Re: Weiner's Twitter Tweak
Lowell Prange <lowell-CpNyDYp8yLhWk0Htik3J/[email protected]>
| Newsgroups | gmane.music.dadl.ot |
|---|---|
| Message-ID | <[email protected]> |
On 6/5/2011 7:18 AM, Bruce Geerdes wrote: > On Sun, Jun 5, 2011 at 7:54 AM,<[email protected]> wrote: >> Yfrog had a feature where people who were not >> account owners could send a pic to your account and it would post-no >> password needed > Well, having a randomly generated email address you had to use was > similar to a password. > Like a very password very vulnerable to dictionary attack. I read the email address is something like the users id combined with a random dictionary word. Like [email protected] This is just a quick guess how it would look, not actually how it is really implemented. But the attacker, if they know the username. Just has to have some software generate guesses using a dictionary. Trying [email protected] LowellPrange.apricot-AGHO+GR6JCBfmgfxC/sS/[email protected] This drops the amount of work of guessing a random password by orders of magnitude,. -- dadl-ot mailing list http://mail.thehood.us/mailman/listinfo/dadl-ot_thehood.us http://news.gmane.org/gmane.music.dadl.ot