stargeek
PHP news website logo.
home    PHP scripts    articles    seo tools    links    search    contact    shop    realtors


RSA sharpens focus on password problem







RSA sharpens focus on password problem

RSA sharpens focus on password problem 06/08/2004 05:53 AM

Computer Weekly Jun 8 2004 10:18AM GMT




This is a GrokNews Entry: (what is grok?)





Similar Items

RSA sharpens focus on password problem

Grok Headline matches for RSA sharpens focus on password problem

Search sharpens BI focus


Search sharpens BI focus 11/04/2003 06:30 AM
Computer Weekly Nov 4 2003 5:35AM ET

Ask Jeeves Sharpens Its Focus


Ask Jeeves Sharpens Its Focus 06/21/2004 12:11 PM
Source: SearchDay - Ask Jeeves announced today several new 'Smart Search' shortcuts, along with a new page preview tool....

Gateway Sharpens Enterprise Focus


Gateway Sharpens Enterprise Focus 08/03/2004 12:49 PM
The PC maker says its enterprise business will be a key component in its push toward overall profitability.

DNC Sharpens Tech Focus for Convention


DNC Sharpens Tech Focus for Convention 07/18/2004 11:46 PM
The Democratic National Convention Committee's technology director says this year's convention is more focused in its use of technology than previous conventions.

French i-mode' Service Sharpens Focus


French i-mode' Service Sharpens Focus 01/06/2005 03:27 PM
3G Jan 6 2005 4:33PM GMT

Manugistics sharpens focus on core
markets


Manugistics sharpens focus on core
markets
04/06/2005 06:23 PM
Personal Computer World Apr 6 2005 9:54PM GMT

French i-mode Wireless Service Sharpens
Focus


French i-mode Wireless Service Sharpens
Focus
09/23/2004 05:04 AM
3G Sep 23 2004 7:30AM GMT

RSA focuses anew on the password problem


RSA focuses anew on the password problem 06/07/2004 10:35 AM
BOSTON - RSA Security Inc. is renewing its focus on improving the security of user passwords. The company on Monday plans to announce RSA Sign-On Manager, a rebranded version of its SecurID Passage product that the company claims will make it easier for enterprises to manage user passwords.

The bookmarklet solution to the password
problem


The bookmarklet solution to the password
problem
09/06/2004 02:38 PM

Anyone who makes heavy use of the internet has run in to the password problem: dozens of user accounts on sites with varying degrees of trustability, leading to an unmanageable proliferation of username and password combinations. The temptation is to use the same combination on multiple sites, but doing so opens you up to the horrifying prospect of a security flaw in one site compromising al of your other accounts.

I was burnt by this a few years ago: a small community forum on which I was a member was cracked, and my account was then used to log in to another larger forum to which I had administrator acccess. Thankfully no permanent damage was done, but it taught me a valuable lesson in password security. Since then I've maintained a number of different combinations each with a different level of associated trust: if my account on Joe's random forum is cracked it won't lead to the compromise of my Amazon account!

Even different tiers of passwords aren't ideal though, and that's why Nic Wolff's Password generator bookmarklet (via 43 Folders) has me so excited. Nic's bookmarklet pops up a JavaScript prompt box asking for your "master" password, then MD5s it against the domain of the current login page and inserts the resulting hash in to any password fields on the page. A single password can be used for dozens of sites without any risk of a compromise of one account affecting the others. It's brilliant.

There are a couple of minor flaws in the bookmarklet: the master password prompt is in plain text rather than masking your input with asterisks, and the bookmarklet could leave you high and dry if a site changes the domain on which their login form resides without you noticing. The first could be solved by extending the bookmarklet to append a "master password" field to the page using the DOM, while a solution to the second would require some kind of server-side store of the domains at which the initial accounts were created.

Quibbles aside, it's an ingenious solution to a pervasive problem.


Notes and Tips: Password Security
Problem


Notes and Tips: Password Security
Problem
07/09/2004 10:11 AM
Readers dig into the issues of Mac OS X password security after yesterday's warning.

Security Focus: MS Word password tool
not for security


Security Focus: MS Word password tool
not for security
01/07/2004 05:35 PM

10.3: Use a password analyzer to improve
password security


10.3: Use a password analyzer to improve
password security
10/30/2003 12:37 AM
If you try to change the password for a Keychain using the Keychain Access app, you'll notice on the resulting dialog box a circular button with an 'i' in it, as seen in the inset in the screenshot. If you click on it, Panthe...

New Password Recovery Tool for Microsoft
Office Suite Documents is Able to
Recover Passwords to Documents Created
in 14 Applications, and Supports More
Than 30 Types of Password Encryption.


New Password Recovery Tool for Microsoft
Office Suite Documents is Able to
Recover Passwords to Documents Created
in 14 Applications, and Supports More
Than 30 Types of Password Encryption.
12/24/2004 12:19 PM
ElcomSoft Co. Ltd. has released Advanced Office Password Recovery (AOPR), an application that allows business managers, information technology support administrators, and law enforcement officials to gain access to Microsoft(R) Office(R) password-protected documents, that have been accidentally or purposefully password protected. New product combines the latest and the most advanced cryptanalysis algorithms developed by Elcomsoft's research department. AOPR is capable of instantly recovering passwords for a wide range of Microsoft's business and office applications, including all components of MS Office, from the very first DOS versions to Office 2003 programs, including the ones for Windows, Mac, Pocket PC and localized versions. Over 30 different types of password encryption methods are supported. [PRWEB Dec 22, 2004]

Bluetooth sharpens its teeth


Bluetooth sharpens its teeth 08/29/2004 05:10 AM
TechTree Aug 29 2004 8:41AM GMT

IBM sharpens tools for Web services


IBM sharpens tools for Web services 10/16/2002 03:43 PM
CNET Oct 16 2002 2:37PM ET

Yahoo! Sharpens Its Tech Edge


Yahoo! Sharpens Its Tech Edge 04/06/2005 11:49 AM
TheStreet.com Apr 6 2005 3:21PM GMT

GOP Sharpens Attacks As Convention Opens


GOP Sharpens Attacks As Convention Opens 08/30/2004 12:15 PM
NEW YORK (AP) -- Sen. John McCain said Monday it was fair game to criticize Democrat John Kerry's anti-war protests three decades ago, firing an opening salvo as Republicans at their national convention sought to portray President Bush as a strong wartime leader.

Microsoft sharpens Great Plains' profile


Microsoft sharpens Great Plains' profile 06/04/2004 04:05 AM
ZDNet UK Jun 4 2004 7:59AM GMT

Battle on Teaching Evolution Sharpens
(washingtonpost.com)


Battle on Teaching Evolution Sharpens
(washingtonpost.com)
03/14/2005 05:36 PM
washingtonpost.com - WICHITA – Propelled by a polished strategy crafted by activists on America's political right, a battle is intensifying across the nation over how students are taught about the origins of life. Policymakers in 19 states are weighing proposals that question the science of evolution.

Implanted Lens Sharpens Blurred Vision
(AP)


Implanted Lens Sharpens Blurred Vision
(AP)
09/13/2004 04:53 PM
AP - There's a new option for people who suffer from extreme nearsightedness, whose world loses its crisp edge just a few inches from their noses. The first implantable lens for nearsightedness was approved Monday by the Food and Drug Administration.

HP sharpens blades with Cisco networking
tech


HP sharpens blades with Cisco networking
tech
02/01/2005 09:18 PM
Gigabit Ethernet to the max

CHINA: Google sharpens mainland pitch


CHINA: Google sharpens mainland pitch 02/12/2004 02:43 AM
Asia Media Feb 12 2004 6:12AM GMT

Microsoft sharpens note-taking tool


Microsoft sharpens note-taking tool 04/20/2004 12:44 PM
The software giant releases a trial version of the first major update of OneNote, an Office-related application that combines handwritten, audio and other notes with documents.

Telegraph | News | Alcohol sharpens
your brain, say researchers


Telegraph | News | Alcohol sharpens
your brain, say researchers
08/02/2004 06:51 PM
The benefits were most marked among women drinkers and, to the researchers' surprise, showed no sign of flattening out with increasing consumption .. drink more wine .. right:

telegraph.co.uk/news/main.jhtml?xml=/news/2004/08/01/nalco01. xml&sSheet=/portal/2004/08/01/ixportal.html
track this site | 3 links


Kerry Sharpens Attack On Bush and Iraq
War (washingtonpost.com)


Kerry Sharpens Attack On Bush and Iraq
War (washingtonpost.com)
09/20/2004 09:00 PM
washingtonpost.com - Democratic presidential candidate John F. Kerry today delivered a scathing critique of President Bush's war leadership, charging that Bush's "colossal failures of judgment" and "reckless mistakes" have weakened U.S. national security, diverted resources from the war on terrorism and mired the country in a costly conflict in Iraq with no end in sight.

Telegraph | News | Alcohol sharpens your
brain, say researchers


Telegraph | News | Alcohol sharpens your
brain, say researchers
08/03/2004 03:35 AM

Google Alters AdWords; Sharpens
Relevancy Matching


Google Alters AdWords; Sharpens
Relevancy Matching
06/30/2004 07:14 PM
Source: The Search Engine Marketing Weblog - One implication seems clear: Google is de-emphasizing broad matching in favor of exact matching. This is a change long-awaited by careful advertisers who would rather eat glass than throw a broad match into...

Niche retailer Skates on Haight sharpens
selling strategy with web POS


Niche retailer Skates on Haight sharpens
selling strategy with web POS
09/24/2004 03:39 PM
InternetRetailer.com Sep 24 2004 7:46PM GMT

Will Your Password Need A Password?


Will Your Password Need A Password? 06/01/2004 02:43 AM
If you hadn't realized it already, simple username/password combos are a pretty weak form of security - yet they're pretty much all we have for many important online systems that store our most vital information. While there are other solutions out there, many companies (especially in the US) have been incredibly slow in adopting "two-factor authentication" systems that require a password plus something else - such as a onetime code generated by a device you have to have with you (or built into your computer). The idea, then, is that if your password is revealed, no one else has the device, so it's useless. If they find the device, they don't have your password, so it's useless. However, so far, many users don't value this additional security very much - and the devices still aren't all that cheap. Plus, many companies are worried that users will react negatively to such systems as it may slow down the user experience - causing them to look for other (albeit less secure) alternatives. Then, of course, there's the worry that people will start using such systems that aren't compatible with each other, so you'll need separate devices for every account - which would be much worse than before. Others, such as those in the fingerprint scanning business think a biometric approach makes much more sense - but that leads to all sorts of other questions and issues. Still, as there are more and more cases of fraud and identity theft due to so much weak security, it seems increasingly likely that companies will be forced to adopt more secure methods.

Password Plus 1.004


Password Plus 1.004 05/05/2004 05:06 PM
Gives you the most secure place to store your PINs, passwords, accounts and other personal information.

AIX password enumeration possible


AIX password enumeration possible 02/11/2004 03:09 PM
Scott J (Feb 06 2004)

Password Recycling


Password Recycling 07/20/2004 07:39 AM

Why registration-sites suck: Boing Boing links to a story on Wired about registration at news sites. The article is okay, but Boing Boing's comments ring very, very true:

The point that everyone seems to miss is that no one can possibly keep track of a thousand passwords for a thousand websites, which means that these sites undoubtably contain recycled passwords [...]

The more you recycle a password, the higher the likelihood that you will use it in a sensitive context — a bank site, a message board, an IM client, an auction site — where someone might impersonate you or even commit identity theft crimes against you.

Okay, raise your hands, how many of you have a "standard" password that you use all over the place? Everyone does it. Show me someone that uses a different password for every registration or account and I'll show you a liar.

I know a friend that has a group of passwords that he uses based on context — one password for throwaway Web site registration, one for email accounts, one for IM, one for sensitive stuff like banking, etc.

What if someone at one of these services decides to take your password and see where else it might work? Yes, I know the passwords should be hashed when stored in their database, but there's no guarantee that they're going to do that.

How may of you have a password stored in some service or Web site that you've long-since forgotten about that would also work in, say, your bank's Web site?

Click here to comment on this entry


Password Change


Password Change 04/14/2005 08:51 AM

PwM Password Manager 0.3.3


PwM Password Manager 0.3.3 11/18/2003 03:16 PM
A password manager.

Password Retriever 4.5.8


Password Retriever 4.5.8 12/15/2003 04:28 PM
Will let you store and categorise thousands of passwords for everything from your voice mail to your e-mail accounts.

Data-Password-1.05


Data-Password-1.05 08/07/2004 05:06 PM

Password Safe


Password Safe 12/13/2003 08:11 AM
PasswordSafe 2.0pre1-BETA released

Outlook Password v1.0


Outlook Password v1.0 12/11/2003 10:49 AM
Outlok Password allows you to recover passwords which MS Outlook Personal Storage (PST) files are protected with. It is not the real recoverer - it will show you a combination of characters which will allow you to open PST file. Outlook Password can also recover account information. Your emails addresses, mail server addresses (pop3, imap, http), usernames for email accounts, passwords to email servers. [Shareware $19.00 385 KB]

Password Keeper v6.7


Password Keeper v6.7 07/30/2004 05:18 PM
Password Keeper is a small utility useful for storing your frequently used passwords. Password information can be stored, edited and printed with this easy to use program. Each password file that you create can contain up to 1000 account entries. You'll never forget a password again with this handy utility installed on your Windows system. Password Keeper data files are stored in an encrypted format to prevent unauthorized access. [Shareware $19.95 586 KB]
Grok Description matches for RSA sharpens focus on password problem
GrokA matches for RSA sharpens focus on password problem

RSA sharpens focus on password problem

The following phrases have been identified by the grok system as matching this entry: usernotused 515

















Also check out:


Grok

Ipod Porn on the
Rise

Brief Abstract of
Wikipedia's
Mesothelioma Cancer
page

Get first aid
instructions in your
cell phone

IE is crap
JSPWiki gains
podcasting support

Microsoft Files
Appeal of Antitrust
Ruling

Microsoft Files
Appeal of Antitrust
Case

Apple unveils
AirPort Express
mobile Wi-Fi for
Internet, printer
and music sharing

IS RETRAINING WORTH
IT?
(SiliconValley.com)

Oracle trial has a
wild start
(SiliconValley.com)

New mail
notifications in
Bash

ANDURAS SurfProtect
HomeCMS
WebCards
Check Makers Lose
Sales To Online Bill
Payers

Xtra Help For
Unprotected Internet
Users

Survey Questions
Google User Loyalty

Find AD real estate
online

Industry acting to
address Internet
pop-up ads

S&P assesses
Google ahead of IPO

Google Could Hit
Some Hurdles In Its
Search To Be A Net
Portal

Vietnam's local
governments ordered
to enforce Internet
crackdown

Former Teacher
Charged with
Soliciting Sex from
Girl over Internet

Online Lessons on
Arthritis

DigitalRooster
Announces Offer For
Online Directory
Service

Google growth
clouded by survey

Elburn board OKs new
Internet option

Attack warning on
Internet

Re: [SECURITY] [DSA
515-1] New lha
packages fix several
vulnerabilities

Linksys Web Camera
File Inclusion Vuln

PADGen v2.0.1.17
Internet ScreenSaver
Builder v5.0

Digital Photography
Composition Tips

Dean Is Back, and
Not on the Fringe,
Either; Studies the
Right for Lessons On
How to Better
Organize the Left
6/8

MSNBC - Hasselhoff
arrested on
suspicion of DUI

impression the New
York Times top piece
on Reagan leaves

BBC NEWS | England |
Manchester | 'Father
of the computer'
honoured

INDC Journal: INDC
Journal Interviews
Michael Berg

Jeffrey Veen:
Driving the Next
First Lady

BBC NEWS | Middle
East | US 'not bound
by torture laws'

KILLER, COWARD,
CON-MAN GOOD
RIDDANCE, GIPPER
...MORE PROOF ONLY
THE GOOD DIE YOUNG

Diebold Bans
Political Donations

From the Prawn of
Time

GarageBand.com
Leaves Door Open

Cracking the Code to
Romance

A Contest to Outwit
Google

Apple Quietly
Patches OS X

Wi-Fi: If Not Free,
Then How?

Water to Boost
Satellite Snooping

Using MySQL for
Exchange Rate
Updates

Agent Mediated
Electronic Commerce

Technical Reports
and Working Papers
in Business and
Economics

First Monday:
Sharing Digital
Resources

Psychology WWW
Virtual Library

GarageBand.com
offers Creative
Commons licenses to
artists

what is grok?