[104871] in Cypherpunks
Coersion Re: don't use passwords as private keys (was Re: Using a
daemon@ATHENA.MIT.EDU (Richard.Bragg@ssa.co.uk)
Fri Oct 30 07:41:35 1998
From: Richard.Bragg@ssa.co.uk
To: redrook@yahoo.com
cc: cypherpunks@toad.com
Date: Fri, 30 Oct 1998 12:04:09 +0000
Reply-To: Richard.Bragg@ssa.co.uk
From information given by a security consultant teaching a course I
attended :
The easiest way to get a password from someone is to ask them. Many people
will tell you if you look official, friendly etc
Torture is less likely to work as people don't like to have to do
something. They are often willing to "volenteer" information as long as
they still appear to be in control.
