RE: [PHP] RE:[PHP] Client Computer Registration
| From: | Kristen G. Thorson | Date: | Tue, 03 Oct 2006 20:27:40 +0000 |
| Subject: | RE: [PHP] RE:[PHP] Client Computer Registration | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-242586@lists.php.net to get a copy of this message | ||
> -----Original Message-----
> From: Richard Lynch [mailto:ceo@l-i-e.com]
> Sent: Tuesday, October 03, 2006 2:10 PM
> To: Wesley Acheson
> Cc: rjohari@nycap.rr.com; php-general@lists.php.net
> Subject: Re: [PHP] RE:[PHP] Client Computer Registration
>
> On Tue, October 3, 2006 2:33 am, Wesley Acheson wrote:
> > They could also be doing something like giving the client an SSH key
> > to download, I've heard of this situation in a bank before.
>
> Is the key tied to my hardware?
>
> At least that stops the virus/Trojan scenario.
>
> But not the petty thief who breaks in and takes my computer, and "oh
> look, now I have his bank account too! Sweet!!!"
>
> Puhleeze!
>
> Do you really want to bank with a place that does this?
The registration doesn't replace a login with a username/ID and
password.
https://www.key.com/html/obi_security.html
From what I understand, I'd be in no more trouble if someone stole my
computer today than if someone stole it after my bank implemented this
registration method. I'm still required to provide a correct
ID/password combination. I just can't login from an "unknown" computer
without providing additional information.
Or am I missing something?
kgt