@_Nat Zone Identity, Privacy, and Music

Archive

tag: passkeys

identity

Public comments have been submitted to the Financial Services Agency regarding the partial revision (draft) of the "Comprehensive Supervision Guidelines for Financial Instruments Business Operators, etc."

The following public comments have been submitted by the U.S. OpenID Foundation to the proposed amendments to the "Comprehensive Supervisory Guidelines for Financial Instruments Business Operators, etc." (← so-called measures against securities fraud). Since the U.S. OpenID Foundation's website is in English only, there is no appropriate place to post the Japanese version, so we are posting it here. Comprehensive Supervisory Guidelines for Financial Instruments Business Operators, etc. (Comparison Table of Old and New Versions)…

identity OpenID Public policy

identity

The Japanese Financial Services Agency amends supervisory guidelines. Phishing-resistant authentication methods will become mandatory. It is not biometric authentication as some media say, however! Public comments are open until August 8th.

On the 15th, the Financial Services Agency (FSA) began soliciting public comments on a proposed amendment to the "Comprehensive Supervisory Guidelines for Financial Instruments Business Operators, etc." The deadline for submissions is August 18th (Monday) at 17:00 PM (must be received by this time). This matter concerns unauthorized access and fraudulent transactions (third-party) in internet trading services using customer information (login IDs, passwords, etc.) stolen through phishing sites impersonating securities company websites.

identity Security 1 comments

identity

The threat of real-time phishing that cannot be prevented by one-time passwords - The true nature of phishing resistance using passkeys

In recent years, phishing attacks targeting financial institutions and other organizations have become increasingly sophisticated, with a technique known as "real-time phishing" posing a particularly serious threat. This type of attack is known to even disable one-time passwords (OTPs), which were previously considered effective countermeasures against phishing attacks, forcing financial institutions to fundamentally redesign their identity verification systems.

identity Security 1 comments

OAuth

[Announcement] Is that QR code safe? ~ Threats and countermeasures lurking in cross-device authentication and authorization flows [YouTube Live]

On August 22nd (Thursday) at 8 PM, we will be hosting a YouTube Live broadcast titled "Is That QR Code Secure? ~ Threats and Countermeasures Lurking in Cross-Device Authentication and Authorization Flows," featuring @ritou, also known as Akita no Neko (Akita Cat). We're increasingly using QR codes to log in, but are they truly secure? There are many pitfalls in authentication and authorization across multiple devices…

OAuth OpenID

Events

Detailed notes on passkeys and ID federation – OpenID Summit 2024

This is a summary of @ritou's presentation at OpenID Summit 2024 (January 19, 2024). Summary: This document outlines the relationship between passkeys and identity federation, their respective characteristics, mutual complementarity, and related specifications, based on Mr. Ito's presentation materials at OpenID Summit Tokyo 2024. In particular, it discusses the benefits of introducing passkeys in identity federation…

Events OpenID