RSA conference site sends an ajax request per keystroke when entering password

RSA conference site sends an ajax request per keystroke when entering password(zyan.scripts.mit.edu)

11 points by arctangos 12 years ago | 1 comment

josephlord 12 years ago |

Probably the strong/weak indicator. Maybe it should be done client side in javascript. It might be possible to narrow the range of likely passwords by analysing the timings of the requests.

josephlord 12 years ago |

Probably the strong/weak indicator. Maybe it should be done client side in javascript. It might be possible to narrow the range of likely passwords by analysing the timings of the requests.