK's Fraud Prevention Service

posted by Robert Campbell 12:48 PM

A new way to go phishing

Grey Magic LogoGreyMagic's latest security advisory GM#005-MC, details of a seemingly new method of remotely exploitable cross-site scripting using IE are revealed. The vulnerability exploits the +TIME multimedia extensions for IE could enable web mail applications such as HOTMAIL or Yahoo, and likely others, to be used to compromise the computers of users of those mail systems. Hotmail has patched their systems
With the recent emergence of increasingly sophisticated phishing attacks such as the one recently focused against the MBNA bank; one can see that this may lead to some further developments in this area making them more difficult to detect even by the more aware user.
Related Links
GreyMatter Secure Web Browsing Initiative
Britain sees surge in 'phishing'
Association for Payment Clearing Services (APACS)
MBNA latest in phishing expedition

posted by Robert Campbell 11:46 AM


Powered by Blogger Pro™