[16651] in cryptography@c2.net mail archive
Re: Banks Test ID Device for Online Security
daemon@ATHENA.MIT.EDU (Joerg Schneider)
Thu Jan 6 19:48:34 2005
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Thu, 06 Jan 2005 11:57:30 +0100
From: Joerg Schneider <js@joergschneider.com>
To: Mads Rasmussen <mads@opencs.com.br>
Cc: Bill Stewart <bill.stewart@pobox.com>, cryptography@metzdowd.com
In-Reply-To: <41DC2724.809@opencs.com.br>
Mads Rasmussen wrote:
> Here in Brazil it's common to ask for a new pin for every transaction
Same here in Germany. The banks send you paper lists with TANs=20
(transaction numbers, e.g. 100 per list), which you to enter in addition =
to your PIN. For each transaction you need a new TAN.
Unfortunately that does not prevent MITM phishing (see separate post=20
"Re: AOL Help : About AOL=AE PassCode"
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
