There are too many ways for passwords to be compromised for people to trust this thin layer of protection. The Internet is now filled with technologies specifically designed to capture your password. “Phishing” sites that mimic familiar sites and keystroke loggers that track the information you type are now part of the landscape of the Internet.

People are becoming more aware that it’s not good enough to simply be very careful with the passwords that are used for important accounts or Web sites. Most people use the same or very similar passwords across many Web sites and therefore, when a password is captured, it can be used to access many things.

A recent survey found that 70 percent of IT professionals thought passwords were not secure. These same people admitted that one in five companies had already had a security breach that allowed private information to get into the wrong hands. The U.S. Federal Trade Commission claims that consumers lost more than $5 billion to identity theft in 2007 and businesses lost far more.

“Consumers need to become more aware of the danger of relying exclusively on passwords to protect their personal information; and Web sites need to provide simple and inexpensive ways for consumers to protect themselves,” says Evan Conway, chief identity officer of Positive Networks, a company that specializes in working with companies and Web sites to ensure that privacy and information is protected.

One approach, he explains, to having a more secure site is a concept called two-factor authentication. The idea is that prior to allowing someone access to an account, a Web site or application checks two separate things for identity verification.

“Not only does the consumer need to have the password, but must also have an additional method to prove their identity,” says Conway. Sites that use Positive Networks’ PhoneFactor (www.phonefactor.com) technology, will instantly ring either the customer’s mobile or landline phone when someone signs onto an application or Web site. The password is verified just like normal and then the user must answer an instant automatic phone call to gain access. It only takes seconds and generally comes at no cost to the consumer. In additional to preventing unauthorized access, it proactively notifies a consumer if there is a fraudulent attempt to gain access being made.

Other approaches require consumers to carry a special physical “token” with them that provides a constantly changing additional password to verify. While generally quite secure, this approach can be expensive and requires consumers to carry an extra device. Biometric technologies such as fingerprint readers and retinal scans are no longer science fiction and have been implemented in some cases. While adding appropriate security, they also bring a high cost and require additional devices to be available to make the verification.

While the risk of a breach is expensive for consumers and companies, bad publicity is also driving companies to make these improvements. Stories develop almost daily regarding issues of identity theft and privacy loss caused by failures of businesses to protect their customers. The Wall Street Journal reported on April 29, 2008, that a series of national medical organizations, including health plans and medical facilities, had privacy breaches. Beyond the cost issues associated with these breaches, the loss of trust can provide additional challenges and legal issues for these types of organizations.

What is clear is that it will take a combined effort to protect your identity and privacy. Technology providers continue to offer solutions that are much easier for consumers and businesses. Businesses and Web sites must implement solutions and actively promote them to their users.

In the end, consumers must protect themselves by choosing to do business with organizations that offer solutions that adequately protect their privacy. It is becoming increasingly clear that passwords no longer offer a protection that can be trusted by consumers.

To learn more about the PhoneFactor service offered by Positive Networks, visit www.phonefactor.com.

Courtesy of ARAcontent

Related posts:

1. 8 ways to protect you and your family online
2. MySpace – Beefing Up Security to Protect Teens
3. Quick Facts about Phishing and How to Avoid it in MySpace

The company’s website, MySpace.com, describes itself as “a place for friends.”  Anyone with access to a computer and to the Internet can join the web-based networking service free of charge.  Currently, it is most popular with friends who want to chat online; single people who are looking to meet other single people; people looking to enlarge their social network by meeting their friends’ friends; long-distance relatives who wish to stay in contact with their family members; business people who want to network with other business people; and anyone looking to reconnect with long-lost family or friends.  And, fraudsters looking for an in to someone’s personal information.

MySpace.com is known to media watchers as a social networking website.  Its success has made it the fourth most popular English-language website on the Internet and the third most popular website in the United States.  If that isn’t enough to assure you of its popularity, note that the 106 millionth MySpace.com account was opened this September and that the website reportedly opens upwards of 230,000 new memberships every day.

Phishing is a term used to describe attempts to steal personal information for identity theft via the Internet.  Phishing most commonly occurs via an email that seems to be from a trusted source—your bank, PayPal, MySpace—and attempts to get you to provide personal information, including bank or credit card account information.  It is also common to be phished from one safe website to another, where you are asked to provide personal information, which is then used by a hacker.

Phishing attacks at MySpace are becoming more and more common.  Indeed a phishing site that stole the login and credentials of many MySpace.com users was just recently discovered and removed.  Very often, these MySpace.com attacks are undetectable by users.  The current style of attacks starts when the MySpace.com user is sent an instant message to a link.  The link is from someone in their contact list, making it seem like a safe place to go, and asks them to follow the link to view photos.  Instead, users are taken to a false MySpace.com login page, which when logged into, also logs users into the real MySpace.com.  From here, hackers have access to the personal information that MySpace.com stores on its users, including their birthdays and addresses—all a hacker needs to open a fraudulent bank account.

So, how can you protect yourself from being the victim of phishing on MySpace.com?  Internet security expert, Ross Paul of Websense says, “The more information you give MySpace, the more at risk you would be if someone managed to get a hold of your login information.”  Provide as little information as possible via the Internet.  Also, be wary of any links you are sent via email and instant messenger.  Hold your cursor over the link and look at the URL of the website to which it will take you.  If it doesn’t look familiar, avoid visiting it.  It is always important to keep your anti-virus and firewall software current.

To help decrease the frequency of phishing occurring on MySpace.com, the company recently appointed a chief security officer and implemented a new monitoring system.

Related posts:

1. Quick Facts about Phishing and How to Avoid it in MySpace
2. Parental Guidance to Keep your Kids Protected on MySpace
3. Top Draws to MySpace.com that Keeps People Coming