[LINK] A security question

Paul Brooks pbrooks-link at layer10.com.au
Thu Dec 19 11:18:58 AEDT 2013


On 19/12/2013 8:33 AM, Tom Worthington wrote:
>
> These fobs do provide a high level of security, if they have not been 
> compromised.
>
> St George bank uses a lower cost approach, where their system sends a 
> code by SMS to the customer's phone, to verify the first high value 
> transfer to a new account. This has the added advantage that if the 
> customer did not initiate the transaction they would know something was 
> wring when they got an SMS from the bank.
Trouble with mobile phone/SMS is that it relies on the phone number, still being in
the correct hands.
There have been several articles about prepared thieves using mobile number
portability to move the target's number
to a device in their own hands - and then the SMS falls in the wrong hands as well.

P.



More information about the Link mailing list