Use only 3 unique digits in a 4-digit PIN for more security
Share:
Security expert, Karl Sigler, presents an interesting look into what a potential attacker sees and how math is on their side when a user uses 4 unique digits. In his article, Sigler points out that the residue from our fingers often leaves visible traces on the glass that narrows down the digits used in the PIN.
 |
When changing that PIN to repeat one number, so for example let’s say the smudge marks on the phone are over 6, 8, and 9, the attacker now needs to determine which number is the one that repeats. This small change now makes the number of possible PINs rise to 36, which is a 50% improvement in security of a unique 4-digit PIN.
While this won’t protect you in a case of theft, it may buy you some time in a case when a nosey coworker, friend, or family member attempts to brute force into your phone while you step away for a few minutes.
source: Skeleton Key Security via Geek
Share:
Nokia showcases its array of iridescent accessories in its latest advertisement 
New leaks suggest WebOS had fundamental design problems 
-
Parting images and wrap-up from the last day of Google I/O
-
PhoneArena's John Velasco talks about the geek life
-
Up close demo of Epson Moverio glasses and YouTube functionality
-
Android talks and does Braille
-
Samsung officials confirm 5.9-inch Note III will come at IFA
-
Images and summary from day 2 of Google I/O
8 Comments
2. brenner182 posted on 02 Jan 2012, 14:43 3 2
^ yep. biggest d**k ever now that you got first.
4. ardent1 posted on 02 Jan 2012, 15:35 3 0
24 combinations is due to 4 choices for the first number, 3 choices for the second, 2 choices for the third number and one choice for the last number or 4*3*2*1 = 24.
Okay, I read the solution online since order matters. The correct answer is 12 if you don't assume symmetry and 36 if you assume symmetry.
5. ardent1 posted on 02 Jan 2012, 15:58 2 0
Okay, since the order of the numbers matter, it's a permutation problem and not combinations. I read the solution online and the answer is 12 if you reject the symmetry argument or 36 if you accept the symmetry argument.
The symmetry assumption is that ALL THREE inputs leave the same marks. However, if you leave a BIGGER spot for the duplicate digit, your password is 50% weaker than a non-repeat 4 digit code.
8. Paden posted on 03 Jan 2012, 19:29 0 0
Good thinking. Also, setting it to delete after 10 attempts helps too!
