[ISN] Re: [Dataloss] Fringe: e-banking not yet secure

[InfoSec News]

Forwarded from: Adam Shostack <adam (at) homeport.org>

On Fri, Jul 25, 2008 at 02:26:18AM +0000, security curmudgeon wrote:
| : Over 75% of banking Web sites contain fundamental design flaws that 
| : could put customers at risk from cyber thieves, according to a study 
| : (of 214 bank web sites)conducted by researchers at the University of 
| : Michigan.
| 
| Unfortunately, all I can find are articles mentioning the study. It 
| still isn't available on Atul Prakash's home page [1]. Since all we 
| have to go on right now are sound bytes and brief summaries, it is 
| very easy to tear large holes in the results. I encourage Prakash and 
| his team to make the original research more readily available.

http://cups.cs.cmu.edu/soups/2008/program.html
http://cups.cs.cmu.edu/soups/2008/proceedings/p117Falk.pdf