Blog Detail
Identity and Authentication Management
http://www.delfigosecurity.com/iamblog/
Information security and the roles and challenges of identity and authentication solutions.
Recent Posts
New Generation Trojans Counter Token Based Temporary Passwords
A recent New York Times article once again draws attention to potentical vulnerabilities of token based temporary passwords. Saul Hansell describes in the article how hackers use new trojans to capture passwords in real time, thereby by-passing the s...
Cloud Security and Strong Authentication
I wholeheartedly agree with Fran Rosch's comment that the industry must move to stronger authentication technologies. There is no doubt in anyone's mind that simple User ID and Password (including strong passwords) offer very little to no secur...
RSA Survey on Budget, Cost and Strong Authentication
A recent RSA survey, Tight Budgets Harm IT Security, once again reaffirms that the biggest complaint IT security executives have is having less money to handle increasing threats. When Delfigo started out just over a year ago we knew from years ...
Twitter In The News Again
Twitter is in the news again - this time their internal documents stored on Google Apps that were hacked. Questions about cloud security and the feasibility of storing critical information in Web-based services are being raised in the wake of ...
Secret Questions Offer Weak Authentication
According to Technology Review Microsoft and Carnegie Mellon University will present new research at the IEEE Symposium on Security and Privacy to show once again that secret questions used for password backup authentication are easy t...
Virginia's Prescription Monitoring Database Hacked
Over the weekend, MarketWatch reported hackers broke into the State of Virginia's Prescription Monitoring Program (PMP) database and are demanding a $10 million ransom. The nature of this crime is mind-boggling but not a surprise considering the incr...

