November 2023 Summaries

Login pages are critical defense points for web applications, as they act as gateways between user data and potential online threats. Ensuring robust security involves addressing common vulnerabilities such as failing to differentiate between users and bots, which can lead to fraud through automated brute-force attacks. Implementing bot detection solutions, multi-factor authentication (MFA), and limiting login attempts can mitigate these risks. Proper handling of password storage through hashing and salting with secure algorithms like SHA-2 or SHA-3 is also vital to prevent credential theft. A comprehensive security strategy combining these measures, rather than relying on a single approach, significantly reduces the risk of data breaches and protects the organization's reputation.

Fintech companies face the dual challenge of maintaining robust fraud prevention systems while ensuring a seamless user experience, often hindered by limited visibility and data access. The article discusses the importance of understanding users through device intelligence and dynamic profiling, allowing companies to create comprehensive user profiles that adapt to changing behavior patterns. By leveraging tools like Dodgeball for session replay, fintechs can visualize user interactions to detect inconsistencies and potential fraud. The article emphasizes the need for data-driven strategies over guesswork, advocating for A/B testing and continuous reassessment of fraud prevention measures. This approach not only enhances security but also transforms fraud management into an opportunity to improve user trust and experience, highlighting the potential of partnerships and technologies like Dodgeball and Fingerprint in shaping a secure and user-centric fintech ecosystem.

Accurate visitor identification is essential for businesses to deliver a secure and personalized user experience, yet browser privacy measures and ad blockers have challenged traditional identification methods like third-party cookies. Fingerprint offers a solution by using advanced device intelligence that doesn't rely on cookies, supported by cloud proxy integrations such as those with AWS CloudFront and Cloudflare to enhance accuracy and resilience against ad blockers. The guide details the process of integrating Fingerprint with Akamai's content delivery network (CDN) to improve visitor identification accuracy, leveraging Akamai's global infrastructure and Fingerprint's technology to create stable visitor identifiers. The integration involves setting up a proxy that processes identification requests through the site itself, ensuring better compliance with privacy settings and increasing the longevity of any cookies used. This setup not only enhances the accuracy of visitor identification, particularly with privacy-focused browsers like Safari and Firefox, but also provides insights into visitor behavior and strengthens website security against vulnerabilities. Akamai's CDN enables businesses to provide fast and secure access to web content, while Fingerprint's platform offers sophisticated visitor identification techniques that are critical for preventing fraud and improving user experiences.

Neobanks are digital-only banking services that operate exclusively online, offering features similar to traditional banks but without a physical presence, which allows them to provide enhanced customer experiences through advanced technologies like AI. Popular examples of neobanks include Chime, Varo, Revolut, Nubank, and SoFi, each offering unique services ranging from no-hidden fee policies to cryptocurrency trading. Neobanks are gaining popularity due to lower fees, 24/7 availability, and enhanced customer support, yet they face challenges such as fraud prevention, requiring compliance with Know Your Customer regulations and advanced technology for identity verification. Fraud types like account takeovers, fraudulent new accounts, and loan fraud pose significant risks, necessitating proactive fraud detection and customer education on cybersecurity. As neobanks focus on personalized user experiences and digital identification, they aim to protect customer accounts and maintain trust while ensuring compliance with global regulations.

Whale phishing, also known as CEO fraud, is a sophisticated type of phishing that targets individuals by impersonating high-profile executives through emails, text messages, or voice messages. Unlike generic phishing, which casts a wide net, whale phishing requires extensive research to convincingly mimic an executive's communication style, often leading to urgent requests for sensitive information or financial transactions. The text highlights the necessity for organizations to increase awareness and education about these attacks, implement verification and approval processes, and use secure email software to prevent such attacks. Real-life examples, such as attacks on Snap and ZScaler, illustrate the potential damage of successful whale phishing, emphasizing the importance of vigilance and robust security measures in mitigating risks.

A new proxy integration for Akamai is being introduced to enhance visitor identification accuracy by routing requests through a website, thus avoiding blockages by ad blockers or browsers with strict privacy settings. Akamai, known for its content delivery and cloud services, facilitates quick and secure access to websites through its extensive server network. The integration allows businesses using Akamai’s services to implement Fingerprint’s Visitor Identification APIs via open-source Terraform scripts, enhancing accuracy and circumventing ad blockers. By using first-party cookies instead of third-party ones, the integration maximizes cookie lifetime, especially in privacy-conscious browsers, and combines with Akamai features for enriched insights. Currently available in beta for Enterprise customers, this integration aims to provide seamless and secure online experiences, along with other cloud and data integration options offered by Fingerprint.

Integrating Fingerprint's device intelligence platform with AWS CloudFront enhances visitor identification on websites by overcoming challenges posed by strict browser privacy settings and ad blockers. Fingerprint provides advanced visitor identification through APIs that analyze over 70 signals for accurate visitor identifiers, which can remain consistent for extended periods. The integration uses CloudFront as a content delivery network to improve speed, reliability, and security, while a proxy setup allows identification requests to bypass ad blockers and be treated as first-party cookies, extending their lifespan. This setup involves the use of AWS Lambda functions and a CloudFormation template to streamline the integration process, ensuring consistent updates and scalability across subdomains. By leveraging CloudFront, developers can enhance the accuracy of visitor identification, essential for preventing fraud and improving user experiences, while maintaining compliance and scalability. The integration ensures that identification requests avoid potential blocks, enabling the collection of crucial data for secure and smooth user interactions.

Starting November 1, 2023, changes will be implemented regarding the availability of cloud proxy integrations on certain pricing plans, with AWS CloudFront and Azure proxy integrations becoming exclusive to Enterprise plan customers, and the Cloudflare proxy integration available only on the Pro Plus and Enterprise plans. These integrations, which require considerable internal support and customer assistance for setup, are being restricted to ensure the allocation of adequate resources for their maintenance and to enhance overall service quality. Proxy integrations are valuable for improving the accuracy of visitor identification by routing API calls through the user's website, thus avoiding ad blockers and allowing for long-lasting first-party cookies. While these integrations are beneficial, a custom subdomain is another effective method for achieving high identification accuracy and is available to all customers. Existing customers currently using the proxy integrations will retain access, regardless of their plan.