News for hackers. Stuff that matters.

A comment on Startup Vidoop Has A Plan To Monetize User Logins.

Re:Startup Vidoop Has A Plan To Monetize User Logins by herdrick on Friday October 05, 2007 @02:10PM (#63696)
How is this secure? There are only 15 choose 3 different possible logins for each screenful of pictures. That's 455. So you have a 1/455 chance of just guessing the right one? Or does order matter? Maybe that's what's happening. 15 permute 3 is 479,001,600.
[ Parent | on HN ]
Re:Startup Vidoop Has A Plan To Monetize User Logins by nickb on Friday October 05, 2007 @04:18PM (#63761)
Had you actually read through or watched the video, you'd notice that you can't just take someone's username and start guessing. They have a second layer that requires "out of band" authentication.

http://www.vidoop.com/vidoop_how.php

Also, it's more like 12 choose 2 but you cannot enter those two easily since: they change all the time and they're embeded in pictures.

[ Parent | on HN ]
Re:Startup Vidoop Has A Plan To Monetize User Logins by herdrick on Saturday October 06, 2007 @05:38AM (#63989)
I misread 12 as 15. But the blog post says you pick three images. So 12 choose 3, or 220.

OK, if you were willing to sit through their video, why don't you tell us about this second layer?

[ Parent | on HN ]
Re:Startup Vidoop Has A Plan To Monetize User Logins by seren6ipity on Friday October 05, 2007 @02:51PM (#63718)
No, the order does not matter. You can enter code from the three slides in any order. I've checked at their website.
[ Parent | on HN ]
Re:Startup Vidoop Has A Plan To Monetize User Logins by almost on Friday October 05, 2007 @02:22PM (#63707)
Even then, how is would that be more secure than a password?
[ Parent | on HN ]