Monday, June 21, 2021

Someone will still post a sign with the code on it

found on Nerd Ninja

Don't get me wrong, this is an impressive bit of engineering, and I'm sure it solves a problem. I'm just not sure it solves the right problem or in the right way. I actually think there are easier and simpler ways to combat passcode leakage through wear patters (that don't invalidate muscle memory like this does), but more importantly I don't think wear pattern obfuscation will do anything about the tendency of people to post the code right above/below/beside the lock.


Anonymous said...

These are card + PIN devices designed for high-security areas. About half the FBI offices I have seen use them.

The randomization isn't for wear patterns. The buttons have lenses over them that only allow the numbers to be seen from specific angles, so you can't hide a camera to record a user's PIN.