News for hackers. Stuff that matters.

A comment on Ask HN: Why aren't images used as passwords?.

Re:Ask HN: Why aren't images used as passwords? by retrac on Thursday July 22, 2021 @09:38PM (#27926344)
An image is some bits. How do you enter it? Copy and paste? Why not just use a cryptographic key, as mentioned by another user. If the image needs to be exact then JPEG compression will be a horror show; many people copy images by taking a lossy screenshot.

If it's more like a barcode or QR code (and JPEG resistant) that actually just encodes the real password, you're still relying on a camera, or the ability to copy-paste image data. This probably runs against the grain with what most users expect. I've never had to use an image file or webcam stream as a password before. I'd probably muddle through; but I'm not sure my mother would.

That said, I wouldn't mind more passwords and one-time-keys especially on printed materials coming as QR codes. Why do I need to type in a 24 character key from a gift card?

[ Parent | on HN ]
Re:Ask HN: Why aren't images used as passwords? by poletopole on Friday July 23, 2021 @09:57AM (#27930691)
Most people don’t know what cryptography is let alone RSA keys. Hints why I mentioned steganography. But I was mostly spit balling here, you aren’t wrong.
[ Parent | on HN ]