RE: RSA Compromise

["Valin, Christian" <Christian.Valin () ncogroup com>]

I've heard of several responses to the exposure ranging from (all
hearsay):

1.  Asking token users to change from their six digit PIN to a eight
digit PIN  (not sure how much that will help)
2.  Keep your token serial number protected (theory is: if the wrong
person knows your s/n, they may compute what are the next digit digits
to display).
3.  If you are a large defense contractor, you've already replaced your
RSA solution with another vendor's solution just because of the recent
breach.

My company has joined the ranks of those who no longer employ RSA
tokens; we deployed a competitive product, offering what we believe is a
higher level of security and degree of user friendliness.  It saved us
money too!  We did a transition from RSA tokens to a competitor product
way before the recent news of the RSA breach.

Christian

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of navin1406 () yahoo com
Sent: Friday, April 01, 2011 3:49 PM
To: security-basics () securityfocus com
Subject: RSA Compromise

Hi Guys,

How serious does the RSA breach looks like and what proactive measures
should we take to mitigate exposure if any?

Thanks,

Navin
Sent on my BlackBerry(r) from Vodafone

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------