INFOWORLD GRIPE LINE BY ED FOSTER Bookmark this page

  
Display: Sort:
Insecurity Over More Security Questions | 22 comments (22 topical) | Post A Comment
No additional security[ Reply to This ] (none / 0) (#5)
by Fushigi on Mon May 07, 2007 at 11:35:13 AM PDT

Authentication is generally comprised of the following factors:

- Something you know (passwords, mother's maiden name, etc.)

- Something you are (biometrics like fingerprints or retina scans)

- Something you have (token devices and their like)

To be considered 'more secure' one must do multi-factor authentication; i.e. have a response from more than one factor. Multiple responses within a single factor do not appreciably add to security. As such, asking for the last 4 digits of your SSN, your mother's maiden name, or any other questions do little more than expand the company's personal profile database. They do not add security.

[ Reply to This ]



Insecurity Over More Security Questions | 22 comments (22 topical) | Post A Comment
Display: Sort:

Menu
· create account
· faq
· search

Login
Make a new account
Username:
Password:

 HOME  NEWS  COLUMNS  BLOGS  PODCASTS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS  IT EXEC-CONNECT   About Awards Contact Us 

Copyright © 2006, Reprints, Permissions, Licensing, IDG Network, Privacy Policy.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

 ComputerWorld :: LinuxWorld :: Network World :: CIO :: PC World :: Darwin :: CMO :: CSO
IT Careers :: JavaWorld :: Macworld :: Mac Central :: Playlist :: GamePro :: GameStar :: Gamerhelp
ITWorld Canada :: Computerwoche :: Techworld UK :: tecChannel :: IDG.se :: IDG.no :: IDG.pl

create account | faq | search