VIP (Validation ID Protection)

 View Only
Back to discussions
Expand all | Collapse all

Symantec VIP - Security Issue!

  • 1.  Symantec VIP - Security Issue!

    Posted Mar 30, 2016 09:34 AM

    Hi,

    I am using Symantec VIP as validation and protection service. I have "VIP Access" on my mobile phone. This is what I noticed -

    1. Change the clock to a future time (say 9:15 AM EST) and note down the "random" number (say 388511)

    2. Change the clock back to correct time (say 9:10 AM EST) and wait for the previously set "future time"

    3. The randomly generated number is no longer random - I get the same number which I noted (388511)

    So if I move the clock forward and note down a set of numbers I can log into the system without the need for the token. Isn't this a security hole?

    Thanks, Ayan