diff -r 441a1e662f28 -r 5cd1865d45bd slides/slides01.tex --- a/slides/slides01.tex Sat Sep 30 05:28:58 2017 +0100 +++ b/slides/slides01.tex Mon Oct 02 10:02:48 2017 +0100 @@ -935,6 +935,45 @@ \end{frame} %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% +%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% +\begin{frame}[c] +\frametitle{Defence in Depth} + +\begin{center}\small +\pcode{urbanc:$6$3WWbKfr1$4vblknvGr6FcDeF92R5xFn3mskfdnEn...:...} +\end{center} + +\begin{itemize} +\item hashes help when password databases are leaked +\item salts help with protecting against dictionary attacks + and help people who have the same password on different sites\medskip + +\item but they do not protect against a focused attack against a single + password and also do not make poorly chosen passwords any better +\end{itemize} + +\end{frame} +%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% + +%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% +\begin{frame}[c] +\frametitle{Subtle Points} + +\begin{itemize} +\item in our web-application the salt needed to remain secret; + in password files the salt is public\bigskip + +\item the NYT has the ``resource'' unlocked at first + and locks it depending on the cookie data +\item our ``web-application'' has the resource locked at first, + and unlocks it depending on the cookie data + +\end{itemize} + +\end{frame} +%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% + + %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% \begin{frame}[c] \frametitle{This Course}