938 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

   939 \begin{frame}[c]

   940 \frametitle{Defence in Depth}

   941 

   942 \begin{center}\small

   943 \pcode{urbanc:$6$3WWbKfr1$4vblknvGr6FcDeF92R5xFn3mskfdnEn...:...}

   944 \end{center}

   945 

   946 \begin{itemize}

   947 \item hashes help when password databases are leaked

   948 \item salts help with protecting against dictionary attacks

   949   and help people who have the same password on different sites\medskip

   950 

   951 \item but they do not protect against a focused attack against a single 

   952   password and also do not make poorly chosen passwords any better

   953 \end{itemize}

   954 

   955 \end{frame}

   956 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%  

   957 

   958 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

   959 \begin{frame}[c]

   960 \frametitle{Subtle Points}

   961 

   962 \begin{itemize}

   963 \item in our web-application the salt needed to remain secret;

   964   in password files the salt is public\bigskip

   965 

   966 \item the NYT has the ``resource'' unlocked at first

   967   and locks it depending on the cookie data

   968 \item our ``web-application'' has the resource locked at first,

   969   and unlocks it depending on the cookie data

   970 

   971 \end{itemize}

   972 

   973 \end{frame}

   974 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%  

   975 

   976