Re: Password Cracking

From: Lyal Collins (lyalc@ozemail.com.au)
Date: 01/26/03 

From: "Lyal Collins" <lyalc@ozemail.com.au>
Date: Sun, 26 Jan 2003 12:23:14 +1100

"Jeff Williams" <frostback1963@yahoo.com> wrote in message
news:eXFY9.30212$7_.122678@news1.mts.net...
> "S. Pidgorny [MVP]" <slavickp@yahoo.com> wrote in message
> news:#9s3szswCHA.968@TK2MSFTNGP12...
> >
> > Which indicates the need to avoid usage of passwords where possible.
It's
> > not too difficult to do (if you don't call IBM or alikes for advise, but
> > that's yet another problem)
>
> You still need something to verify that the user is who he says he is. If
> you're going to suggest MS Passport, or something similar, I prefer
trusting
> my memory to trusting some corporate (or government) third party.

I agre - worse, passwords perform the underlying user authentication in
almost all existing products - smartcards, digital certs etc.
Until (if) we get to biometrics, then we have replaced one mechanism for
identity abuse for another - how to revent misuse of my fingerprint, facial
image etc. Remember, if it can be recorded, it can be duplicated.
Lyal

Relevant Pages

  • Re: Password Cracking
    ... >> Which indicates the need to avoid usage of passwords where possible. ... >> not too difficult to do (if you don't call IBM or alikes for advise, ... > my memory to trusting some corporate third party. ... passwords perform the underlying user authentication in ...
    (comp.security.misc)
  • Re: Password Cracking
    ... >> Which indicates the need to avoid usage of passwords where possible. ... >> not too difficult to do (if you don't call IBM or alikes for advise, ... > my memory to trusting some corporate third party. ... passwords perform the underlying user authentication in ...
    (microsoft.public.win2000.security)
  • Re: Password Cracking
    ... > Which indicates the need to avoid usage of passwords where possible. ... > not too difficult to do (if you don't call IBM or alikes for advise, ... my memory to trusting some corporate third party. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Password Cracking
    ... > Which indicates the need to avoid usage of passwords where possible. ... > not too difficult to do (if you don't call IBM or alikes for advise, ... my memory to trusting some corporate third party. ...
    (microsoft.public.win2000.security)
  • Re: Password Cracking
    ... > Which indicates the need to avoid usage of passwords where possible. ... > not too difficult to do (if you don't call IBM or alikes for advise, ... my memory to trusting some corporate third party. ...
    (comp.security.misc)