Skip to main content
 BlueHost is the best hosting for wordpress blogger

Loading...

2018 Ultimate List of 500+ Blogs That Accept Guest Posts and high-quality content

This post has 500+ ultimate list of blogs that accept guest posts in more than 20 categories in 2018. The guest blogging is the only way to promote websites organically without compromising SEO. Feel free to check them out, share them with friends and comment on this article.
Google Search Strings you can useWhile the old keyword + “write for us” search can work wonders, after a while, your prospects will run dry, and this search string will yield few (if any) results.

If you want to write for us find more information: Write For Us or Email [email protected]
Over 20 different categories ultimate list of 500+ top quality blogs that accept guest posts

Top 101 Marketing blogs that accept guest postsTop 16 Social media blogs that accept guest postsTop 35 Business blogs that accept guest postsTop 15 SEO blogs that accept guest postsTop 5 Content marketing blogs that accept guest postsTop 23 Entrepreneurship blogs that accept guest postsTop 15 Blogging blogs that accept guest postsTop 21 …

7 Reason Why Fingerprints Should Never be Used as Passwords





Passwords are crap. Nobody picks good ones, when they do they re-use them across sites, and if you use even a trustworthy password manager, they’ll get hacked too. But you know what’s worse than a password? A fingerprint. Fingerprints have enough problems with them that they should never be used anywhere a password would be.

Passwords are supposed to be secret, like the name of your childhood pet. In contrast, you carry your fingers around with you out in the open nearly everywhere you go. Passwords also need to be revocable. In the case that your password does get revealed, it’s great to be able to simply pick another one. You don’t want to have to revoke your fingers. Finally, and this is the kicker, you want your password to be hashable, in order to protect the password database itself from theft.

In the rest of the article, I’ll make each of these three cases, and hopefully convince you that using fingerprints in place of a password is even more broken than using a password in the first place. (You listening Apple andGoogle? No, I didn’t think you were.)



1. FINGERPRINTS ARE NOT SECRET


The first, and maybe most obvious, problem with using a fingerprint in place of a secret password is that they’re not secret at all. Think about the trope where the cops offer the bad guy a coffee in questioning and then subsequently take the mug down to the forensics lab to read his prints. Busted!

But it’s worse than that. You leave your fingerprints everywhere. They can be picked up off of paper, keyboards, and desk surfaces. You wouldn’t leave your password written down on a sticky-note attached to your monitor at work, would you? If your work is using your fingerprint for authentication, your password is probably on your monitor right now.

German hacker [Jan Krissler], who goes by [starbug], has been hammering this home every chance he gets. Back when the iPhone 5’s touchID system was just announced, [starbug] started salivating. He bought one immediately, played around with it for two days, and demonstrated that he could fake out the fingerprint reader before the lines around the block at the Apple Store had cleared. In this interview with Ars Technica, starbug complains that it was too easy. An unnamed Apple source said they’d expected it to take two months, not two days.

2. HOW TO MIMIC A FINGERPRINT


His technique to mimic a fingerprint is pretty simpel. He takes a copy of a fingerprint, then etches it into copper (as if making a PCB), coats the etching in graphite spray, and finally tops it all off with a layer of wood glue or latex. Where the copper was etched away, the glue-and-graphite finger mold is deeper, simulating the ridges on your finger. The graphite spray gives it the right bulk capacitance. Do this in skin-colored latex, and you’ve made something worthy of Mission Impossible for $5 in materials and one afternoon of your time. All you need is a good fingerprint image lifted from a mug or a book.




3.  LIFT FINGERPRINTS FROM PHOTOS

Don’t show your prints in pictures. [Starbug] reproduced the thumbprint of [Ursula von der Leyen], Germany’ Defense Minister, from a single photograph taken at a press conference. Whether the thumbprint is good enough to unlock the entire German army remains untested, but you get the point; hopefully they’re not using fingerprints for secret passwords.

[Starbug] discusses the resolutions required and many more hacks against biometrics in general in this great talk at the Chaos Communication Congress (in German), but the point is that with enough resolution and/or a good enough lens, fingerprints can be taken from comfortable distances. The main limiting factors are depth-of-focus and lighting, which is bad news for politicians sitting on a well-lit stage in front a bunch of cameras. Politician or not, unless you’re always wearing gloves, your fingerprints are not good secrets.

4. FINGERPRINTS ARE NOT REVOCABLE


So let’s say that somehow your normal password gets leaked. How bad is it? In an ideal world, the website that has been hacked lets you know and tells you to change your password. You replace your dog’s name with your cat’s name, and the year of your birth with that of your kid sister’s. Problem solved!

But if your fingerprints are your password and they get leaked, it’s “impossible” to change them. Indeed in traditional fingerprint applications, uniqueness and immutability are the whole point — tying criminals to the scene of the crime, for instance. If you could just change your fingerprints after each heist, you wouldn’t have to wear those awkward gloves.


A fingerprint stays with you for life. Once I steal your fingerprint, I can unlock your current fingerprint-secured device and every fingerprint-secured device that you’ll ever buy in the future. Fingerprints are half-secrets that can’t ever be changed, and thus make lousy passwords. There’s not much more to say about this point, and it’s pretty damning, but it’s worth emphasizing because of the prevalence of bad policy out there.

For instance, sensitive government agencies have been using personal identity verification (PIV) cards that include a copy of the employee’s fingerprint. In addition to a correct password, federal employees subject to PIV have to swipe their finger, and the fingerprint is compared against the one stored in the card. The idea is to use the password and fingerprint match as a form of two-factor authentication.

And then the US Office of Personnel Management (OPM) got hacked and 5.6 million (!) fingerprints of government employees got taken, presumably by a foreign government’s spy agency. So now the Dept. of Homeland Security is possibly going to have to move to “three-factor authentication” because one of their factors is entirely burned. If the government had chosen a revocable second factor for the PIV cards, at least that part of the spill would be a lot easier to mop up.

Passwords need to be changed to remain secret and secure. Fingerprints don’t change.

5. FINGERPRINTS ARE NOT HASHABLE


The problem with fingerprints is that close is good enough, and needs to be. If I press my finger harder into one reader than into another, or swipe differently, or have a cut, I still want the reader to accept my fingerprint. Trained FBI agents make matches with “partials” all the time, and with reasonable accuracy. Close matches are a fact of life with human flesh and real-world scanners. But a fingerprint with a tiny flaw will hash into something entirely different from the reference version. What this means is that fingerprints are not hashable. Hashing makes passwords strong and without it, fingerprint protection is much weaker.

When a responsible website gets hacked these days, and the thieves walk away with the password database, they’re not actually in possession of a list of any passwords at all. Instead, what they get is a list of usernames and one-way hashes of the passwords.

When you type your password in, the website hashes the result. If the trial hash matches the stored one, they can be sure that the password was right. Because the hash is essentially one-way, it’s exceptionally hard for anyone to start from the hashes and figure out what your password is. In fact, the easiest way to go from hashes back to passwords is to start guessing every possible password, compute its hash, and check for a match.


Contrast this with a naïve implementation where the website stores everyone’s passwords, but encrypts them with a master password. If the hacker can break the master password, he or she can decrypt the entire database and all of the passwords. And because this master password has to be used every time a normal password is validated, it’s going to be very vulnerable as well as very valuable. Encrypting each user’s data with a different master password just means that they’ve got to maintain a gigantic master password database, which doesn’t help things either. This is why every responsible website only stores hashes of users’ passwords.

Hashes can be made still better than encryption, though. If the security people are doing their job, the passwords are salted with something that’s different (but not necessarily secret) for each user before hashing; this slows down a brute-force mass-cracking attempt, because each person’s password is essentially hashed differently.

If you and I both use the password “!password123”, but my password has “elliot” added on the front and yours has “joe_user” our hashed values will differ. Once the hackers finally guess your password, because of the salt, they won’t automatically know mine.

And if the website’s security is really good, this hashing process will be repeated thousands of times with a slower algorithm which further slows down brute-force attacks. If it takes one half second to validate your login, it’s no big deal for you, but it’s a deal breaker for a brute-force attempt where they rely on millions of trials per second. As an example of best practices, the disclosure when the password manager LastPass got hacked is pretty solid. It’s still lousy that they got hacked, and you should still change your master password, but if it’s a good one nobody is going to be brute-forcing it any time soon.

6. Fingerprints and the Avalanche Effect


What does any of this have to do with fingerprints? Fingerprints don’t hash well, so all of the above security advantages of storing only salted, hashed passwords in the database don’t apply. That’s because in addition to being one-way, a good hash exhibits the avalanche effect: a small change in the password makes a much larger difference in the hash.


The string “!password123” hashed using the MD5 hashing function isb3a2efccbe10c39f2119979a6f9a3ab2, but “!Password123” isd2583f9c75fbc22890d39e7241927511. The two strings differ by one letter, the capitalized “P”, and yet the hashes are very different. This prevents the cracker, who is brute-forcing potential passwords to get a hash match, from knowing when he or she is getting close. If each correct letter in your password got the hash closer to the target hash, they’d guess it in no time. The avalanche effect means that guessing “close” to the password doesn’t help at all.


As I mentioned before, fingerprint technology needs to be “close enough”. A miss is as good as a mile once it’s hashed. Which means that fingerprints have to be stored in plaintext or encrypted but can’t usefully be hashed, because a good hash avalanches. Fingerprint databases are necessarily a weak link; anywhere your fingerprint is being stored, on your iPhone or PIV card or inside your electronic passport, there is a version of your fingerprint that someone could decrypt if they knew the master password.

7. Electronic Passports


A great example of hashing versus encryption is found in electronic passports. They contain an encrypted representation of your fingerprint and iris images because they’re considered to be sensitive information. But these can only be encrypted because the passport reader will need to be able to decrypt them to compare with your real fingers and eyes.

On top of this, all of your non-sensitive information and the encrypted package are all hashed together, which makes it harder to tamper with any of the info without changing the hash. You might think you could tweak one bit here and apply an offsetting tweak there, but the avalanche effect foils that plan.

At the end of the day, though, this means that the fingerprints on your passport are only secured from reading by encryption, and not a hash function. That’s fine for Customs because they only care that your fingerprint hasn’t been modified. For them your fingerprint is only really used to verify that you are you, and that’s hard to tamper with without breaking the hash that ties it to the rest of your information.

For privacy-minded individuals, on the other hand, it’s a bit more of a concern to have your fingerprints only encrypted. An evil-doer with your passport and the right password(s) could undo the encryption and get your fingerprints out. Although it’s probably easier to just lift your prints off the cover of the passport — fingerprints aren’t good secrets, remember?

CONCLUSION


Don’t use fingerprints as if they were passwords. Being permanent and relatively-easily verified and obtained makes them great for criminal investigations or for certifying that you are who you say you are. But they’re not passwords because they’re not secret, they’re not revocable, and they’re very difficult to store securely.

Enter your email address:

Delivered by FeedBurner

Popular posts from this blog

Zee World - King of Hearts 2 Teasers May - June 2018

King of Hearts Teasers May 2018 – Upcoming Zee World drama series ‘King of Hearts 2’ teasers, previews, updates, episodes, highlights and spoilers for May 2018.
Other Zee World Drama SoapiesZee World - King of Hearts 2 Teasers 2018Zee World My Lost Home Teasers 2018Zee World Fire & Ice Teasers 2018Zee World Sacred Ties Teasers 2018Zee World - The Promise Teasers 2018

Coming up on King of Hearts 2 this May 2018:Monday 14 May 2018
Episode 1

The flag raising ceremony is being celebrated countrywide, with Mahi and her family performing their own and Satya and his family performing theirs. Although all is set to go smoothly, trouble seems to be following both families…
Tuesday 15 May 2018
Episode 2

It's Mahi’s birthday and Satya ends up getting involved without intending to. The day ends up getting more interesting when Satya and Deepu get arrested and end up in a prison where they come face to face with a truly feisty young lady.
Wednesday 16 May 2018
Episode 3

Satya lands a job as a valet …

Zee World - My Lost Home Teasers May - June 2018

My Lost Home  Teasers May 2018 – Upcoming Zee World drama series ‘My Lost Home’ teasers, previews, updates, episodes, highlights and spoilers for May 2018.
Other Zee World Drama SoapiesZee World - King of Hearts 2 Teasers 2018Zee World My Lost Home Teasers 2018Zee World Fire & Ice Teasers 2018Zee World Sacred Ties Teasers 2018Zee World - The Promise Teasers 2018Coming up on My Lost Home this May 2018:Monday 14 May 2018
Episode 51

Jeet loses his memory after a traumatic experience. Cherry tries her best to get in Khurana family's good books.
Tuesday 15 May 2018
Episode 52

Durga tells Jeet that Cherry is his wife. Cherry returns to the Khurana house, ready to control everyone’s move. Angad advises Shabd to tell Mahi about Sapna, but Shabd remains unsure of what to do.
Wednesday 16 May 2018
Episode 53

Angad promises Shabd that he will keep Sapna’s secret hidden. Durga is repentant for her behaviour with Soni. The family cherish their time together at Mahi’s surprise party, however, things…

Zee World: Fire & Ice Teasers May 2018

Fire & Ice Teasers May 2018 – Upcoming Zee World drama series ‘Fire & Ice’ teasers, previews, updates, episodes, highlights and spoilers for May 2018.

Other Zee World Drama SoapiesZee World - King of Hearts 2 Teasers 2018Zee World My Lost Home Teasers 2018Zee World Fire & Ice Teasers 2018Zee World Sacred Ties Teasers 2018Zee World - The Promise Teasers 2018Coming up on Fire & Ice this May 2018:Monday 14 May 2018
Episode 86

Twinkle gets interrogated at the police station meanwhile Kunj tries everything in his power to get her released. Twinkle is convinced that Mahi is still alive and she asks Kunj to look for her. Could Twinkle be right... is Mahi still alive?
Tuesday 15 May 2018
Episode 87

Yuvraj goes to see Twinkle in jail and he leaves behind a little gift for her. Kunj somehow gathers evidence to get Twinkle bail. Twinkle gives Yuvraj a befitting reply and she states that she will get revenge for Mahi's death.
Wednesday 16 May 2018
Episode 88

Anita gets Reminder to ask…

Zee World - The Promise Teasers May - June 2018

The Promise Teasers May 2018 – Upcoming Zee World drama series ‘The Promise’ teasers, previews, updates, episodes, highlights and spoilers for May 2018.


Other Zee World Drama SoapiesZee World - King of Hearts 2 Teasers 2018Zee World My Lost Home Teasers 2018Zee World Fire & Ice Teasers 2018Zee World Sacred Ties Teasers 2018Zee World - The Promise Teasers 2018
Coming up on The Promise this May 2018:Monday 14 May 2018
Episode 43

Bani promises to manifest her hatred for Jai, for the Park Road incident. Jai finds out about Bani's pregnancy and is extremely happy about having a baby. But Bani does not want anything to do with Jai.
Tuesday 15 May 2018
Episode 44

Bani leaves the Walia house without telling anyone of her whereabouts. Jai receives a call from a stranger claiming Bani is with him and calls Jai over to his house. Will Bani be found?
Wednesday 16 May 2018
Episode 45

Jai has been shot and is in hospital. This news is all over the media. Jigyasa scolds Rano and blames Bani for the s…

Zee World - Sacred Ties Teasers May - June 2018

Sacred Ties Teasers May 2018 – Upcoming Zee World drama series ‘Sacred Ties’ teasers, previews, updates, episodes, highlights and spoilers for May 2018. Other Zee World Drama SoapiesZee World - King of Hearts 2 Teasers 2018Zee World My Lost Home Teasers 2018Zee World Fire & Ice Teasers 2018Zee World Sacred Ties Teasers 2018Zee World - The Promise Teasers 2018Coming up on Sacred Ties this May 2018:Thursday 10 May 2018
Episode 75

Rasika strikes again but this time she instigates Savita to turn against Archana and her family. Varsha asks Manjusha to tell Rasika that, if she ever tries to harm Vanita or Archana in any way she will feel her wrath.
Friday 11 May 2018
Episode 76

Manav sees the wedding necklace he gave to Archana around Shalini's neck and he asks her nicely not to wear it. Rasika insults the entire Deshmukh family and even forces Savita to dance with anklets on in front of everyone.
Saturday 12 May 2018
Episode 77

Savita speaks to Archana while she’s asleep and tells her that …

SABC 1 - Skeem Saam Teasers May - June 2018 (#SkeemSaam and Youtube Video)

Skeem Saam Teasers May 2018 – Upcoming SABC 1 drama series ‘Skeem Saam’ teasers, previews, updates, episodes, highlights and spoilers for May 2018.


Coming up on Skeem Saam this May 2018:Monday 21 May 2018
Episode 226

Kwaito sends MaNtuli a gut-wrenching video confession. A fallout at the hospital leads to Wallet doing the unexpected. Francois receives much needed good news but with a spanner added to the works.

Tuesday 22 May 2018
Episode 227

Leeto hears devastating news about Kwaito from an equally shocked Petersen. Francois has good and bad news for Lehasa. Wallet has a change of heart but it might just be too little, too late.

Wednesday 23 May 2018
Episode 228

A terrified Tbose witnesses a very disturbing sight in the form of his friend Kwaito. There’s no turning back as Wallet and Mr Kgomo thrash each other with words. A waiter does the unthinkable in front of Cafe Rovuwa patrons.

Thursday 24 May 2018
Episode 229

Tbose and Glenda both realise that they have similar suspicions about Kwaito. Bo…

SABC 1 - Uzalo Teasers May - June - July 2018 (#Uzalo and Youtube Video)

Uzalo Teasers May 2018 – Upcoming SABC 1 drama series ‘Uzalo’ teasers, previews, updates, episodes, highlights and spoilers for May 2018.
Coming up on Uzalo this May 2018:Monday 21 May 2018
Episode 77

Pastor Mdletshe begins to ask suspicious questions about Qhabanga’s source of funds, Nosipho has to make a decision about working with MaNgcobo, and Nkunzi continues to pursue MaMlambo.

Tuesday 22 May 2018
Episode 78

MaMlambo and Nkunzi are spending more and more time together. Can they resist the attraction or will MaNgcobo catch them?

Wednesday 23 May 2018
Episode 79

What starts as a happy day quickly turns into a nightmare for the Mdletshe’s as Mumsy reveals a shocking secret at her baptism. MaMlambo struggles to socialize with her friends as her guilt with sleeping with Nkunzi is eating at her. Fikile requests a mentor meeting with MaNgcobo while financial trouble worsens with her and Sbu.

Thursday 24 May 2018
Episode 80

Mumsy is baptized. MaMlambo is in a tight corner with Nkunzi. Thobile i…

SABC 2 - 7de Laan Teasers May - June 2018 (#7deLaan and Youtube Video)

7de Laan Teasers May 2018 – Upcoming SABC2 drama series ‘7de Laan’ teasers, previews, updates, episodes, highlights and spoilers for May 2018.




Coming up on 7de Laan this May 2018:

Monday 14 May 2018.
Episode 4307

Marko has a romantic evening planned for him and Esti. Olivia supports Matrone in her quest to find love.

Tuesday 15 May 2018
Episode 4308


Vanessa puts her foot down. Willem has an important decision to make. Alexa helps Bonita with medical advice.

Wednesday 16 May 2018
Episode 4309


Chris’s life is in danger. Xander is worried about Daniel. Aggie has a brilliant idea for Bruynwaves’s Africa Day project.

Thursday 17 May 2018
Episode 4310


Vanessa is worried about Diederik. Will he fall back into his bad habits? Xander lays his cards on the table.

Friday 18 May 2018
Episode 4311


Vince is sceptical about Justin’s behaviour. Hilda invites Jacob to dinner. Olivia realizes what Matrone is trying to hide.

Monday 21 May 2018
Episode 4312


André opens up old wounds. Bonita blames others for her probl…

Telemundo - The Boss Teasers May - June 2018

The Boss Teasers May 2018 – Upcoming Telemundo drama series ‘The Boss’ teasers, previews, updates, episodes, highlights and spoilers for May 2018.Coming up on The Boss this May 2018:
Monday 21 May 2018
Gabriela wakes from her coma to learn that she’s been accused of killing five people, including her father. Patricia tells Alberto she is pregnant.

Tuesday 22 May 2018
Gabriela acts aggressively until she sees her son crying, and goes to console him. Alejandro takes the weapon from her, and the police apprehend her.

Wednesday 23 May 2018
Gabriela is savagely beaten by Macario in her jail cell. Alberto insists that Patricia has an abortion. Alejandro goes to visit Gabriela.

Thursday 24 May 2018
Francisca is happy to receive a letter from Gaston, while Anibal intercepts a different letter from Gaston addressed to Ricardo.

Friday 25 May 2018
Anibal orders his men to place Gaston in isolation. Gabriela gets a lift to San Pedro with a truck driver and meets Max and David at a cemetery.

Monday 28 M…

Telemundo - Woman of Steel 3 Teasers May - June 2018 #WomanOfSteel

Woman of Steel  Teasers May 2018 – Upcoming Telemundo drama series ‘Woman of Steel’ teasers, previews, updates, episodes, highlights and spoilers for May 2018.


Woman of Steel returns to Telemundo this March with a new Woman at the helm.


Coming up on Woman of Steel 3 this May 2018:
Tuesday 1 May 2018
Consuelo meets with Tuti at a shopping centre. Meanwhile, Vicenta and Rosario escape from Larry, with the help of Pedro.

Wednesday 2 May 2018
Salvador manages to contact Vicenta, and she gives him her location. Rosario is upset about her brother’s death.

Thursday 3 May 2018
Larry arrives at Indio’s ranch, where Roscas and the thugs scold him for getting lost in the desert. Daniel continues to look for Vicenta.

Friday 4 May 2018
Chucho asks Lorena to search through Vicenta’s belongings for any evidence she might have against him. Gallo tells Felipito he doesn’t love Josefina.

Monday 7 May 2018
Chucho pushes Consuelo against a mirror and she is left unconscious.

Tuesday 8 May 2018
Vicenta and Salvador…