Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re:But not to give them a chance to correct it fir (Score 1) 404

They still haven't fixed this:

http://www.pretentiousname.com/misc/win7_uac_whitelist2.html

In fact there's now exploits in the wild now, and frankly it was a stupid idea in the first place.

Also if the bad guys have access to a machine (yes, RDP counts) you lose.

I don't care how locked down you think your system is.

The only secure computer is one powered off and in a fire safe at the bottom of a mineshaft.

Comment Re:The more a phone is Cracked (Score 2) 84

Apple can Quattruple-AES-4096 encrypt the phone and close ALL Bugs including Jailbreak, if Paris uses "1234" as PIN, it won't matter (and i firmly belive that 1234 is too complex a password for her anyways...)

And for most people it seems. Have you read: http://www.datagenetics.com/blog/september32012/ ?

If your default locking mechanism recommends a four digit PIN code and you have no way (like a bank) of enforcing a retry limit since it is possible to do a memory clone of your device, who is to blame if the mechanism fails? The customer who used it as it seemed to be designed or the engineer who chose the mechanism? The person who just went to a shop and assumed that the system they bought was fit for being a personal mobile device or the engineer who failed to make it that way.

iPhone has a 4 digit PIN, and full pass phrase, complete with timed lockout after multiple bad passwords, and with the option of wiping the device.
A six digit PIN would be nice, but would probably be birth dates too hohum.

Samsung has come up with ideas such as facial recognition.

I thought that was cool too. But once I had fooled it with a (bad) photo of me displayed from my iPhone I decided that it was a terrible idea. I'm sure it would have problems with my habit of growing a beard and shaving it off every month or so too.

It would be perfectly possible to sell an RFID bracelet with the phone and unlock when within a few CM of it.

Yes, because RFID and NFC tokens can't be hacked, cloned or masqueraded as ... http://www.libnfc.org/ has a nice toolkit there.

Those are the ideas I can come up with in three seconds of thinking each of which is better than a PIN code.

And probably why you've not got a role in the IT security industry too, I'd wager?

I agree with your assertion that short PINs are a terrible idea, but biometrics are worse.
However, there's a huge gap between what a user will accept and what's accepted as good practice.
Users will undoubtably choose the lazy option.

Slashdot Top Deals

It's later than you think, the joint Russian-American space mission has already begun.

Working...