[ZendTo] Re: Local IP and Request Code

[Jules]

On 21/03/2011 08:47, Barry Kwok wrote:
> 2. Request code
> Should it be more easier to dictate over phone If use *digits 
> *instead. (eg. 5 digits. I think it is secure enough)
>
It would need to be a lot more than 5 digits. Imagine what happens if 
someone tries to break it with 10,000 PCs all trying 5 numbers per 
second, which is quite possible. You need to be proof against 
massive-scale attacks like that, or they can and will brute-force it. I 
would say 9 digits at least. At which point 3 words are probably more 
reliably input.

Jules

-- 
Julian Field MEng CITP CEng
www.Zend.To

Follow me at twitter.com/JulesFM
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

'All programs have a desire to be useful' - Tron, 1982

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20110321/4edd2d1f/attachment.html