Students crack Microsoft CardSpace

[praka123]

Students at the Ruhr University of Bochum, Germany, say they have found a way to steal security tokens in Microsoft's new CardSpace authentication framework. Attackers can apparently get access to protected, encrypted user data – such as passwords, credit card numbers, and delivery addresses – when they are transmitted. CardSpace (formerly InfoCard) is the successor to Passport. In both architectures, users' personal data are stored locally on the user's system. Depending on the web site, users can decide which data they want to transmit. CardSpace is designed to make classic passwords a thing of the past, by replacing them with digital certificates that may be self-signed or signed by an authoritative CA such as Verisign.

complete news:



http://www.heise.de/english/newsticker/news/108731

[Cyrus_the_virus]

I wonder why fanboys don't reply to such "News on your face" kind of stuff and waste endless hours arguing about other posts about how dumb and stupid the author is