How does BioPassword compare to hardware tokens in preventing phishing attacks?
Both BioPassword and hardware tokens offer increased, but not perfect protection against phishing attacks. While BioPassword prevents phishing attacks, we recognize that it may be possible to craft a phishing site specific to BioPassword to capture keystroke timings. Similarly, targeted phishing sites can be crafted to circumvent other authentication solutions such as hardware tokens. One-Time-Passwords (OTP) raise the degree of difficulty, but the configurable time-to-live of the OTP can be collected and has been successfully replayed by attackers to gain “real-time” unauthorized access.
