Why Technology Won't Prevent Identity Theft

In addition to his own blog, Bruce Schneier also writes for outfits like The Wall Street Journal. In this opinion piece, here is what he had to say about balancing security with ease of use:
Security is a trade-off, and any well-designed authentication system balances security with ease of use, customer acceptance, cost, and so on. More authentication isn't always better. Banks make this trade-off when they don't bother authenticating signatures on checks under amounts like $25,000; it's cheaper to deal with fraud after the fact. Web sites make this trade-off when they use simple passwords instead of something more secure, and merchants make this trade-off when they don't bother verifying your signature against your credit card.
Src: Why Technology Won't Prevent Identity Theft - WSJ.com

No comments: