News for hackers. Stuff that matters.

A comment on New NIST password guidelines: don't require character types or rotation. Parent comment

Re:New NIST password guidelines: don't require character typ... by paulddraper on Thursday December 15, 2016 @01:41AM (#13182897)
Next is custom screen keyboards made with <canvas>
[ Parent | on HN ]
Re:New NIST password guidelines: don't require character typ... by chikei on Thursday December 15, 2016 @07:06AM (#13184011)
You're allow only to input using their custom screen keyboard AND randomize the position of each key.

Banks: this is to prevent attacker use keylogger or mouse position logger.

I was like, are you fucking serious ?

[ Parent | on HN ]
Re:New NIST password guidelines: don't require character typ... by rolandog on Thursday December 15, 2016 @01:40PM (#13186959)
Shh... don't give them any ideas.
[ Parent | on HN ]