And two years is too long to wait for a solution
By silicon.com
Published: 8 November 2005 16:35 GMT
It's great news that chip and PIN is stopping fraud on the high street, as shown by the latest figures.
But this means that fraudsters are finding the easy money they've been used to is getting much harder to find. So they are responding to this cut in 'wages' like anyone else - they're looking for a job that pays better.
And it seems they've decided that there is good money to be made by ripping off online retailers and banks instead. So the next obvious step is to beef up protection for those channels as well.
Here's where we hit a bit of a problem - experts reckon it could take 18 months to two years before the still-to-be-decided industry standard for two-factor authentication leads to the creation of products that can secure online transactions.
Which means at least another couple of years for thieves to continue getting rich through weak security.
In the UK banks have started to dabble with more secure approaches, such as the trial of an anti-phishing hardware device kicked off by Lloyds TSB last month.
In contrast, Bank of America is to give two-factor authentication tokens to 14.5 million customers in a bid to cut identity theft.
Of course it makes sense for UK banks to wait until we have a standard based on chip and PIN so that the same authentication technology (probably card readers) can be used by all the banks. But two years is too long to wait.
As it stands, customers may end up preferring a banking brand that can demonstrate it has higher security than its rivals.
So if one bank went out alone and made a show of beefing up protection for the end-user then we might see more urgency from the rest.
Oh sort it out, so easy to fix.
In bulk, a USB ...
Anonymous
The benefit of avoiding a two tier authentication ...
Joseph Short
Chip and PIN shifts fraud to online shops and banks
US bank gives two-factor authentication to millions of customers
Lloyds TSB tests anti-phishing hardware
Chip and PIN credited for £36m drop in card fraud
Leader: Careful with that customer data
Chip and PIN heads for cyberspace
BT plans passport checks to slash ID fraud
But you'll still need to keep an eye on your bin...
'Witness intimidation' hampering fraud convictions
Courts and legal system are ill-prepared for hearing technical cases...
Zombies are after your ID
Bot nets are increasingly looking to steal valuable personal information...
SurfControl rides the spyware wave
But warns time is running out for anybody favouring "buy" rather than "build" as an entry strategy...
Bloggers become spyware spreaders
Unwitting accomplices...
Stories from around the web...
Identity theft - the facts VNUNet.com
Got an identity crisis? Join the queue The Observer
White-Collar Crime: What's your identity? LegalWeek
Drop the jargon from privacy policies, says privacy chief Out-Law.com
ID 'neglect' harming consumers This is Money
Make your voice heard
silicon.com and the Bathwick Group have created an opportunity for business and IT executives to share their experience with each other and thus enhance their knowledge of the IT marketplace.
Join our research panel, and you'll be asked to participate in short surveys - and then will be privy to the answers of all your colleagues, as we send you tailored versions of the results.
Extras include complementary passes to silicon.com events and survey prizes such as iPods. Plus, there are the obvious networking opportunities with your fellow panellists.
For more about the Research Panel and how to join, click here
Copyright © 2008 CBS Interactive Limited. All rights reserved. Top of page