Time delay security function

vsync vsync at quadium.net
Tue Dec 11 06:36:43 EST 2001


"P.Agenbag" <internet at psimation.com> writes:

> When one enters the system root password for the first time, what if
> one could capture the time between keystrokes as well, and store the
> time between strokes on the host system only. This way, even if
> someone tries to run combinations against a password, it would be
> impossible for the cracker to "simulate" the time between two specific
> characters of the password as the time between two strokes is not sent
> with the password string but measured by the host machine as it
> receives each character. So, this is also the first "glitch" in the

1 word: lag.

-- 
vsync
http://quadium.net/
(cons (cons (car (cons 'c 'r)) (cdr (cons 'a 'o))) ; Orjner
      (cons (cons (car (cons 'n 'c)) (cdr (cons nil 's))) nil))



More information about the openssh-unix-dev mailing list