slides/slides01.tex
changeset 541 5cd1865d45bd
parent 527 968ff3fb17c6
--- a/slides/slides01.tex	Sat Sep 30 05:28:58 2017 +0100
+++ b/slides/slides01.tex	Mon Oct 02 10:02:48 2017 +0100
@@ -935,6 +935,45 @@
 \end{frame}
 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   
 
+%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
+\begin{frame}[c]
+\frametitle{Defence in Depth}
+
+\begin{center}\small
+\pcode{urbanc:$6$3WWbKfr1$4vblknvGr6FcDeF92R5xFn3mskfdnEn...:...}
+\end{center}
+
+\begin{itemize}
+\item hashes help when password databases are leaked
+\item salts help with protecting against dictionary attacks
+  and help people who have the same password on different sites\medskip
+
+\item but they do not protect against a focused attack against a single 
+  password and also do not make poorly chosen passwords any better
+\end{itemize}
+
+\end{frame}
+%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%  
+
+%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
+\begin{frame}[c]
+\frametitle{Subtle Points}
+
+\begin{itemize}
+\item in our web-application the salt needed to remain secret;
+  in password files the salt is public\bigskip
+
+\item the NYT has the ``resource'' unlocked at first
+  and locks it depending on the cookie data
+\item our ``web-application'' has the resource locked at first,
+  and unlocks it depending on the cookie data
+
+\end{itemize}
+
+\end{frame}
+%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%  
+
+
 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 \begin{frame}[c]
 \frametitle{This Course}