NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home / News / Security / Security Fixes and Improvements

Security Fixes and Improvements


The Unhackable Bank Account

Bank of America came with the idea

By Alexandru Dumitru, Security News Editor

11th of September 2007, 12:23 GMT

Adjust text size:



Enlarge picture
Wow! Someone finally made malware-based bank hacking impossible! Not matter how skilled hackers may be, there is no way they can 'win' on this one. Now, a part
of the authentication process just got impossible to hack, thanks to Bank of America cyber-security experts. The bank site will generate a 6-digit code and send it to the customer's mobile phone, while the user will have to introduce the code in order to gain access to his bank account. Thing is, this sort of password expires a few minutes after it has been sent, so you have to use a different one each time you log in.

I cannot see any way this could be hacked. Suppose a hacker gets the user's data; but what's the use since he does not have that code? There is no way to do this using common malware. No Trojan can help you in this scheme, no keylogger, no nothing. Suppose you act really fast and steal the code, you can only get it after it has been introduced, and no smart web designer allows two simultaneous logins on the same account, especially when talking about a bank's site.

Sure, you can hack into this account if you're the Department of Defense and monitor calls and text messages, but I guess you're not... are you? This anti-phishing security measure is bound to take down online fraud. The not-so-good part about it is that it has just been created and it's new, so not everyone will benefit from it. It will be available for BofA customers in the US this week and to Californians later this month. I can hardly wait to see how they hack a bank account after everyone will have this module protecting them! Ha! In your face, hackers!

TAGS:

bank account | phishing | hackers | security
Read by 2,991 user(s) | Add comment | Link to this article TWEET THIS


Article rating:
Good (3.0/5) 8 vote(s)    

Subscribe to news | Print article | Send to friend

© Copyright 2001-2009 Softpedia
Contact:

 

 

SEARCH THE NEWS ARCHIVE :




Today's News
| Yesterday's News | News Archive


MORE RELATED ARTICLES:


Your Data Was Stolen? So What?

Indians on Top Again!

Bank Attacked by Hackers!

How to Hack a Bank Account

Russian Child-Porn Hosters Guilty For Bank of India Hack!

Phishing in Australia

User opinions:


Comment #1 by: Sam on 14 Nov 2008, 16:25 GMT reply to this comment

This can be hacked. A phone can be cloned to receive the message and an online interface spoofed.

Also there are not too many truly "random" number generators. Given enough sequential numbers the code generation method can be determined and broken.

It may have become harder but is in no way impossible.
I blog about issues like this: www.defyexpectations.com

Share your opinion:

Your Name:
Your Email Address:
(will not be used for commercial purposes)
Solve this to prove you're not a bot: =
Your review/opinion:

 




Windows tabGames tabDrivers tabMac tabLinux tabScripts tabMobile tabHandheld tabGadgets tabNews tab

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   ENTER NEWS SITE   |   ENGLISH BOARD   |   ROMANIAN FORUM