RSA SecurID tokens compromised

[Martini]

FYI to all you who use SecurID tokens to help protect your online accounts, those tokens are much less secure now. http://www.bbc.co.uk/news/technology-13681566 The chatter on the web implies that the targets are defense contractors but anyone's account could be at risk so they are replacing millions of them. Your account should still be safe as long as you are using a strong password because the token should only be used as an *additional* layer of security, not a replacement for a strong password. Still, you should be aware that your account is more vulnerable than it was a few months ago.

[holdemholmes]

I supported these things for 2 years when I worked at Verizon; they are a royal pain when they start having issues, but definitely seemed very secure. Kind of seems silly when the end result is still not being able to access the account if it also has a password set on it though.

[jerrylane]

RSA is offering to replace SecurID tokens for customers concerned with corporate networks and protecting intellectual all 40 million token users. The company will also offer risk-assessment software which monitors for unusual patterns of user behavior.