Identity, Security, Payments, Biometrics, Smart Cards and Authentication News

Despite growing concerns, passwords still most prevalent security

Monday, February 2, 2009

In his talk at Wharton’s Information Security Best Practices Conference, Cem Paya, a member of Google’s security team, said that despite all the data telling us that passwords are well past their prime due to them being overly complex to meet even the most basic security needs, they still don’t seem to be going away as the security standard, according to a ZD Net article.


Paya later went on to pinpoint some specific issues keeping passwords where they are and keeping modern replacements like biometrics from usurping the security throne. Among the reasons he specified are the lack of a business model for issuing IDs to consumers, requiring new technologies can risk losing customers and lead to lower customer satisfaction and service providers don’t like depending on third party providers for security. Paya didn’t offer any ideas as to the expiration date on passwords.

Read the full story here [end] 

The Defense Advanced Research Projects Agency (DARPA) is recommending the elimination of password usage in favor of biometrical recognition, reports Government Computer News.

DARPA said on its Active Authentication site that complex passwords are too cumbersome to create, remember and manage, nor do active sessions have the capability to recognize whether the current user is the one who was originally authenticated.

read more »

Authentication and access provider DigitalPersona released the results of a survey that found more than half of retailers rely on passwords for point-of-sale system login in, even though they also have great concerns over passwords being shared and misused.

read more »

DigitalPersona announced it has deployed biometric solutions to help manage the security of protected health information to better comply with industry regulations at Saratoga Hospital.

read more »

DigitalPersona released a new version of its Pro Enterprise authentication device. It now contains the ability to support a number of new authentication credentials, enabling organizations to mix and match the ways in which employees securely identify themselves to Microsoft Windows and other applications.

read more »

Lieberman Software launched a product called Enterprise Random Password Manager (ERPM) that protects companies against malicious attacks on default credentials and enables IT staff to gain knowledge and control in securing privileged accounts against these attacks.

read more »

Consumers aren’t adopting mobile transactions as quickly as originally thought, in part due to security and fraud concerns, says Forbes. The mobile commerce market is in trouble unless consumers trust that mobile applications and devices are secure.

read more »