Archive
As I announced on X (I often don't have time to write blog posts, so I'd appreciate it if you could follow me on X as well), today is the 12th FIDO Tokyo Seminar ~Toward a Password-Free World~. The conference program (see below) will focus on ~Phishing Countermeasures and the Latest Trends Using "Passkeys"~. I will be appearing on the closing panel…
The OpenID Foundation, which sets international standards for digital identity, has announced the launch of a new authentication service in the second quarter of 2026! This groundbreaking service will strengthen collaboration with regulatory bodies and accreditation testing organizations, building upon the existing self-authentication service (which already boasts over 4,000 successful cases). Key features of the service include: Global regulatory compliance and enhanced market competition: compliance with national and regional regulations…
The following public comments have been submitted by the U.S. OpenID Foundation to the proposed amendments to the "Comprehensive Supervisory Guidelines for Financial Instruments Business Operators, etc." (← so-called measures against securities fraud). Since the U.S. OpenID Foundation's website is in English only, there is no appropriate place to post the Japanese version, so we are posting it here. Comprehensive Supervisory Guidelines for Financial Instruments Business Operators, etc. (Comparison Table of Old and New Versions)…
Update: Public comments are being accepted from August 4th to 27th. If you have any opinions, please submit them at https://www.soumu.go.jp/menu_news/s-news/01iicp01_02000126.html. Submission forms and other information can be found on this e-gov page. Today, July 23rd, 2025 (Wednesday), from 15:00 to 17:00, the Ministry of Internal Affairs and Communications held a meeting on "Realizing a Safe and Secure Metaverse…"
On the 15th, the Financial Services Agency (FSA) began soliciting public comments on a proposed amendment to the "Comprehensive Supervisory Guidelines for Financial Instruments Business Operators, etc." The deadline for submissions is August 18th (Monday) at 17:00 PM (must be received by this time). This matter concerns unauthorized access and fraudulent transactions (third-party) in internet trading services using customer information (login IDs, passwords, etc.) stolen through phishing sites impersonating securities company websites.
In recent years, phishing attacks targeting financial institutions and other organizations have become increasingly sophisticated, with a technique known as "real-time phishing" posing a particularly serious threat. This type of attack is known to even disable one-time passwords (OTPs), which were previously considered effective countermeasures against phishing attacks, forcing financial institutions to fundamentally redesign their identity verification systems.
On August 22nd (Thursday) at 8 PM, we will be hosting a YouTube Live broadcast titled "Is That QR Code Secure? ~ Threats and Countermeasures Lurking in Cross-Device Authentication and Authorization Flows," featuring @ritou, also known as Akita no Neko (Akita Cat). We're increasingly using QR codes to log in, but are they truly secure? There are many pitfalls in authentication and authorization across multiple devices…
[Taipei, February 6] The 2023 FIDO Taipei Seminar began with a speech by Digital Minister Audrey Tang. It was an impressively comprehensive and insightful speech. I'm actually scheduled to appear on today's closing panel. Panel: Global Perspectives on Passwordless Au…
In just 10 days, I will be appearing at Identity Week Asia in Singapore. UPDATE (8/31): Not only will I be a panelist, but I will also be moderating the entire track. Identity Week Asia 2022 Day 1 (2022-09-06) @ 11:20 Panel: Future of i…
On Thursday, September 15, 2022, from 2:00 PM to 3:30 PM, the Bank of Japan's Payment and Settlement Systems Department will host the "ISO Panel (6th): Online Identity Verification (eKYC) – Overview and Potential Applications of the New International Standard ISO 5158 –". The main theme will be the new international standard, guidelines for customer identification in mobile financial services…
