Chroma-Hash: a sexy, non-reversible, live visualization of password field input
1–10 of 70 posts
Re: Chroma-Hash: a sexy, non-reversible, live visualization of password field input
#2I really like that- it would be nice to see that become popular for inputting passwords. It's a nice way to check to see if your confirmed password is the actual password; Furthermore, it might even help one generate more complex passwords because he or she might want a certain set of colors.
Re: Chroma-Hash: a sexy, non-reversible, live visualization of password field input
#3Looks nice, but what about people who are colorblind?
Re: Chroma-Hash: a sexy, non-reversible, live visualization of password field input
#4Looks nice, but what about people who are colorblind?
What about them? Things continue to work as normal for the colorblind. This is just a visual aid, not a new method.
Re: Chroma-Hash: a sexy, non-reversible, live visualization of password field input
#5What an incredibly good idea! It would probably not be too difficult to build this as a firefox plugin, so that all password fields (or all blanked out input fields) on the web will automatically get this feature... Anyone? :-)
Re: Chroma-Hash: a sexy, non-reversible, live visualization of password field input
#6Now for some fun Douglas Hofstadter self-reference.
Challenge:
Can someone find a password that describes the colors it makes?
e.g. "redgreenblue" shows red, green, and blue
Re: Chroma-Hash: a sexy, non-reversible, live visualization of password field input
#7Cool, but still vulnerable to attack by someone who can record video (or with really good memory). Even though the visualization is taken from a relatively small set of three-colour triplets, an attacker who has seen the visualization for every prefix of the password has enough information to figure out the password in linear time.
Re: Chroma-Hash: a sexy, non-reversible, live visualization of password field input
#8What an incredibly good idea! It would probably not be too difficult to build this as a firefox plugin, so that all password fields (or all blanked out input fields) on the web will automatically get this feature... Anyone? :-)
It seems to rely on jQuery, so a Firefox plugin, greasemonkey script, or Opera userjs would need to bundle or src jQuery. Whether or not that is okay I will leave on the table for debate and discussion. :)
Re: Chroma-Hash: a sexy, non-reversible, live visualization of password field input
#9Cool, but still vulnerable to attack by someone who can record video (or with really good memory). Even though the visualization is taken from a relatively small set of three-colour triplets, an attacker who has seen the visualization for every prefix of the password has enough information to figure out the password in linear time.
If someone is already shoulder surfing, wouldn't it be easier to look at the hands and keyboard than at the colour bars and asterisks?
Re: Chroma-Hash: a sexy, non-reversible, live visualization of password field input
#10I don't see the utility of this compared to simply showing 'passwords are identical / not yet identical' live. Perhaps I'm missing something.
OK, so a user makes a mistake, and they notice their n characters in the first field and their n characters in the second field generate different colors.
How does this help them determine which of the two fields has what they intended to enter?
Also since the user types each field at a separate time, how does the character-by-character hashing help? What utility to the user is there from, having typed 'password' into the first field which shows brown and blue, knowing that typing 'p' in the second field made the second field green?