Full Tilt - Pin vs. Security Key....

Divebitch

Divebitch

Miss you, Buckster,,,,,
Silver Level
Joined
Apr 30, 2008
Total posts
3,130
Awards
1
Chips
1
Can anyone explain the difference? I already use the PIN. Is the PIN by itself subject to hacking/keylogging in a public or unsecured network? Their FT store explains what the security key does, with the 6 digit code changing every 30 seconds, and the benefit there is obvious. But it doesn't explain if I am safe with a PIN if I am absolutely sure no one is looking over my shoulder at the cards I clicked (not typed) in. If my PIN cannot be keylogged, then that is enough for me. Thanks.
 
Pascal-lf

Pascal-lf

Legend
Silver Level
Joined
Feb 26, 2010
Total posts
3,161
Awards
1
Chips
1
Pin never changes, security key does.

Therefore, if someone hacks your PC and records all the motions of your mouse and correlates it to your screen, they can figure out your PIN, whereas this is not possible with a security key.

TBH, a pin is more than enough unless you have exceptionally large amounts of cash in your account, and even then it's probably enough unless a good hacker decides they want to target you specifically :)
 
Divebitch

Divebitch

Miss you, Buckster,,,,,
Silver Level
Joined
Apr 30, 2008
Total posts
3,130
Awards
1
Chips
1
Pin never changes, security key does.

Therefore, if someone hacks your PC and records all the motions of your mouse and correlates it to your screen, they can figure out your PIN, whereas this is not possible with a security key.

TBH, a pin is more than enough unless you have exceptionally large amounts of cash in your account, and even then it's probably enough unless a good hacker decides they want to target you specifically :)

You probably don't use a PIN, or you'd notice that the cards change position everytime you log in. So not only may the lines of 'suits' be on different rows, but the numbers change position. For example, one day a line of clubs starts 5 thru 4 on line 1, next day it's J thru 10 on line 3. So unless the specific cards can be keylogged, it would be safe. I've no concern whatsoever for the safety of info in my home, no college roommate or kids that might hack in. My only concern is logging in from an insecure network - that if I'm 100% sure no one can see the 3 cards I click on for a PIN, is this safe from a hacking keylogger. Thanks for the help.
 
WVHillbilly

WVHillbilly

Legend
Silver Level
Joined
Nov 7, 2007
Total posts
22,973
Chips
0
Honestly the PIN should be enough. That said I have the security key and the cost in FTPs or IM points is really quite small for the little extra piece of mind.
 
Divebitch

Divebitch

Miss you, Buckster,,,,,
Silver Level
Joined
Apr 30, 2008
Total posts
3,130
Awards
1
Chips
1
Thanks, WVH. So in other words, that 3 card pin cannot be keylogged like a passwords, right?
 
WVHillbilly

WVHillbilly

Legend
Silver Level
Joined
Nov 7, 2007
Total posts
22,973
Chips
0
Thanks, WVH. So in other words, that 3 card pin cannot be keylogged like a passwords, right?

Right. Like you said the order of the cards changes every time so getting a screen location for mouse clicks is no help. About the only bad thing that could happen with the PIN is some sort of screen capture hack.

Honestly the biggest concern with any type of security should be how easily it can be changed should your email account get hacked. Since both the PIN a security key are the same in that regard, I'd put using the PIN as very close to having the device.
 
Divebitch

Divebitch

Miss you, Buckster,,,,,
Silver Level
Joined
Apr 30, 2008
Total posts
3,130
Awards
1
Chips
1
TY so much WVH. That is exactly what I needed to know. I now believe my acct is safe, and invulnerable to the very few times I am on an insecure network.
 
Pascal-lf

Pascal-lf

Legend
Silver Level
Joined
Feb 26, 2010
Total posts
3,161
Awards
1
Chips
1
Right. Like you said the order of the cards changes every time so getting a screen location for mouse clicks is no help. About the only bad thing that could happen with the PIN is some sort of screen capture hack.

Yarp - if you could screen capture and track the mouse you'd be able to work out which ones were clicked.

Just with the PIN I reckon you're account will be pretty darned hard to hack, just watch out if you're in public areas that people don't look over your shoulder!
 
OzExorcist

OzExorcist

Broomcorn's uncle
Bronze Level
Joined
Aug 6, 2007
Total posts
8,586
Awards
1
Chips
1
WV has it - the weakest point is probably your e-mail account and not your PIN. Having an e-mail address dedicated solely to the poker site, which you disclose to nobody else and use for nothing else, isn't a bad idea.

That said, the security token costs next to nothing to buy with FPPs so if you want that extra level of security it can't hurt.
 
Related Full Tilt Reviews: English - Dutch - German - Spanish - Portuguese - FT Casino - Full Tilt Poker Mobile
Top