tag:blogger.com,1999:blog-2799642495863688418.post9220929395592620607..comments2007-11-15T12:40:07.242-05:00Comments on Ronnie's Tech Blog: Perfect Paper PasswordsRonniehttp://www.blogger.com/profile/03590029768834060087noreply@blogger.comBlogger3125tag:blogger.com,1999:blog-2799642495863688418.post-46806679127206069452007-11-15T12:40:00.000-05:002007-11-15T12:40:00.000-05:00Ooops! I actually did proof read my comment, but ...Ooops! I actually did proof read my comment, but I should have talked about keyloggers instead. The passwords that are typed in can't be sniffed because everything is transferred through an SSL connection. <BR/><BR/>It's still a great idea, though.Ronniehttp://www.blogger.com/profile/03590029768834060087noreply@blogger.comtag:blogger.com,1999:blog-2799642495863688418.post-20947546369487253392007-11-15T12:32:00.000-05:002007-11-15T12:32:00.000-05:00I should have mentioned that. But this is way diff...I should have mentioned that. But this is way different than the disposable logins that PassPack has. The disposable login can be used <I>in place of</I> my regular login credentials. But the PPP system Steve Gibson has come up with is something that is used <I>in addition to</I> my regular login credentials. PassPack has a couple of factors of authentication and phishing protection, but each of those can be sniffed. The disposable logins that PassPack currently employs have to be regenerated, you can only have 3 at a time, they're long, and they auto expire up to a month from when they were generated. The PPP system is in addition to the password and packing key, much shorter, and one card contains many, many codes. <BR/><BR/>I really think you should check out the site, check out the podcasts that deal with this, and have a look. It can be an option for those of who wish to use it, if you decide to implement it. <BR/><BR/>And thanks for the quick response!Ronniehttp://www.blogger.com/profile/03590029768834060087noreply@blogger.comtag:blogger.com,1999:blog-2799642495863688418.post-87779153978336746992007-11-15T12:05:00.000-05:002007-11-15T12:05:00.000-05:00Hi Ronnie,PassPack actually has a One Time Passwor...Hi Ronnie,<BR/>PassPack actually has a One Time Password option. Since it's really a Pass/Packing Key combination, we call it a <B>Disposable Login</B>:<BR/><BR/><A HREF="http://passpack.wordpress.com/2007/04/09/passpack-disposable-logins-otp/" REL="nofollow" TITLE="PassPack Disposable Logins (OTP)">PassPack Disposable Logins (OTP)</A><BR/><BR/>Ideally, you'd print these out before going away. They also expire if not used within a certain amount of time that you decide.<BR/><BR/>On Passlet - they actually launched a week or so before PassPack. At the time (about a year ago) PassPack and Passlet had about the same feature set.<BR/><BR/>There are a couple of <A HREF="http://passpack.wordpress.com/?s=passlet&searchsubmit=Find+%C2%BB" REL="nofollow">historical posts</A> on our blog that talk about Passlet.<BR/><BR/>I don't know of course if Parvez is working on a newer version somewhere else, or behind the scenes, but for now Passlet appears to have been abandoned. <BR/><BR/>Cheers!<BR/>TaraTara Kellyhttp://www.blogger.com/profile/17944937368232474835noreply@blogger.com