Talk:RSA SecurID

message: The article says:
If the second session is established shortly after the initial session, the one-time password will still be valid when the attacker presents it to the server, thus the authentication will succeed.
This, in my experience, isn't true.  Tokens are only usable one time, after which the token code is marked as used in the ACE/Server's database.  
Honestly, the whole criticism section could use sources, because I think much of it is incorrect or outdated.  Leebert 21:27, 26 June 2007 (UTC)
replies: text: We could criticize Medeco as thieves could smash a window and climb in. But we know that a key can't stop that. We can criticize RSA for not mentioning it often enough, though. Gah4 (talk) 04:22, 25 April 2023 (UTC)
thread_title: Criticism section

message: There's documentation on support for a duress PIN at the following link:
http://www.process.com/tcpip/tcpware57docs/User_Guide/ch14.htm#E53E27  —Preceding unsigned comment added by 208.92.44.113 (talk) 20:54, 18 November 2009 (UTC)
thread_title: Duress PIN

message: :In overview - "25 million devices have been produced to date"
:In "March 2011 system compromise" - "On June 6, RSA has admitted that all 40M tokens need to be replaced"
Is the first statement out of date, or is it based solely upon "base" devices (not 3-year replacement)? - Tenebris 21:35, 7 June 2011 (UTC)
thread_title: Contradiction

message: The RSA SecurID authentication mechanism consists of a "token"—a piece of hardware (e.g. a token or USB) or software (e.g. a "soft token" for a computer, PDA or cell phone)—assigned to a computer user that generates an authentication code at fixed intervals (usually 30 or 60 seconds) using a built-in clock and the card's factory-encoded random key (known as the "seed" and often provided as an ASCII file). The seed is different for each token, and is loaded into the corresponding RSA SecurID server (RSA Authentication Manager, formerly ACE/Server) as the tokens are purchased. The seed is typically 128 bits long. Some RSA SecurID deployments may use varied second rotations, such as 30-second increments.[citation needed] 
"It consists of a token - a piece of hardware EG a token." What help is that?
"It consists of a token - a piece of hardware EG USB." Whatever a SecurID is, it isn't a universal serial bus (though it may use such as part of connecting it to a computer.)
"It consists of a token  - software EG a soft token." What help is that?
"Some RSA SecurID deployments may use varied second rotations, such as 30-second increments." What is a varied second rotation. what is a 30-second increment - We've already said it does its thing every 30 or 60 seconds, so what does this mean.
That entire paragraph needs rewriting by someone who knows whata SecurID is./ -- SGBailey (talk) 13:04, 8 June 2011 (UTC)
thread_title: First para of Overview

message: The overview says 25M, the report about the weakness says 40M. Surely one is wrong. -- SGBailey (talk) 13:10, 8 June 2011 (UTC)
thread_title: Quantity of devices

message: In the "Theoretical Vulnerabilities" section it says: Risk-based analytics (RBA), a new feature in the latest version (8.0) provide significant protection against this type of attack.  I can find no reference to that technology anywhere on wikipedia or on the internet.  — Preceding unsigned comment added by 38.105.216.129 (talk) 18:29, 11 June 2014 (UTC)
thread_title: What is Risk-Based Analytics (RBA)

message: Hello fellow Wikipedians,
I have just added archive links to  on RSA SecurID. Please take a moment to review my edit. If necessary, add  after the link to keep me from modifying it. Alternatively, you can add  to keep me off the page altogether. I made the following changes:
*Added archive https://web.archive.org/20081113005859/http://www.rsa.com/products/securid/datasheets/9651_SID800_DS_0908-lowres.pdf to http://www.rsa.com/products/securid/datasheets/9651_SID800_DS_0908-lowres.pdf
When you have finished reviewing my changes, please set the checked parameter below to true to let others know.
Cheers. —cyberbot IITalk to my owner:Online 00:26, 18 October 2015 (UTC)
thread_title:  External links modified 

message: The following Wikimedia Commons file used on this page has been nominated for speedy deletion:
* 
You can see the reason for deletion at the file description page linked above. —Community Tech bot (talk) 03:52, 13 January 2019 (UTC)
thread_title:  A Commons file used on this page has been nominated for speedy deletion