Disclaimer: The opinions of the columnists are their own and not necessarily those of their employer.
Kenneth F. Belva

Adventures in Information Security: Las Vegas and Two-Factor Authentication

I spent this weekend in Vegas before driving to California to present at the 12th Annual Financial Services Technology Forum in Pasadena.

While crossing the Mojave desert, I stopped into a fast food restaurant on my drive between Vegas and Pasadena.

Over the weekend I noticed that when I paid by credit card in Vegas, a request for my license almost always followed. This continued at the Mojave restaurant.

The cashier who asked for my license face glowed; he never saw a New York State (NYS) license before. He then commented to his co-worker how easy it would be to create a forgery. (Perhaps he was boasting.)

This exchange led me to some interesting thoughts on why having on authentication via a license.

1. One cannot authenticate properly if one does not know what to look for. A NYS ID would pass more checks because most individuals in Nevada do not know the protection mechanisms embedded in the ID. Fraud is easier to commit.

2. Why isn’t two factor authentication via one’s license universal across the US? This check does not occur frequently in NYS. One suggestion came from my friend who works in retail. He said that vendors are still paid whether or not the transaction is fraudulent. Perhaps it’s the case the the vendor will not be paid in Nevada if they pass a fraudulent transaction.

Post a Comment

Your email is never published nor shared. Required fields are marked *

*
*