3 ms·
Can experts weigh in on the utility of this thing? To my ignorant eyes it looks excessively complicated. To save you a search it's here: https://www.themooltip
by avn2109 10y ago
Can experts weigh in on the utility of this thing?
To my ignorant eyes it looks excessively complicated.
To save you a search it's here: https://www.themooltipass.com/ https://www.themooltipass.com/
- gravypod 10y agoThe idea is you put your passwords into this box. This box can only be opened with a Chip&Pin card. This magic box can be backed up and restored if ever lost or stolen. The magic box is also "physically-ish" sperated from the computer. It's Impossible (TM) to compromise the security of all the passwords in the magic box. It goes something like this. Setup goes like this: 1. User buys device which comes with keycards. 2. User selects pin code for their device Usage goes like this: 1. User attempts to login to site 2. Browser plugin requests login details from device 3. User is prompted for chip & pin from the device 4. User puts card into device and inputs pin 5. User clicks a button physically to aprove transaction 6. If correct data is sent to the browser for login 7. Subsiquent chip and pin signins aren't needed for X timeout The interaction is more 'tedious' for some people but it's not meant for the people who are concerned with typing in a 4-digit pin. It's meant for people who would otherwise have to remember 20 digit alpha-num-sym passwords for 30 different accounts for which this is much easier and safer to do. It's also something people know how to do. If you've gone to a super market you are now prompted for Chip & Pin. People are already motivated to learn how this works (want your groceries for the week? Use the chip and pin!). On the other hand, the average person doesn't need code words to get access to a protected resource. Bar "special organizations" I'd say there are very few people who are trained natrually into the concept of passwords. It's simple but it isn't done nearly enough for everyone to understand it which is in stark contrast when compaired to using a credit card with a pin code. Also, they could use similar or even the same pin code as their bank pin if they aren't concerned about security.