[Cryptography] So please tell me. Why is my solution wrong?

Theodore Ts'o tytso at mit.edu
Wed Feb 8 10:40:20 EST 2017


On Tue, Feb 07, 2017 at 10:33:05PM -0800, Bill Cox wrote:
> I just read it, and I think the main idea is clever.  Show the user a
> secret picture whenever they authenticate.  This could help defend against
> phishing attacks.

My bank is doing that already, and has been doing it for, oh, two or
three years?  So it's hardly a new or novel technique.

      	      	      	       	      	    - Ted


More information about the cryptography mailing list