Prof Anderson calls out the credit-card companies for the terrible (and terribly obvious) flaws in the 3DS system (“Verified by Visa”), and points out that it wouldn’t have been all too expensive to get it right. Via sybreon.
... beats /dev/random for entropy. This is a tumblelog of quotes, links, snippets, and occasionally a few paragraphs of my own. Your feedback is most welcome; please look for "Send a message" on my Google profile
January 26, 2010
Ross Anderson: How online card security fails →
7:14 pm
