17. User Authentication

MIT 6.858 Computer Systems Security, Fall 2014
View the complete course: ocw.mit.edu/6-858F14
Instructor: James Mickens
In this lecture, Professor Mickens discusses authentication schemes and their implementations.
License: Creative Commons BY-NC-SA
More information at ocw.mit.edu/terms
More courses at ocw.mit.edu

[@qq2262]

33:45 What is your favorite color? off-white-fuchia-magenta

[@zhanedacres4718]

Who is this guy, he's a great teacher!

[@armandkruger911]

Frikken Amazing

[@MrNewAmerican]

Such an amazing teacher.

[@s.irfanrayaniii-g3908]

Superb sir you taught very good, it helped in my seminar . Thank you so much sir

[@tomkelley4119]

Why is a long salt better? If all you’re doing is changing the hash, a short but unique salt should be sufficient. Could someone help me out?

[@matthewlavancher7978]

for knowing the lesson's contents too

[@random-characters4162]

What is the paper the teacher is referring ?

[@mitocw]

Lecture 17 readings list:
Bonneau, Joseph, Cormac Herley, et al. “The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes.” IEEE Symposium on Security and Privacy (2012): pp. 553-567.
See the Readings section for more info at: ocw.mit.edu/courses/6-858-computer-systems-security-fall-2014/pages/readings/. Best wishes on your studies!

[@diegoherrero5993]

Anyone did look why salt are called salt???

[@zee1598]

The words salt in English, sel in French, sare in Romanian, etc. are derived from the Latin language word salarium (equivalent of salary). Salarium was the amount of money payed to Roman soldiers to buy salt.

[@zee1598]

The use of the word "salt" is probably a reference to warfare in ancient times, when people would salt the wells or farmland to make it less hospitable. The Romans are sometimes supposed to have done this to Carthage in 146 BC. In the context of passwords, a "salted" password is harder to crack. stackoverflow.com/questions/244903/why-is-a-password-salt-called-a-salt

[@sugarbooty]

Its because you add it to the password to make the hash browns better, like salt

[@ewhinger]

Telepathwords doesn't exist anymore

[@jeamin7808]

😂😂😂

[@qq2262]

9:00 9:45 Getting paid for adding salt? I wanna have $20,- for knowing the lesson's contents too.

[@itsmeafreak]

Pepper! - that's $20,-

[@tenminutetokyo2643]

OAuth is a damned mess.

[@michaels8297]

Why

[@random-characters4162]

Best what we have so far