OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards

From: Seth Breidbart (sethbpanix.com)
Date: Thu Aug 05 2004 - 22:51:07 CDT


"Kevin Sheldrake" <kevelectriccat.co.uk> wrote:

> Ignoring the initial expense for a moment, wouldn't it have made a
> lot of sense to include the keypad actually on the cards?
> Obviously, card readers would need to be contructed such that the
> keypad part of the card would be exposed during use.

No, they wouldn't. The card could remember the key typed on it for,
say, 60 seconds.

Seth