How I won the battle against strong password

Sulley9

Junior Member
Jan 8, 2005
5
0
0
Strong password means long and complicated password. It is as much hard to remember it as hard to type it from the first. The solution is: Dekart Logon for Windows. That add-on for Windows allows to store crazy paranoid passwords inside USB flash drive and enter them effortlessly simply by plugging pendrive to USB port, without any typing! I use it within two weeks in my office and I am enjoyed how it works.
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
I like the concept of keeping a login key on a pen drive, but I think there should be a passphrase...
 

Nothinman

Elite Member
Sep 14, 2001
30,672
0
0
That add-on for Windows allows to store crazy paranoid passwords inside USB flash drive and enter them effortlessly simply by plugging pendrive to USB port, without any typing!

And if someone steals your pen drive they have full access to everything you own.
 

stash

Diamond Member
Jun 22, 2000
5,468
0
0
Wow, I'm sure the IT people at your place would love that idea.

Strong complex passwords dont have to be hard to remember at all. Use a passphrase.
 

Sulley9

Junior Member
Jan 8, 2005
5
0
0
The passphrase is also not very convinient to enter: you don't see what you type (only stars), so the probability of typing error remains high, using USB pendrive for entering passfrase is better than typing.

I am not afraid to loose it: Dekart Logon has backup tool and PIN protection for the password and login name, so if somebody will steal my pendrive nothing will happen: I will restore my login and password to the new one (better than old:) but the thief will enjoy with my old USB drive and not with my PC because the login and password are encrypted with PIN.

Your comments convinced me that I spent 39 dollars not for free: I have answer for all your questions!
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
I use a 20+ character passphrase to login. I mistype it maybe once per week. I type it in probably 10-15 times per day. Typing in a 14 character password wouldn't be tough.
 

Sulley9

Junior Member
Jan 8, 2005
5
0
0
2n0cmonkey: you have a great typing experience! I also don't make mistakes very often but believe me: if you have empty USB port near you and a pendrive in your pocket you will be not sorry about using it for logon procedure, but if you are a network administrator or responsible for network security than you will be happy if you people will store their passwords encrypted inside pendrives unstead writing them on the pieses of paper!
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
Originally posted by: Sulley9
2n0cmonkey: you have a great typing experience! I also don't make mistakes very often but believe me: if you have empty USB port near you and a pendrive in your pocket you will be not sorry about using it for logon procedure, but if you are a network administrator or responsible for network security than you will be happy if you people will store their passwords encrypted inside pendrives unstead writing them on the pieses of paper!

No, I think it's a horrible idea. I'd rather have RSA keyfobs (those things rock). A 4(?) digit pin would be all that the user has to remember.

With this pen drive solution there is no password, so anyone that has access to the machine and the pen drive can access the system. Not sure how the machine gets locked in this situation...
 

Jeff7

Lifer
Jan 4, 2001
41,596
20
81
Originally posted by: n0cmonkey
Originally posted by: Sulley9
2n0cmonkey: you have a great typing experience! I also don't make mistakes very often but believe me: if you have empty USB port near you and a pendrive in your pocket you will be not sorry about using it for logon procedure, but if you are a network administrator or responsible for network security than you will be happy if you people will store their passwords encrypted inside pendrives unstead writing them on the pieses of paper!

No, I think it's a horrible idea. I'd rather have RSA keyfobs (those things rock). A 4(?) digit pin would be all that the user has to remember.

With this pen drive solution there is no password, so anyone that has access to the machine and the pen drive can access the system. Not sure how the machine gets locked in this situation...

And if something goes wrong with the pen drive (maybe a memory cell goes bad, or you lose it), then you're effectively locked out of all your important stuff.

It does sound good though to have a keyfob that's encrypted, with the 4 digit pin. It's easier to crack (unless you implement a 3-attempts-per-time-window type rule), but still not as easy as just having to opening Windows Explorer.
 

Sulley9

Junior Member
Jan 8, 2005
5
0
0
Originally posted by: n0cmonkey

No, I think it's a horrible idea. I'd rather have RSA keyfobs (those things rock). A 4(?) digit pin would be all that the user has to remember.

With this pen drive solution there is no password, so anyone that has access to the machine and the pen drive can access the system. Not sure how the machine gets locked in this situation...

Dekart Logon stores the strong password inside pendrive and presents it to Windows GINA when this is necessary. The pendrive itself is protected with PIN code at the same time. That is, when I turn on the PC with Dekart Logon installed, it invites me to enter my login and password. I insert my pendrive into USB port and now Dekart logon asks me about PIN number for this pendrive. After presenting the PIN pendrive presents the login name and the password to Windows GINA and PC opens.

Dekart Logon also can work with wide variety of smart cards and USB tokens but USB pendrive is very common device, I had it long before I installed Dekart Logon and the manufacturer (I have Sony mini MicroVault) promises me not less than 10 years of data retention, so it was very suitable for me to start using it with my pendrive.

You can read more about Dekart Logon here: http://www.dekart.com/products...tication_access/logon/

BTW, it also supports smart cards and security tokens: http://www.dekart.com/products/supported_devices/
 

stash

Diamond Member
Jun 22, 2000
5,468
0
0
Why would I pay for this software to use with my smartcard, when I can build a PKI using the tools already in Windows? This software just adds an additional cost to do something that can be done with the base OS.

For a standalone machine, this looks like a decent way to do two-factor authentication, since smartcards won't work in a workgroup environment, but for an Active Directory environment, I don't see the point.

Am I the only one who smells the whiff of spam in this thread?
 

Sulley9

Junior Member
Jan 8, 2005
5
0
0
I am not a computer professional, just use it in my daily rutine. My posts are addressed to the same people like I am and are based on my own experience and read from www.dekart.com. So please forgive me if I hurted smb.'s professional pride. But I will repeate: Dekart Logon is very useful tool for those who doesn't use Active Directory and smart cards in their environment.
 

timswim78

Diamond Member
Jan 1, 2003
4,330
1
81
Originally posted by: Dopefiend
Originally posted by: STaSh


Am I the only one who smells the whiff of spam in this thread?

No, most definitely not.
I smell horse manure.

Stand by for pwnage:

Link to other forum.
One of many reviews.

Company employee, methinks.

[Edit2] Two pages of Google results with sulley9 and Dekart products. Hmm.


Yep, totally owned.
The same, awkward use of the English language is used in the reviews and his posts
 

ProviaFan

Lifer
Mar 17, 2001
14,993
1
0
Originally posted by: timswim78
Yep, totally owned.
The same, awkward use of the English language is used in the reviews and his posts
LOL, he's a pretty dumb spammer to use the same name for all of the forums that he peddles his wares in. :roll:

I hope he has his first (and last) meeting with the moderators soon. :)
 

kamper

Diamond Member
Mar 18, 2003
5,513
0
0
Tricky, tricky! The spammers are learning to change their avatars before posting now :p
 

rmrf

Platinum Member
May 14, 2003
2,872
0
0
Originally posted by: kamper
Tricky, tricky! The spammers are learning to change their avatars before posting now :p

:) I was thinking the same thing. All the "free ipod" spammers were using the default avatar, so it was easy to spot them.
 

Sunner

Elite Member
Oct 9, 1999
11,641
0
76
Remembering random passwords isn't hard after you've typed it a few times.
Heck, I know a product key for Win2K without having to think for a second(which is actually a great party trick for nerds;)).
 

Lila

Junior Member
Jan 10, 2005
2
0
0
Still think sulley (spammer or not) is talking about things that might help someone. The software seems to do what it claims to.
IMHO - majority of software discussion posts are initiated by people somehow "related" to the developers. Depends how "tricky" they are.
 

drag

Elite Member
Jul 4, 2002
8,708
0
0
whatever. There is already was to do this sort of thing without relying on propriatory software. (smart cards, usb keys and that sort of thing.)

If a person is forced to spam forums trying to sell software it's safe to assume that that software is CRAP and should be treated as such.

Especially with something like this, a person would be a fool to trust buying security products from a company that suffers from a lack of ethics as indicated by spamming on websites. If a person wants to advertise on Anandtech there are perfectly legal and ethically acceptable was of doing it (like paying for it like everybody else).

This "Dekart" company has now lost the ability to sell any peice of software/hardware/service to me for as long as I can remember to avoid that name.
 

Sunner

Elite Member
Oct 9, 1999
11,641
0
76
Originally posted by: drag
whatever. There is already was to do this sort of thing without relying on propriatory software. (smart cards, usb keys and that sort of thing.)

If a person is forced to spam forums trying to sell software it's safe to assume that that software is CRAP and should be treated as such.

Especially with something like this, a person would be a fool to trust buying security products from a company that suffers from a lack of ethics as indicated by spamming on websites. If a person wants to advertise on Anandtech there are perfectly legal and ethically acceptable was of doing it (like paying for it like everybody else).

This "Dekart" company has now lost the ability to sell any peice of software/hardware/service to me for as long as I can remember to avoid that name.

If nothing else, KDE Wallet handles this just fine for me :D