Archive

Posts Tagged ‘credentials’

The future is selector-based

May 19th, 2009

Yesterday was my first of three days at the identity Commons’ Internet Identity Workshop. I posted about this workshop earlier, and how I was excited to be attending. Now that I’m here, the conversations and technology are more fascinating, and the people way more engaging than I indicated in my earlier post. You can get a remote taste of the conversations by checking the twitter stream while its available.

card selectorOne of the sessions I attended was about the Information Card and various selector software. I’ll be looking at these in a future post. For now, think of information cards as the digital equivalent to the membership, identity (e.g., driver’s license, health care card, etc.) and credit cards in your wallet. Think of the selector software as your digital wallet, but with some smarts to suggest cards that have the appropriate credentials.

Coaching moment: You have a wallet, and likely there are many cards inside. The idea is that a digital wallet is portable, and pictures of various cards might work easily for people that don’t want to know any more about identity than which card is the right one to use. We do that every day anyway. What if that were easier, and more secure? Might you be interested in this?

future, records, tools , , , , , , , , , ,

Latest phishing scam “most devious ever” (2004)

March 4th, 2004

Heard from your bank lately? The mail really, really looks like it’s from the bank. But do you think for one moment that the bank will feel responsible if you click on the scam email and confirm your bank details, then loose all of your funds to an outside trickster?

Typically, phishing scam e-mails appear to have been sent from the victim’s bank, and contain a link to a fake version of the bank’s Web site and instructions to log on to the site to verify their credentials with the bank.

Rob Forsyth, managing director at anti-virus vendor Sophos, believes that the techniques used by online confidence tricksters in the latest Westpac e-mail indicate the scheme is reaching new heights of sophistication.

According to Sophos the scammers have become better impostors, incorporating phrasing and wording into the email that the bank’s customers would be familiar with from previous authentic advisories it had issued such as: ‘Westpac will never ask for your personal or login details by e-mail’ — even though it then proceeds to direct the reader to do just that.

Coaching moment: Trust is also part of your identity. Do not hurry into trust. If you don’t know if an email or phone call is really from your bank, call your bank and ask. Tricksters will not leave their real email address or phone number so you can get back to them later.

history , , , , , , ,

Switch to our mobile site