PaulDotCom mailing list archives

password cadence


From: matt.wilbur at gmail.com (Matt Wilbur)
Date: Tue, 19 Jan 2010 13:06:59 -0500

While it sounds like a good idea--  when I think of normal office-drone meat
servos not being able to even start Outlook in 5 of 5 attempts, counting on
them to actually enter their password with the same fingers, same cadence,
etc.. more than once.. well. I'd be pretty amazed :-)

What about for geeks?  Like for sysadmins/security types/high security
applications?  I've been on some networks where passwd requirements get
pretty silly-- things like 12char min, combo of 2ea (uppercase, lowercase,
numbers, symbols) -- and the harder these get to create and remember (and
type), the more problems there are.

So I guess I'd be down on "something you know" and "the way you do something
you know" as two factor auth. Biometrics aren't great but it is tough to
screw up your own fingerprint etc etc.

If it wasn't for pesky humans it'd be a great idear..

-matt


On 1/19/10, james mattson <james.mattson at gmail.com> wrote:

You do have to type your new password in multiple times so it will learn
your cadence.

Ps don't cut my finger off for my banking info, I'm broke.

On Jan 19, 2010 7:40 AM, "Chris Blazek" <chris.blazek at gmail.com> wrote:

What would happen if the user changed their password?
The program would have to relearn how you type it again. Depending on how
often you change your password, that might be pretty tough to implement I
would think. I would be afraid that would give people a reason not to change
their password as frequently as they should be doing.

A fingerprint scanner might be a better solution for a two factor
authentication.

Just my 2 cent.

Chris

On Tue, Jan 19, 2010 at 5:50 AM, Robin Wood <dninja at gmail.com> wrote: > >
Has anyone done, or he...
--
http://www.kingbin.net/

_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20100119/0869644b/attachment.htm 


Current thread: