Beefy Boxes and Bandwidth Generously Provided by pair Networks
We don't bite newbies here... much
 
PerlMonks  

Re: Password hacker killer

by calin (Deacon)
on Sep 07, 2003 at 17:10 UTC ( #289591=note: print w/ replies, xml ) Need Help??


in reply to Password hacker killer

You can challenge the user with a so called Reverse Turing Test. It's basically a low quality and partially scrambled rendering of a random text or number (to prevent OCRing) that the user must interpret and submit back before being allowed to continue with the log-in procedure. See this paper for more info.


Comment on Re: Password hacker killer
•Re: Re: Password hacker killer
by merlyn (Sage) on Sep 07, 2003 at 17:29 UTC
      WOW! Thanks for the heads up, that could have bitten me in the butt hard... I had considered that for a system I am working on, guess that one goes off the drawing board now :) Just goes to show, no matter how much you think out a solution, there is always something lurking around the corner that you just don't expect.

      What about challenging them with simple pseudo riddles. Although not perfect it could work. With enough variation in the questions and the format you could make it difficult.

      Please enter the answer to the following question: (number of days in a year) + (the hours in a day) + (the number of wis +e men)

      People friendly, computer not. At least it would stimulate growth in NLP and common sense bots :)

      ___________
      Eric Hodges
        That suggestion is very culture dependent. I think I know the answer to your question:
        365+24+7
        hmm... or is it 365+12+3?
        or 365+24+3 or...

        You get the idea?

        It gets worse if you use questions that you are 'certain' the users knows the answer to.
        Eg. how many players on a football team?
        Answer: 7, 11 or whatever is the normal number in your context.

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://289591]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others about the Monastery: (5)
As of 2014-07-29 04:45 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    My favorite superfluous repetitious redundant duplicative phrase is:









    Results (211 votes), past polls