Data uses most secure code ever Star Trek TNG (Blu Ray HD)
HD_Picard0 HN recommenders · 2021–2023
185K views · comedy · evergreen · Uploaded 2017-03-29
A short Star Trek TNG clip from 'Brothers' in which Data uses a lockout code with an unusually long, secret-sounding sequence.
Used as a joke or a tongue-in-cheek reference in security and authentication threads.
51:22USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
2:58The Loving Trap
Ben Woodhams
19:08NaN Gates and Flip FLOPS
suckerpinch
9:55Erlang The Movie II: The Sequel
gar1t
5:34On The Turing Completeness of PowerPoint (SIGBOVIK)
Tom Wildenhain
4:06Chicken chicken chicken
Yoram Bauman
5:56How to sound smart in your TEDx Talk | Will Stephen | TEDxNewYork
TEDx Talks
42:3630 Weird Chess Algorithms: Elo World
suckerpinch
4 comments from Hacker News
From my understanding, the only real way to create a password is to make it really, really long. Like, "Sometimes 10 people will get together on Friday night. Wow!" Or whatever you want. Makes it easy to remember. Personally I just usually string a bunch of random numbers and upper/lower/special characters - 40 of them. Just like this: [VIDEO]
That might explain why Data's lockout code in that particular TNG episode has so many "7" on it :) One, seven, three, four, six, seven, three, two, one, four, seven, six, Charlie, three, two, seven, eight, nine, seven, seven, seven, six, four, three, Tango, seven, three, two, Victor, seven, three, one, one, seven, eight, eight, eight, seven, three, two, four, seven, six, seven, eight, nine, seven, six, four, three, seven, six. Lock. [VIDEO]
This is bad and insecure. Look at this: [VIDEO] Same thing with “pay with your face” they tried in China. They all are susceptible to replay attacks. It is garbage! The only secure way to authorize actions is to have a device in your possession which you unlock with your password and/or biometrics — and use THAT device to sign interactive challenges or ZK-SNARKS. The device could stores keys in a secure enclave, but regardless, the keys should never leave the device. The ability to export private keys (as with ethereum and bitcoin wallets) is insecure, too. Look how 1password does it: local key plus master password. Far better than LastPass (master password only). Also you should have notifications whenever a new device authenticates, or when you are trying to establish new recurring payments at a great rate than you would allow otherwise. Then you need to confirm from other devices. That is the scheme that works universally and the further you depart from that, the more ridiculous hacks you get.
I will not be silent until authentication works like this: [LINK] Or until it works like this: [VIDEO] And then logging in will look exactly like this: [LINK]