Map Based Passwords

smitty777 writes "Discovery is running an article on passwords based on a very specific location on a map. Instead of showing UID and Password fields, the user would simply click on a very specific spot on Google Earth, for example. I wonder how you would make that secure? Also, if you forgot, would you get a message saying 'Your password is the third flamingo on the left on the lawn of Aunt Bessie's house'?"

Comments

Bullshit.

[unity100]

doesnt matter what you 'click on'. still, some certain identifiable data is going to be sent from your remote pc, to the server that is going to do the authentication. or, even if its on your local pc, to whatever is going to authenticate you in local pc.

its no different than anything else. if anything, it makes dictionary type attacks much easier. the number of possible coordinates that can happen on a world map are much much lower than the possibility of combinations of alphanumberic passwords with special characters.
BR.