34 karma · joined August 5, 2008
As an example, you have a hosting service. Open a site with a lot of web based tools like whoise, traceroute, so you will target right segment and use this tools site to promote your hosting.
http://www.virustotal.com/file-scan/report.html?id=d756a1bd9...
Let's see how long will it take for major AV to provide protection.
And don't forget about the salt. Store password something like SHA-1(MD5(password)+password)
Suggestions: Send not only card, but also envelope to put this card in and preferably address printed on envelope.
Just btw, you could think about sms or e-mail service. So instead of getting card, I will get e-mail or sms, so I could forward it to right person with slight modification in wording.
However one you will pass this fear, and slowly show it to the world, you will face another kind of problem - how to promote your solution and do a PR noise. So you will spend enormous time promoting, publishing talking about the product.
You have nothing to loose.
Zero knowledge web app - is nice theoretical approach but I don't see a way it will be adopted anytime soon.
As to mine claims, I will post application when it will be ready, and we could discuss attacks against of it. It will be quite different from clipperz etc.
But one thing i could share - we won't require your passwords, it is just totally wrong from security perspective :)
Product is not about insurance, product is exactly about the fact that password is not stolen.
When it is stolen you will know it right away without any probability factor it will be 100% fact.
There is some literature out there on real-time beat following but the precision is poor so far
If you will have this problem constantly just e-mail me at kos@cbmsnetworks.com
You could e-mail me at kos@cbmsnetworks.com if HTTP problem will persist.