View Single Post
  #76   Report Post  
Posted to uk.d-i-y
%%[_2_] %%[_2_] is offline
external usenet poster
 
Posts: 566
Default O/T: internet security question (leaked details)



"Chris Green" wrote in message
...
Jethro_uk wrote:
If someone nicks your computer with the authenticator app then you go
to another computer and access the authenticator with your special
password to remove the stolen device from authenticator account.

Yes, but the original I was replying to says:-

"...remembered as safe and not require signing in subsequently."

which says to me that access from a particular computer (or smartphone
maybe) is automatic, without any sort of authentication.


But that can be revoked, or still subject to re-authentication in certain
circumstances.


Still not very secure IMHO, someone steals your laptop or smartphone
and, until you notice and do something about it, they have access to
whatever is automatically allowed because your laptop/smartphone is
'secure'.


Any sort of system that makes it 'easier' for you to use complex
security will make it less secure.


Thats wrong with reliable fingerprint and facial recognition.

Most obviously with payment at the checkout using a smartphone
where both are much easier to use than a pin or password and
are vastly more secure. No one can even watch you enter the
pin or password and steal it that way.

Payment using a smartphone is also vastly more secure
in the sense that even the merchant never gets anything
that can be used again after you have left the store either
and there is no risk of crooked employee or owner adding
a skimming mechanism to grab your card details either.

It's swings and roundabouts, a simple system may not be so
secure but one is much less likely to bypass it routinely.


See above.