DOES YOUR WEBSITE HAVE A LOG IN ?

Well - you’re probably thinking - this is going to make a fun read !!  

Does my website have a log in ??  Well damn right it does ( you’re saying to yourself) – we can’t just let any old passer by onto our site!!

I mean look at all these big cheeses being hacked like RSA , SONY and even the CIA !!

But if users have to log in - that means they need to register and they need to remember yet another user name and possibly -  but not necessarily - another password.    Well - that means that customers desert in droves !  Or does it?

Are customers put off when they have to log in ?  Well I guess a lot has to do with whether the service you offer is valuable enough.   Lets see – Twitter, Facebook and Gmail just to name a few at random – you would expect to see some kind of ‘identification ‘ process going on.  And indeed you do.  And now to make it all that much easier – SSO (Single Sign On) ,  OpenID and now BrowserID courtesy of Mozilla ( amongst others ) make our lives much easier when accessing these services.   (http://www.hexus.net/content/item.php?item=31189)

Does your service justify such a feature.?   Do you hold personal data,  do you transact,  is yours a mobile app that is personalized ( eg Groupon/Living Social)

More and more websites, corporate applications, mobile applications and cloud applications require that users log in and identity themselves;  and if you are one of them  you should be thinking of all the ways you can to make it as easy as possible. Here’s why .   (http://www.netwitsthinktank.com/internet/nonprofit-engagement-why-website-logins-matter.htm)

Going forward I believe that users will actually demand that websites provide more in the way of security.   When we leave our personal credentials on websites like Amazon and Apple we expect that the information is kept secure. However recent experience with the likes of SONY and Epsilon have shown that hackers have found these defences to be woefully inadequate.  And now our information is easy game and identity theft is rampant. 

Live Ensure is a security solution that wraps around any form of log-in whether protected with an additional authentication layer or not and provides ‘ Swiss Vault ‘ security against identity theft.   Why not check it out – it may just save your business.  I am sure SONY wished they had !  ( http://www.liveensure.com ) 

Comments

  1. EddyCormon22 September 2011 at 10:56

    Does your web service provider has an HSM ?
    If not: then stay away or you will be hacked one day.

    ReplyDelete

Post a Comment

Popular posts from this blog

The End of Passwords

Finally it seems … the penny has dropped.   Passwords are a poor substitute for real online security.   There is more and more ‘chatter’ about it.    Robin Henry writing in the Sunday Times on New Years Day talks of the end of ‘password hell’ invoking solutions in the pipeline from the Web Gods – Apple and Google.  The talk is of new biometric solutions such as facial and hand movement recognition.  Even IBM is talking this way.  ( http://www.forbes.com/sites/thestreet/2011/12/20/ibms-tech-predictions-for-the-next-5-years/ )  I agree with the notion that passwords are a dying breed but not that biometrics will become vogue.   They are fraught with problems of their own such as reliability, accuracy and the need for referencing of data-bases ( fail !) .    Why are passwords defunct?   Basically they are difficult to remember and they are easy to steal.    The solutions needed are those that require no cognitive load for the user ( the most unreliable participant in this enterprise
Read more

WIKILEAKS - the fuss?

Why all the fuss ? Why the ‘outrage’ at this ‘threat to national security’ ?   Are we really worried that nuclear war is going to break out because of these ‘dirty’ secrets getting out.  As if the North Koreans are going to up the ante any more than their mock charge of last week because of the abuse and scorn heaped upon them by US Diplomats.  ? !    Come on. To me the irony of this bluster is that it is (largely) from the right wing establishment in the US - calling it treason!     Any party that parades a half wit like Palin as a presidential hopeful hardly holds any moral high ground when it comes to protecting the USA.   Her appointment as the ‘leader of the free World’ will be enough to send any level headed American ( let alone any one of their Allies ) into a panicky tailspin at the thought of what she may stumble into ( by accident or design) . So how did these documents get out there?   Poor security.  Plain and simple.   If the US is so worried about this incident su
Read more

SPOOKS - CYBER ATTACK

Well I’ll be damned – if the subject of my last blog wasn’t the central theme to last nights episode of Spooks – CYBERWAR.    (To those who live outside the UK – Spooks is a very popular TV series about the goings on of a key team inside MI5 who spend their time thwarting terrorist attacks on the UK – while engaging in risqué amorous trysts on the side ).   And so last night we had the Russians and the Chinese –(working together !!) – ganging up on MI5 by infiltrating ( hacking ) their ‘secure’ internal network.     Whether the events portrayed were within the bounds of possibility or credibility who knows?     But if teenagers can break into the Pentagon – then I am sure that Russian/Chinese expert hackers can probably do something along the lines of infiltrating a UK Govt ‘Spooks’ departments network.      Either way it constituted an attack on British soil by foreign ‘combatants’ – which ( if it were true ) would have been a first since the Normans in 1066.   So we saw how vulner
Read more