Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tired of memorizing passwords? Manuel Blum came up with this algorithmic trick

networkworld.com

Post reply on HN
Print view View original

91–96 of 96 posts

Re: Tired of memorizing passwords? Manuel Blum came up with this algorithmic trick

#91

Post by rahimnathwani »

nr152522 wrote: post #90
rahimnathwani wrote: post #87

Earlier quoted context omitted.

There's no improvement in security from asking for a face rather than a username.

What are the reasons? Genuinely interested as I'd like to understand in more detail.

For the same reason that thumbprints are usernames, not passwords: http://blog.dustinkirkland.com/2013/10/fingerprints-are-user...

Previous HN discussion: https://news.ycombinator.com/item?id=6477505

Re: Tired of memorizing passwords? Manuel Blum came up with this algorithmic trick

#92

Post by eru »

recursive wrote: post #84
smellf wrote: post #81

Earlier quoted context omitted.

Shouldn't the password be hashed on the frontend anyway...?

No. If you do that, then the password hash becomes the real password, and the exercise of hashing it serves no security purpose.

You can, of course, play some zero-knowledge tricks on the front end.

Re: Tired of memorizing passwords? Manuel Blum came up with this algorithmic trick

#93

Post by eru »

mikeash wrote: post #85
raverbashing wrote: post #83

Earlier quoted context omitted.

The central point of failure is: you losing your master password

Is there any secure scheme that protects against that sort of major brain failure?

Share your master password with your friends. You can make it so that, say, 20 out of your 50 friends are required to piece together the master password.

See https://en.wikipedia.org/wiki/Shamir%27s_Secret_Sharing

Re: Tired of memorizing passwords? Manuel Blum came up with this algorithmic trick

#94

Post by nr152522 »

rahimnathwani wrote: post #91
nr152522 wrote: post #90

Earlier quoted context omitted.

What are the reasons? Genuinely interested as I'd like to understand in more detail.

For the same reason that thumbprints are usernames, not passwords: http://blog.dustinkirkland.com/2013/10/fingerprints-are-user... Previous HN discussion: https://news.ycombinator.com/item?id=6477505

I'm confused. I never stated that a users face should be used as a password. I was suggesting that their face (or other bio-info) be their username. Am I missing something?

Re: Tired of memorizing passwords? Manuel Blum came up with this algorithmic trick

#95

Post by rahimnathwani »

nr152522 wrote: post #94
rahimnathwani wrote: post #91

Earlier quoted context omitted.

For the same reason that thumbprints are usernames, not passwords: http://blog.dustinkirkland.com/2013/10/fingerprints-are-user... Previous HN discussion: https://news.ycombinator.com/item?id=6477505

I'm confused. I never stated that a users face should be used as a password. I was suggesting that their face (or other bio-info) be their username. Am I missing something?

"I was suggesting that their face (or other bio-info) be their username."

What problem does this solve?

Post reply on HN