Inkblots & Inkblots & PasswordsPasswordsA good idea from Microsoft (really)A good idea from Microsoft (really)

Author: Vicente AceitunoAuthor: Vicente AceitunoAceituno@yahoo.com

http://www.geocities.com/aceitunohttp://www.geocities.com/aceituno

First Improvised Security Testing Conference

Madrid, 8th August 2003

An inkblotAn inkblot

PasswordsPasswords

UnexpensiveUnexpensive Everybody is using them.Everybody is using them. Correctly used are very effective.Correctly used are very effective.

Problems with PasswordsProblems with Passwords

They should be hard to guess and easy to They should be hard to guess and easy to remember, and you shouldn’t write them remember, and you shouldn’t write them down…right?, but:down…right?, but: I have more than 20 Internet logins.I have more than 20 Internet logins. I can’t use 20 passwords. Most people use 2 to 4.I can’t use 20 passwords. Most people use 2 to 4. If any of the sites is compromised, someone can If any of the sites is compromised, someone can

know my password to everything!know my password to everything! Try to remember easily 20 different passwords!Try to remember easily 20 different passwords!

Microsoft ResearchMicrosoft Researchto the rescueto the rescue

Inkblots have unique meanings to every Inkblots have unique meanings to every person.person.

A set of inkblots can remind you of your A set of inkblots can remind you of your password. You can even stick it to your password. You can even stick it to your computer, and no one will see what you computer, and no one will see what you see.see.

Documento HTML

http://milov.nl/code/js/milov-inkblot4.html

To choose a different password,

just flip the page!

The future?The future?

There are very few inkblot generators There are very few inkblot generators available in Internet today. Who will GPL available in Internet today. Who will GPL one? Anyone?one? Anyone?

They are a tool for people like YOU.They are a tool for people like YOU. Sci-Fi: Will there be a day when inkblots Sci-Fi: Will there be a day when inkblots

will be used in a challenge-response will be used in a challenge-response mode?mode?

Inkblots are easy to remember!Inkblots are easy to remember!

EOFEOF

Questions?Questions?