Account protection

[extremelyhotsauce]

How would you make account security (for anything) more secure?


The list
I would add a feature that lets you add ip addresses to a list, if an ip is on that list it is allowed to enter the password. And you can add IP addresses from a map. So if you dont remember your friends ip or have it written down (that would be kinda weird maybe?) then you can locate their house from a map or enter their address.


Picture Perfect
This feature would allow to upload multiple photos to your account, when you goto sign in you have to RE locate that EXACT picture from your computer, or if you are in a hurry just enter in a second password

 

[Passerby]

i fail to see the point in either of these

both are just as flawed as the current username and password for security and there are already way better systems like gpg keys and secure certificates and ssl on the serverside for sites which have anything worth securing on already has.


also if you use some common sense the username and password is pretty secure.

2 ways to get past it.

brute-force them if you got the password hash which you likely won't unless you got full access to the servers database which kinda kills the whole purpose of breaking into a account anyways.

or social engineer it which is countered by using more than half your brain.

oh and the burteforcing a hash still takes a huge amount of time and lots of computing power if it was a good password with a decent hashing system.

so it really leaves it down to social engineering.

 

[DrBackJack]

What's this common sense thing? Does it hurt?

 

[Simon]

i really dont understand any of this