News for hackers. Stuff that matters.

A comment on The way people tilt their smartphone 'can give away passwords and pins'. Parent comment

Re:The way people tilt their smartphone 'can give away passw... by wruza on Tuesday April 11, 2017 @12:19PM (#14089567)
I've seen a movie where a bad guy entered password and a good girl counted the number of characters: one-two-three-four-five. Then she noticed that his suit had "GREED" badge on it. Combining these two facts she succesfully hacked into his laptop and prevented some shit. Since then I started to always mix few backspaces into my passwords. Not that I'm really bad, but life is life.
[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by ballenf on Tuesday April 11, 2017 @02:39PM (#14091069)
The backspace key on most keyboards has a very distinct sound. Not to mention it's positioning means timing will be noticeably different as well. Might be better off mixing in a few meaningless modifier keys (press Ctrl, Alt or Caps Lock).
[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by sigjuice on Tuesday April 11, 2017 @03:01PM (#14091282)
I usually type a long string of gibberish, sneak in ctrl-U at some point and then enter my actual password
[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by idanoeman on Tuesday April 11, 2017 @04:02PM (#14091892)
Unless the gibberish is the same every time, the repeated sound of your password will still be parsable from a long enough sound recording of your computer usage.
[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by sigjuice on Tuesday April 11, 2017 @05:05PM (#14092432)
The gibberish is unlikely to ever be the same.
[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by jaredsohn on Tuesday April 11, 2017 @06:03PM (#14092924)
I think it is more accurate to say that the gibberish is unlikely to _always_ be the same.

I think one can tend to create similar gibberish over time. I've worked on a system where I needed to do a new signup every time I wanted to test a feature and I've run into issues where the gibberish I entered matched an account that I had previously created.

[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by NeutronBoy on Tuesday April 11, 2017 @07:13PM (#14093343)
Everyone here has accounts in development databases named 'aaa', 'asd', 'asdf', 'qwer', 'hjkl', etc!
[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by BigJono on Tuesday April 11, 2017 @07:43PM (#14093514)
Nope, mine are all oeunt, oeunth, huet, uehis, ais, etc
[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by uiri on Tuesday April 11, 2017 @09:31PM (#14094070)
You are a user of the Dvorak layout, I take it? Colemak seems like it would have a different fingerprint.
[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by BigJono on Wednesday April 12, 2017 @05:25AM (#14096067)
Yep! Always a bit of fun when someone goes to use my laptop for an end-of-sprint presentation and types a bunch of gibberish infront of all the stakeholders :D
[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by PhasmaFelis on Tuesday April 11, 2017 @03:04PM (#14091309)
I feel like the real lesson here is "don't wear your password."
[ Parent | on HN ]