Coersion Re: don't use passwords as private keys (was Re: Using a password as a private key.)

Richard.Bragg at ssa.co.uk Richard.Bragg at ssa.co.uk
Fri Oct 30 05:13:46 PST 1998



>From information given by a security consultant teaching a course I
attended :

The easiest way to get a password from someone is to ask them.  Many people
will tell you if you look official, friendly etc

Torture is less likely to work as people don't like to have to do
something.  They are often willing to "volenteer" information as long as
they still appear to be in control.








More information about the cypherpunks-legacy mailing list