| |
| | TriCipher, Inc. Announces Its New Authentication Solution Protects Against Man in the Middle Phishing Attacks |
 | | In addition, recent research from Infidel, Inc., demonstrates that all one-time password systems, such as time synchronous tokens, can be easily compromised by man in the middle phishing attacks -- which require very little technical sophistication on the part of the phisher. |
 | | SSL was designed to prevent man in the middle attacks and doesn't require the user to reveal the credential -- only to prove that she has it. |
 | | In such attacks, users are lured to a phishing site by an email or DNS caching hack, where they enter their username, password, and the number from a one-time password token. |
| www.prnewswire.com /cgi-bin/stories.pl?ACCT=104&STORY=/www/story/03-22-2005/0003239081&EDATE= (704 words) |
|