3 ms·
Summary: 1) People dont like remembering long complex passwords so they end up using short easily brute force-able passwords. 2) So, break up a complex passwo
by giberson 15y ago
Summary:
1) People dont like remembering long complex passwords so they end up using short easily brute force-able passwords.
2) So, break up a complex password giving the user something short and easy to remember and store the remaining complex part of the password in an encoded image that when decoded reads like a captcha image.
3) The "profit" here is that despite the user still using small simple passwords, in order to brute force the system you need to rely on artificial vision to read the noisy image for the second half of the password. Which is slow and inaccurate.
The idea is simply adding more computational time to the brute force method. Ie, it's more of a setback than a solution.
Unfortunately/fortunately technology is moving along too fast for this setback to provide significant benefit to justify the efforts to implement it.
- gcr 15y agoI don't understand the difference between this and simply requiring a CAPTCHA for every login?