News for hackers. Stuff that matters.
Re:Dropbox employee’s password reuse led to theft of 60M+ us... by lmm on Wednesday August 31, 2016 @05:29AM (#12397083)
That should be soluble though. E.g. standardized smartcards that cellphones and terminals know how to communicate with.
Re:Dropbox employee’s password reuse led to theft of 60M+ us... by varjag on Wednesday August 31, 2016 @06:59AM (#12397364)
In theory yes, although with caveats. You'd need to match the degree of anti-tamper measures currently present in POS terminals to all consumer devices.

In practice, it would mean replacing most of the world's user-facing computer infrastructure.

Re:Dropbox employee’s password reuse led to theft of 60M+ us... by Kadin on Wednesday August 31, 2016 @07:14AM (#12397420)
You can get computers with smartcard readers from virtually every major manufacturer (except Apple, because Apple). The most frequent use case is government users who need to support the DOD Common Access Card (CAC) standard.

The card reader doesn't have to be any more tamper-resistant than the rest of the computer. On a public terminal, it should probably be built like an ATM's card slot (and the rest of the machine should be similarly armored), but on a personal computer it doesn't need to be any more robust than the keyboard a user would otherwise type passwords in with. The card-computer communication is all encrypted anyway, so even if it's built like any old USB peripheral it's still better than typing into a keyboard.