3 ms·
I was thinking a way to avoid typing passwords in your keyboard. So I just wrote this proof of concept of password input by doing hovering over the letters that
by sanbor 10y ago
I was thinking a way to avoid typing passwords in your keyboard. So I just wrote this proof of concept of password input by doing hovering over the letters that you want to enter as password. Every time the page loads and every 2 seconds the dial changes position and rotation so two passwords never should have the same mouse movements. http://codepen.io/anon/pen/yJdXoK http://codepen.io/anon/pen/yJdXoK
- snowwrestler 10y agoHere's one way to avoid typing passwords: use a password manager to generate and store them. Generating a new password is just a click of the mouse, and using the password requires only the copy/paste key stroke combo, or less. Using 2-factor authentication also helps. Even if the bad guys know the code, it's only good for 60ish seconds. This provides a time dependency, similar to your dial idea.
- sanbor 10y agoThat sounds like a good idea. You could use a private key to unlock your password manager. But the problems of both using 2FA and a private key is that they both rely in something that only you have. If someone figures out how to steal your phone/hard drive, then they also have their way to all your accounts. This dial tries to get back to the idea of "something that only you know". Finally, you could also use a private key with a password, and you would even reduce more the attack surface. But again, the dial is a way to make harder to hear your secret when you're entering it in the computer. Anyway, this dial is a PITA to enter long passwords, which is not good. Long passwords are very important.