3 ms·

I'm not sure you've got 3-4 right, but it doesn't matter. Step 1 sinks the whole thing.

• brittohalloran 14y ago
  There's also the fact that your password will ALWAYS be shown as one of the sequences. Would-be hacker just tries 5 times and notes that THIS sequence keeps showing up, that must be the right one. Maybe there's a more obtuse use-case but this seems like more of a cool experiment on human memory than a practical cryptography tool.
  • anologwintermut 14y ago
    The paper is cheap and assumes they have a human attacker." Threat model: The proposed system is designed to be used as a local password mechanism requiring physical presence. That is, we consider authentication at the entrance to a secure location where a guard can ensure that a real person is taking the test without the aid of any electronics."