Human Computation

on YouTube ↗35m

" summary

A live demo builds and tests human‑computable password schemas that transform site names into passwords by combining a memorized telephone number with a private sentence that maps letters to offsets. A Python program generates responses and volunteers reproduce passwords in 20–30 seconds. All passwords use an aA@1 prefix, schemas typically double output length, and security arguments are information‑theoretic, based on how many challenge–response pairs an attacker observes; Google is used as an ad hoc checker.

AI-written summary · about

" chapters (5)

1. 0:00Introduction
2. 9:30Human computation and passwords
3. 23:20Password schema transformations
4. 31:47Security vs usability of schemas
5. 34:57Summary

" related talks

• 19mDesign and Evaluation of a Data-Driven Password MeterLorrie Faith Cranor, Blase Ur, Lujo Bauer, Noah Johnson, Pardis Emami-Naeini, Nicolas Christin, Hana Habib, Jessica Colnago, William Melicher, Henry Dixon, Felicia Alfieri, Maung Aung · CHI 2017
• 40mLive autopsy of a password: lessons learnt cracking secretsNiclas Kjellin · Øredev 2023
• 26m“bluegiraffeplaysball” or Make Passwords Great Again Using zxcvbnAlon Kiriati · PyCon Israel 2017
• 31m680,000 Plaintext Passwords: An Open Source Love Story in Three ActsT.J. Schuck Fluffmuffin · ArrrrCamp 2014
• 30mhunter2: A Symphony of Password HorrorLilly Ryan · PyCon AU 2017
• 31mhunter2: A Symphony of Password HorrorLilly Ryan · DjangoCon US 2017
• 10mImproving Password Generation Through the Design of a Password Composition Policy...Anuj Gautam, Shan Lalani, Scott Ruoti · SOUPS 2022
• 09mLet’s Hash: Helping Developers with Password SecurityMatthew Smith, Lisa Geierhaas, Anna-Marie Ortloff, Alena Naiakshina · SOUPS 2022