Category Archives: Security
An authentication family tree
How do we make best sense of the bewildering array of authenticators on the market?...
Card numbers are like nitroglycerine
Not before time, merchants are pushing back on the PCI-DSS regime, with a new law...
Technocrats’ happy snaps
Once again, technologists confuse being in public with giving up one’s right to privacy. Today’s...
Biometrics and false advertising
Use of the word “unique” in biometrics constitutes false advertising. There is little scientific basis...
CNP fraud keeps growing without limit
The Australian Payments Clearing Association (APCA) releases card fraud statistics every six months for the...
Other thoughts on Real Names
I’m going to follow my own advice and not accept the premise of Google’s and...
Remember that Digital Identity is a metaphor
The seminal Laws of Identity define a Digital Identity as a set of claims made...
I just don’t get Levels of Assurance
Updated August 17, 2022. IDAM practitioners and government authentication policy makers have settled on a...
Designing out identification uncertainty
A few of us have been debating Levels of Assurance on Twitter. It seems crucial...
NSTIC and banking don’t speak the same language
I first blogged about this over at Finextra in January, asking if banks and their...