discussion Hackers Steal Session Cookies to Bypass Multi-factor Authentication

[sswilson]

I am not a fond of IoT (the internet of things and let's get everything connected to the public internet), I am however a strong supporter and an advocate for strong authentication.

Security now is not the same security 20 years ago. It wasn't taken as serious as it is today. Understanding why (digital asset) security is such a hot topic today and why users need to also evolve with it is crucially important.

Here is how Banks are protecting themselves by removing liability from online transactions:

https://www.cbc.ca/news/business/online-banking-agreements-1.5453192

Although I do agree convenience and security need to strike the right balance, (home) users need to adapt accordingly and a I think a government sponsored education program needs to be stood up to improve computer and security literacy.

Just my two-cents here, I'd love to see more fundamental to be provided even in public schools - digital persona, digital foot print and how to be a good digital citizen.

I think it's high time the federal government got involved in issuing some kind of secure digital ID. Yes the bureaucracy would/will turn it into a CF, but only the feds could administer a global ID. (And yeah.... I'm aware of how horrifying that kind of thing would be to the "they're gonna put a monitoring chip into us" crowd. ).

 

[Lysrin]

I think it's high time the federal government got involved in issuing some kind of secure digital ID. Yes the bureaucracy would/will turn it into a CF, but only the feds could administer a global ID. (And yeah.... I'm aware of how horrifying that kind of thing would be to the "they're gonna put a monitoring chip into us" crowd. ).

All part of the grand plan man...

But given how things are going, it isn't hard to see how something like this would become the sensible solution to many.