Study On Threats To Correct Password Errors Focused On Facebook Cases
Main Article Content
Abstract
Recently it has been discovered that login is possible even if there is a typo in ID or password on Facebook. Facebook explained, "For the convenience of users, we allow some level of error in ID or password." In addition, "Security issues such as hacking are safe because they are strictly limited in the scope of typos and identify password entry methods rather than simple typographical errors." In this paper, We want to confirm Facebook’s claim. We can analyze the type of typos of users and guess these effects. And We want to check the problem of the function that allows typos. Facebook is used by many people in many countries. That is also being serviced in Korea. Allowing typos means that Facebook save password in plain text. The Korean Privacy law enforces one-way encryption of passwords. When personal information is leaked, there is a lot of problem. Among them, the password has a large extent of damage. because many people use the same ID/password on various sites. The hacker who hacked into one site will attempt to steal information from other sites with the same ID and password. Therefore, the password should store the hash value.
Downloads
Metrics
Article Details
You are free to:
- Share — copy and redistribute the material in any medium or format for any purpose, even commercially.
- Adapt — remix, transform, and build upon the material for any purpose, even commercially.
- The licensor cannot revoke these freedoms as long as you follow the license terms.
Under the following terms:
- Attribution — You must give appropriate credit , provide a link to the license, and indicate if changes were made . You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
- No additional restrictions — You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.
Notices:
You do not have to comply with the license for elements of the material in the public domain or where your use is permitted by an applicable exception or limitation .
No warranties are given. The license may not give you all of the permissions necessary for your intended use. For example, other rights such as publicity, privacy, or moral rights may limit how you use the material.