Re: Fringe: e-banking not yet secure

[Adam Shostack <adam () homeport org>]

On Fri, Jul 25, 2008 at 02:26:18AM +0000, security curmudgeon wrote:
| : Over 75% of banking Web sites contain fundamental design flaws that 
| : could put customers at risk from cyber thieves, according to a study (of 
| : 214 bank web sites)conducted by researchers at the University of 
| : Michigan.
| 
| Unfortunately, all I can find are articles mentioning the study. It still 
| isn't available on Atul Prakash's home page [1]. Since all we have to go 
| on right now are sound bytes and brief summaries, it is very easy to tear 
| large holes in the results. I encourage Prakash and his team to make the 
| original research more readily available.

http://cups.cs.cmu.edu/soups/2008/program.html
http://cups.cs.cmu.edu/soups/2008/proceedings/p117Falk.pdf

_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml