News for hackers. Stuff that matters.
Re:Making art with SSH key randomart by ktpsns on Tuesday May 01, 2018 @10:09AM (#16967122)
I just thought this would be an argument why "textual" fingerprints like

   SHA256:s6N0OwlTDKjDez98kZRwUGZbTYaQUArv+EYC6sigFwA ben@eshwil
are superior to the "visualized" fingerprints: They are harder to imitate by an attacker.

However, I realized this argument is invalid: If you -- as a human -- compare two fingerprints by just looking at parts of the texts/image, you haven't done a full verification and thus are vulnerable. Therefore, in principle, the kind of key authentification how it is done in modern smartphone messengers (making a photo of a visual key (encoded in a QR code or similar) where the smartphone then verifies every single bit) is the right way to go when it comes to fingerprint verification. Humans are too impatient and too inaccurate for this job.

There are no comments on this comment yet.