Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #521

Re:Geographical passwords could solve the password catch-22

Show all headers | View raw

 "tdk" <forum.tdk@squte.com> Wrote in message:
> Geographical passwords could solve the password catch-22, says a security researcher.
> Computer scientist Ziyad Al-Salloum of ZSS-Research, writing in the International 
> Journal of Security and Networks, claims it's easier to remember places than numbers 
> or words.
> 
> The system asks users to draw a boundary round a favourite place which is then hashed.
> 
> According to Al-Salloum  "Proposing an effective replacement of conventional passwords could reduce 76% of data breaches, based on an analysis of more than 47,000 reported security incidents," 
> he explains that a whole-earth map might have 360 billion tiles at 20 degrees of 
> "zoom," making geographical passwords essentially unguessable.
> 
> [1] "http://esciencenews.com/articles/2014/02/16/geographical.passwords.worth.their.salt"
> [2] "http://xkcd.com/936/"
> 
> P.S. I assume there's some overlap between readers of this group, soylentnews and 
> Slashdot, so I'm going to try to avoid posting stories already covered on those 
> sites.
> 
> -- 
> View this thread at http://squte.com/node/4490
> 
> 

I'm having trouble figuring this one out.  The globe does provide
 more diversity of choice but I suspect most users would
 unconsciously choose a place they have a connection to.  Rather
 than choose some random mountain in Kyrgyzstan they are going to
 choose something familiar, and that provides an attack route when
 trying to crack their password.
-- 

Back to comp.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Geographical passwords could solve the password catch-22 "tdk" <forum.tdk@squte.com> - 2014-02-17 09:25 +0925
  Re: Geographical passwords could solve the password catch-22 Marko Rauhamaa <marko@pacujo.net> - 2014-02-17 19:08 +0200
  Re: Geographical passwords could solve the password catch-22 "tdk" <forum.tdk@squte.com> - 2014-02-17 17:52 +0000
  Re:Geographical passwords could solve the password catch-22 RS Wood <rsw@therandymon.com> - 2014-02-18 10:31 +0000
    Re:Geographical passwords could solve the password catch-22 dialmove <dialmove@gmail.com> - 2014-02-18 12:52 +0000
      Re: Geographical passwords could solve the password catch-22 RS Wood <rsw@therandymon.com> - 2014-02-18 20:01 +0000
        Re: Geographical passwords could solve the password catch-22 Tommy Mercer <txmercer@gmail.com> - 2014-02-18 21:22 +0000
  Re: Geographical passwords could solve the password catch-22 Whiskers <catwheezel@operamail.com> - 2014-02-22 17:51 +0000
    Re: Geographical passwords could solve the password catch-22 "tdk" <forum.tdk@squte.com> - 2014-02-22 12:48 +0000

csiph-web