Re: New Whitepaper: Anti Brute Force Resource Metering

From: Jason W <bugtraq_at_oremhighalumni.com>
Date: 24 Mar 2005 19:33:40 -0000

('binary' encoding is not supported, stored as-is) In-Reply-To: <20050321182737.81B6B15F507_at_mail.ngssoftware.com>

>Resource metering through client-side computationally intensive "electronic
>payments" can provide an alternative strategy in defending against brute
>force guessing attacks.

The first question I had was,
Why not just use a turing test. It's simple and, theoretically, only humans can distinguish the passphrase. It requires much less overhead. Obviously this would be used in addition to a password. That's my two cents.
Received on Mar 25 2005