+- Hack Forums (https://hackforums.net)
+-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1)
+--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2)
+--- Thread: Perfect Security Idea (/showthread.php?tid=1423989)
Perfect Security Idea - Omniscient - Jun 27, 2011
I finally just came up with a perfect security idea.
A secondary email address that's non-changeable and encrypted in the database.
The secondary email if used will reset the password.
It's perfect as long as members remember their secondary email addy.
I can't work on this idea now but I think it's a real winner.
Too many members come up with ideas that they aren't aware are either difficult to implement or would cause more problems than help.
* - hxkd - Jun 27, 2011
Sounds good Omni! I hope it keeps hackers away.
hxkd
EDIT:
Sorry for LQP but I had to be the first person to post :).
* - King - Jun 27, 2011
I think that it's a good idea, Omni.
But, I guess, there are some better ideas, imo.
Edit: You're right. This is the best possible idea that doesn't require a lot of work.
* - Moralitas - Jun 27, 2011
But what if someone gets access to an account before the user had added this? Like the day you add it to the site.
Edit:
Quote:Too many members come up with ideas that they aren't aware are either difficult to implement or would cause more problems than help.Too many members don't search, nor think before suggesting. That section needs some kind of additional feature like an approval system, and after the approval, administrators look at it.
* - eiqht - Jun 27, 2011
I like it, the only problem is the remembering part for members.
I recommend they write in notepad and just save it.
* - RDCA - Jun 27, 2011
Couldn't this screw over an account though? What if the "hacker" sets his email as the second email. Then he will have constant over right.
* - Riggs - Jun 27, 2011
I'd give Omni a Blue Peter badge if he new what it was.
* - S70N3R - Jun 27, 2011
Just say the users Secondary email is compromised?
* - Mr Kewl - Jun 27, 2011
This sounds really good.
And Suggestion : Make a secondary account use only for HF>
* - Nov - Jun 27, 2011
Something like the gmail system? That would be good. Just today I forgot my gmail password and would have been in trouble on for having a secondary email.
* - JrSadFish - Jun 27, 2011
sounds cool. But a bit confusing.
* - Moralitas - Jun 27, 2011
(Jun 27, 2011 03:53 PM)JrSadFish Wrote: sounds cool. But a bit confusing.You will have the ability to reset the password with that secondary e-mail. The secondary e-mail cannot be changed, and it cannot be viewed because it's encrypted. No matter what happens, if you're the original owner, you will get access to the account.
* - King - Jun 27, 2011
(Jun 27, 2011 03:54 PM)Peter Chao Wrote: You will have the ability to reset the password with that secondary e-mail. The secondary e-mail cannot be changed, and it cannot be viewed because it's encrypted. No matter what happens, if you're the original owner, you will get access to the account.But, you stated something important in your previous post.
What if the hacker sets-up that email?
* - ▫►βστ-иμی◄▫ - Jun 27, 2011
Couldn't you implement a required secondary password, that can only be entered via on-site keyboard?
Thatd made account stealing nearly impossible.
* - BaussHacker - Jun 27, 2011
I thought there already was something like this.
Anyways, that's a good idea and I will look forward to it.
But I'm already secured like this, at least for my mail. As I got 3 emails connected to it.