我有这个故事由于新技术来防止财务身份盗窃。我想,也许我们应该从前端,而不是看身份盗窃总是从后面。想到来找我当我和一个朋友打电话。他不是行业,有很多的时间在他的手虽然他等待肺移植,所以他喜欢听我的故事。当我告诉他关于这个故事我只是提起网络世界的最新方法钓鱼者窃取我们的金融身份(运行5月1日),他问有个足球雷竞技app为什么这么容易激活一个新的账户在虚构的或别人的名字呢?“哦,我明白你的意思!就像我们有两个相同的业务工作,“我说,我抓起一个记事本,开始写东西。“在后端,我们得到了所有这些信息安全专家尾巴试图关闭漏洞。但在前端,我们有系统金融身份表露无遗。”For example, why, after all these years in not-present mediums, are the credit card issuers unable or unwilling to unequivocally vet new applicants to ensure they're issuing the card to a real person with a legitimate identity? Why, at the very least, is the application not tied to a customer phone number for verification? So now I'm looking at the bigger financial identity framework and I'm seeing all kinds of gaps. Let's start with the credit reporting agencies who are responsible for our credit ratings and yet they prevent us from getting the information we need to protect our ratings by not alerting us to new accounts opening under our identities. The reporting agencies have the system in place to do this. But they've made it so hard for consumers to order this service (and when they do, they can only get it for 90 days unless they can prove fraud). Why? Because they make much more money processing our financial identities in real-time than they would if they imposed wait times to get approvals. And another question: Why can you load stolen or fictitious financial data onto a mag strip of a credit card or a stored value card and turn it into cash? Easy to use hacking programs have been around for a couple years in which you can actually change the field data in the tracks on the tape itself. Yet mag strips continue to be vulnerable to this type of tampering. Then there's the cyber problem. Today, we've got millions of remote-controlled computers spewing financial data over criminal 'botnets' run by hacker "mules" turned to the dark side by organized crime. We've had more than ten years to make browsers safe from Trojan horse installations, which a hacker named Modify demonstrated to me in 1996, and which is how keystroke loggers get onto machines today. And we've had more than six years to stop the proliferation of remote-control malware, which SANS researchers discovered in October 1999 when they found executable code on thousands of computers that that later set off the denial of service attacks that took down Amazon, eBay and other secure online businesses. What this means to me is that our financial identity system is wrought with fraud and about to implode. Marcus Sachs, who directs cyber security research for Homeland Defense, says I'm too drastic in my thinking. But nevertheless, he's worried that what he calls today's stage of "cyber lawlessness" could, indeed, wreak havoc on society, particularly since our defenses are so far behind the criminals capabilities. Just how did we get to this point when we've had so many early warnings? This is the subject of a book I'm working on. I blame the rapid rush to new technologies designed to make our lives more "convenient." Although I couldn't live without the Internet for speedy research and communication with editors and sources, I wonder if we haven't shot ourselves in the foot for all this convenience. I've lived all this time without online banking. I only shop online at places I trust, and only using what I call a 'disposable' credit card – one with a small limit that can be replaced easily without any auto deductions that have to be rolled over to the new card. And banking from my phone? I'm even more reluctant to go that rout, particularly considering that European and Asian users are already getting Trojan horses on their cell phones to steal their financial identities. If you ask me, I'd say the hackers have had it right since the beginning. "Information is power," they'd tell me back in the mid 90's when I couldn't find any other sources who could tell me what was going on in cyberspace. They told me it was just a matter of time before anarchy and chaos ensued. And I think that we're now at the crux. Hang on. It's going to be a wild ride.
屁股向后
版权©2006 IDG通信公司。Raybet2