Cybersecurity, Digital Identity and Authentication
Cybersecurity, digital identity, authentication, data security and breaches
Account TakeoverAuthenticationBiometricsCryptographyCybersecurityData BreachesData SecurityData TokenizationDigital IdentityEncryptionHackingMulti-Factor Authentication (MFA)One-Time Passwords (OTP)Privacy-Enhancing Technologies
Is there any equivalent of a Social Security Number for people in Pakistan?Dec 5, 2018Digital IdentityWhich industries are most likely to be transformed by blockchain?Feb 11, 2018Digital IdentityDoes PCI compliance apply to Bitcoin transactions and mobile wallet payments?Jan 3, 2017Data SecurityCan India issue a national ID in the form of a debit card like Nigeria has done?Oct 5, 2016Digital IdentityIf I give my virtual assistant access to my SunTrust business online banking for reconciliation, could they view my account number or initiate transfers?Oct 2, 2016Data SecurityBank accounts are verified via micro-deposits—who initiates those deposits and how does the verification process work?Jun 11, 2016AuthenticationWhy don’t PayPal or Skrill use SMS-based login verification—are there technical or regulatory obstacles?Feb 12, 2016AuthenticationWhy hasn’t biometric tech like fingerprints and facial recognition been widely adopted in card payments to reduce fraud and costs?Feb 7, 2016BiometricsI’ve used my credit card at stores like Target and Walgreens—what is the best way to ensure they remove my card number so it’s not exposed in a data breach?Jan 5, 2016Data SecurityIs data security a bank’s biggest cost center, and if not, what usually is?Oct 11, 2015Data SecurityIs two-factor authentication via OTP really making internet and mobile banking safer?Sep 11, 2015AuthenticationWhy is a one-time password (OTP) required for nearly all banking activities in India?Jun 5, 2015One-Time Passwords (OTP)Is the use of signatures for payment authentication becoming obsolete?Jun 1, 2015AuthenticationHow do ATM CCTV systems identify customers in places where women wear burqas that cover their faces?May 12, 2015BiometricsWhy do only certain websites require an extra 3-D Secure authentication step during online payments?May 7, 2015AuthenticationIs Mint.com secure to use, and why or why not?May 4, 2015CybersecurityIs it safe to send credit card details by email?Apr 5, 2015Data SecurityDo any banks conduct direct sales by phone, and if so, how do they verify an existing customer’s identity?Apr 1, 2015AuthenticationIs PCI compliance still required if a system uses tokenization?Mar 9, 2015Data SecurityWhy haven’t banks implemented fingerprint identity checks at point-of-sale terminals?Mar 2, 2015AuthenticationDoes PCI DSS specify any maximum acceptable network latency for card transactions?Feb 10, 2015Data SecurityWhy do banks ask “public records” verification questions when confirming identity?Feb 7, 2015AuthenticationWhy isn’t there a single universal secure authentication method to prove identity to banks and critical websites?Jan 4, 2015AuthenticationHow frequently do hackers attempt to access online bank accounts, and what is the average number of daily attempts per account?Oct 5, 2014CybersecurityBanking: Is transferring funds through an ATM vulnerable to hacking or security weaknesses?Jul 11, 2014CybersecurityWhy are U.S. banks so slow to roll out hardware security tokens (one-time code devices) for login authentication?Jul 5, 2014AuthenticationWhat security considerations should be included on your checklist before launching an Internet Payment Service Provider (IPSP)?Jun 6, 2014CybersecurityOnline Retail: How should a new website with no brand recognition address customer security concerns?Jun 6, 2014CybersecurityHow can a system protect against password guessing attacks, and how do banks stop repeated PIN guessing on stolen cards?Apr 8, 2014AuthenticationAre banks that offer online banking services required to use two-factor authentication?Dec 2, 2013AuthenticationWhat does it cost to implement a CAPTCHA solution on an e-commerce site?Sep 11, 2013CybersecurityOnline Payment Gateways and Processing: How easy or hard would it be to steal swiped data from Square or the new PayPal Here devices?Sep 3, 2013CybersecurityHow difficult would it be to skim card data from Square or PayPal Here devices?Sep 3, 2013Data SecurityHow can I build a two-factor authentication payment gateway that complies with RBI rules?Jul 12, 2013AuthenticationHow can web apps prevent fraudsters from abusing ACH to steal from compromised bank accounts?Jul 2, 2013CybersecurityWhere can I find an Address Verification System (AVS) service that only verifies addresses and does not process credit cards?Jun 2, 2013AuthenticationHow risky is online banking, and what measures can reduce those risks?May 4, 2013AuthenticationWhy don’t banks rely on fingerprints for customer identification instead of signatures or ID cards?May 2, 2013AuthenticationHow precisely can a person’s location be determined from blog comments?Apr 12, 2013CybersecurityHow can a non-financial startup achieve PCI compliance?Apr 11, 2013Data SecurityWhat are best practices for secure user authentication in online banking?Apr 3, 2013AuthenticationWhat are the key security risks of using PHP or other scripting languages for financial web apps compared to Java?Feb 7, 2013CybersecurityWhy did personal digital certificates fail to gain widespread adoption?Dec 12, 2012Digital IdentityCan someone study cryptography without a strong math or science background?Nov 8, 2012CryptographyWhat are the top SaaS products for security?Sep 10, 2012CybersecurityWhy did major Israeli banks restrict access from overseas connections?Feb 11, 2012CybersecurityWhy did major Israeli banks restrict or close access to overseas connections?Feb 11, 2012CybersecurityWhat is FedRAMP and why is it important?Dec 12, 2011CybersecurityWhat details are stored on a hotel key card’s magnetic stripe?Sep 7, 2011AuthenticationWhat’s the story of Kevin Mitnick’s hacking and cybersecurity career?Apr 8, 2011Hacking