Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Good crypto / Bad crypto

Options
  • 24-04-2014 4:00pm
    #1
    Sebzy
    Registered Users Posts: 1,770 ✭✭✭


    Been asked by a colleague to review this service as a potential tool for our users to create new passwords.

    http://www.askthedirectory.com/

    See not too sure how to tell them how bad of an idea this is.
    Tagged:


Comments

  • Options
    #2
    Cuddlesworth
    Registered Users Posts: 13,981 ✭✭✭✭Cuddlesworth


    Lets look over the details.

    Non-existent site - Check
    Registered to American Hosting service and .com domain - Check
    Email address is to a yahoo account - check

    Now lets face facts. There is no chance in hell that this company was stumbled upon, they have zero presence on the web or advertising. So it either came from a spam email, which should be easy enough to trace. Or the owner is the brother/friend of somebody in your company and its his new genious idea which will make him and them rich. Which means its going ahead no matter how stupid it is. Which it is stupid, there are numerous tools out there for password resets without human interaction.

    Good luck with that.


  • Options
    #3
    Sebzy
    Registered Users Posts: 1,770 ✭✭✭Sebzy


    The whois registration for askthedirectory.com is a chap from Dublin (go figure)

    Who would actually use this?


  • Options
    #4
    Steviemoyne
    Registered Users Posts: 649 ✭✭✭Steviemoyne


    They show up on Solocheck.ie anyway so from first glance everything seems above board. As for who would use it, I have no clue.

    According to solocheck they're in business 4 years.


  • Options
    #5
    CreepingDeath
    Closed Accounts Posts: 8,016 ✭✭✭CreepingDeath


    Cuddlesworth wrote: »
    Lets look over the details.

    Non-existent site - Check
    Registered to American Hosting service and .com domain - Check
    Email address is to a yahoo account - check

    Site uses a self signed https cert - Check
    Site doesn't default/redirect users to https - Check

    No, this is a complete amateur with no idea about real computer security.

    LastPass is a free browser add-on that lets you generate very strong passwords.

    I 100% rely on that for ALL passwords I have.


Advertisement