Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #535

Re: Geographical passwords could solve the password catch-22

Show all headers | View raw

On 2014-02-18, dialmove <dialmove@gmail.com> wrote:
> El Tue, 18 Feb 2014 10:31:54 +0000, RS Wood escribió:
>
>> I'm having trouble figuring this one out.  The globe does provide
>>  more diversity of choice but I suspect most users would unconsciously
>>  choose a place they have a connection to.  Rather than choose some
>>  random mountain in Kyrgyzstan they are going to choose something
>>  familiar, and that provides an attack route when trying to crack their
>>  password.
>
> If the password system allows for arbitrary shapes, there's additional
> protection even if the user chooses his home or workplace as the
> pass-site.  There's no way to guess "my college campus, but just leave
> out the terrible cafeteria at Comp-sci faculty".
>
> Of course, users should be educated to avoid using basic shapes like
> squares or hexagons, just as they now know to avoid using their birth
> date or a number sequence. Oh, wait...

I'm remembering, too, that Americans (at least) have increasingly lousy
geography skills.  It was in the midst of the last Iraq invasion that
some researcher discovered a surprisingly high number of Americans
couldn't find Iraq on a map.  That's depressing.

I'm all in favor of a substitute for passwords, but we're not there yet,
and the new craze of fingerprint scanners doesn't yet seem to be an
improvement.

I'm waiting for "drop of spit" technology, where the sensor reads your
DNA to log you in :)

Back to comp.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Geographical passwords could solve the password catch-22 "tdk" <forum.tdk@squte.com> - 2014-02-17 09:25 +0925
  Re: Geographical passwords could solve the password catch-22 Marko Rauhamaa <marko@pacujo.net> - 2014-02-17 19:08 +0200
  Re: Geographical passwords could solve the password catch-22 "tdk" <forum.tdk@squte.com> - 2014-02-17 17:52 +0000
  Re:Geographical passwords could solve the password catch-22 RS Wood <rsw@therandymon.com> - 2014-02-18 10:31 +0000
    Re:Geographical passwords could solve the password catch-22 dialmove <dialmove@gmail.com> - 2014-02-18 12:52 +0000
      Re: Geographical passwords could solve the password catch-22 RS Wood <rsw@therandymon.com> - 2014-02-18 20:01 +0000
        Re: Geographical passwords could solve the password catch-22 Tommy Mercer <txmercer@gmail.com> - 2014-02-18 21:22 +0000
  Re: Geographical passwords could solve the password catch-22 Whiskers <catwheezel@operamail.com> - 2014-02-22 17:51 +0000
    Re: Geographical passwords could solve the password catch-22 "tdk" <forum.tdk@squte.com> - 2014-02-22 12:48 +0000

csiph-web