[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: FV Demonstrates Fatal Flaw in Software Encryption of Credit Cards

To: Weld Pond <[email protected]>
Subject: Re: FV Demonstrates Fatal Flaw in Software Encryption of Credit Cards
From: Jeff Weinstein <[email protected]>
Date: Tue, 30 Jan 1996 00:03:31 -0800
Cc: [email protected]
Organization: Netscape Communications Corporation
References: <Pine.BSD/[email protected]>
Sender: [email protected]

Weld Pond wrote:
> Programs needing secure entry create a "secure entry field" which is
> really just an imagemap with the digits (and alphas if required) placed
> randomly about.  The user then uses the mouse to click on these numerals.
> Ideally the graphics that represent the numerals would be drawn from a
> random pool and are misformed to thwart any OCR attempts. The graphics
> could be made even more difficult to OCR by mixing in words and pictures
> to represent the numbers.

  The web page could be implemented with javascript, which could collect
the keyclicks without any round trips to the server, and just send the
encrypted credit card number.

	--Jeff

-- 
Jeff Weinstein - Electronic Munitions Specialist
Netscape Communication Corporation
[email protected] - http://home.netscape.com/people/jsw
Any opinions expressed above are mine.

References:
- Re: FV Demonstrates Fatal Flaw in Software Encryption of Credit Cards
  - From: Weld Pond <[email protected]>

Prev by Date: Sad state of affairs
Next by Date: Re: Opinion piece in NYT; responses needed
Prev by thread: Re: FV Demonstrates Fatal Flaw in Software Encryption of Credit Cards
Next by thread: Re: FV Demonstrates Fatal Flaw in Software Encryption of Credit Cards
Index(es):
- Date
- Thread