REX.COM - Stolen Domain Name

[katherine]

What about a number generator/keycard? You know, the one which looks like a calculator, that you need to access your online banking? That would've been damn secure, as you simply couldn't access your registrar account without having that particular physical object.

This is what I use to access my main bank account:
http://trs.technion.ac.il/rsa-sid700.jpg

I am surprised the same stuff is not available with registrars

[domaingenius]

Given all these problems with scammers etc on this forum, why does
DNforum not verify all members rather than just let anyone in ?.
Wouldnt take much to arrange this surely.

DG

[havlock]

This is what I use to access my main bank account:
http://trs.technion.ac.il/rsa-sid700.jpg

I am surprised the same stuff is not available with registrars

I agree, I now have special sitekeys with all my bank accounts. It would be nice to see an added level of security with the registrars in a similar fashion. Also, like I said before, a tracking history with details when domains are transferred would also be very useful. Kind of like the banks do with your transaction history, I can see details and dates and names and such.

[Yusio]

This is what I use to access my main bank account:
http://trs.technion.ac.il/rsa-sid700.jpg

I am surprised the same stuff is not available with registrars

What exactly does that do?

[exxe]

This is what I use to access my main bank account:
http://trs.technion.ac.il/rsa-sid700.jpg

Yes, I have something like that too!

The device generates a code that is used when you login on your online banking website.

[jberryhill]

The entire model of:

Login ID:
Password:

as entry boxes on a single web page is dimwitted in today's environment. There is no functional difference between the two, since they are both entries on a single form.

One enlightened approach taken by some banks is a "dialog" approach. When you set up your account, you select a response that the bank is to provide to you between entering your username and password.

For example, you select the phrase "wonderful puppies".

When you log into your bank account, you first hit a page that asks for your username. You enter your username, and get a page back that says "wonderful puppies" and asks for your password.

Now, yes, there are other issues, but this would defeat the basic phishing model, since in order to enter your password you have to receive back some information that the operator of the phishing page wouldn't know.