View Single Post
Bailey9999
Old 04-18-2008, 07:11 PM #3 (permalink)  

Join Date: Apr 2008
Posts: 2
Bailey9999
Quote:
Originally Posted by Fnord
How does a SecureID offer any additional protection against someone who has comprimised my machine?

Why don't you offer RSA tokens (or a similar product from any number of other vendors)?
If the Secure ID is set to be remembered on your computer, but your password isnt. It would help a bit against keyloggers. They would get your password, but wouldnt be able to login anywhere without the secure ID... which they couldnt obtain because it hasnt been typed. But I am not sure if they allow you to just set 1 to remember. And even if they did, it only helps against keyloggers, if they had a trojan they could easily obtain the secure ID with some simple API stuff.
Reply With Quote