Menu

#705 Suggestions: case sensitive login, alternate password PPP, Virus Protection DFVP

open
nobody
Project-web/Developer-web
2019-08-16
2019-08-16
No

Suggestion: I was unable to login for months because I didnt know the login name was case sensitive but also my original login handle was changed to lowercase in your database without my knowledge. The suggestion is: try entering username in all lowercase.

Also Suggestion for API for Periphery Password Protocol (PPP):

This idea uses a keyfile, its filepath, and a checksum instead of username/passwords.
Keyfile (anyfile with metadata) perhaps a font would work good.
Filepath: This part is used like a USERNAME but the server-client relationship is flipped around and the Dongle is a shared resource on the Clients login PC.
CHECKSUM the keyfile's integrity (s/c)ould be checked as part of the ENCRYPTION/SITE DEPENDENT/SECURITY IMPLEMENTATION/ALGORITHM

The premise was a user could have a file shared at S://SOMEFILEPATHUSEDASUSERNAME/keyfile.ext and that file would not be uploaded but its metadata could be looked at.
THE METADATA and checksum is part of the Filecheck like a password check.

I was thinking the keyfile could also be anyfile with a HEX EDIT entry. I want to avoid the actual data though since you can inject malware.

I figure a login would progress like this:
Website gets a login request from user.
Website checks the saved[encrypted filepath]. If file exists then proceed with login else fail(break;)
Verify the file integrity with checksum and possibly looking at file metadata/comments.
If Checksum matches proceed with logon.
ELSEIF If the file was altered or binded with virus perhaps the checksum is different.
DONE.

What worries me is actually uploading a keyfile to server for checksum tests but it may be okay if you can quarantine the file. However I think virus quarantine is stupid. I like dummyFile Virus protection replace the virus with a cloned name null file. That thread was at tiny.cc/dfvp it suggested altering a File Allocation Table or Storage Format to add file-prefixing so that virus names would have to guess a fileprefix inorder to run executables if not binded or Assembly Code Injections. NEGATIVEs will slow the PC with extra step of (suffix/prefix)ing files

The checksum check is an important part. I would like to checksum all webpages in a ZIPHTML or GZIPTARBALL file extension like .zhtm or .gzhtml and use TORRENT trackers as NAMESPACE SERVERS (TorrentDNS)

-openInvent.club

Reference Links:
tiny.cc/donglesudo links to openInvent.club/forum be wary about deleting/renaming Sudo on your machine.
tiny.cc/_ppp
https://protonmail.uservoice.com/forums/284483-feedback/suggestions/9851301-a-keyfile-combined-with-your-password-to-increase
See tiny.cc/cutstone for a font I made in couple hours on my first go at pfaedit aka FontForge.
other crazy ideas tiny.cc/codethis

Discussion


Log in to post a comment.

MongoDB Logo MongoDB