{"id":74249,"date":"2020-03-15T20:42:16","date_gmt":"2020-03-15T17:42:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/issledovanie-dlya-bezopasnosti-shestiznachnye-pin-kody-ne-luchshe-chem-chetyrehznachnye"},"modified":"2020-03-15T20:42:16","modified_gmt":"2020-03-15T17:42:16","slug":"issledovanie-dlya-bezopasnosti-shestiznachnye-pin-kody-ne-luchshe-chem-chetyrehznachnye","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/issledovanie-dlya-bezopasnosti-shestiznachnye-pin-kody-ne-luchshe-chem-chetyrehznachnye","title":{"rendered":"Unders\u00f8gelse: Seks- og firecifrede PIN-koder er ikke bedre for sikkerheden.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Et tysk-amerikansk forskerteam med frivillige har unders\u00f8gt<\/a><\/noindex> og sammenlignet sikkerheden ved sekscifrede og firecifrede PIN-koder til l\u00e5sning af smartphones. I tilf\u00e6lde af tab eller tyveri af en smartphone er det godt at kunne v\u00e6re sikker p\u00e5, at informationen er beskyttet mod hacking. Er det virkelig tilf\u00e6ldet?<\/p>\n

\"Unders\u00f8gelse:<\/p>\n

Filip Markert fra Horst G\u00f6rtz Institut for IT-sikkerhed ved Ruhr-Universit\u00e4t Bochum og Maximilian Golla fra Max Planck Institut for sikkerhed og privatliv har opdaget, at psykologi ofte trumfer matematik. Matematikset er sekscifrede PIN-koders p\u00e5lidelighed v\u00e6sentligt h\u00f8jere end for firecifrede. Men brugerne foretr\u00e6kker bestemte kombinationer af tal, hvilket betyder, at nogle PIN-koder bruges hyppigere, og det n\u00e6sten udvisker forskellen i kompleksitet mellem seks- og firecifrede koder.<\/p>\n

I unders\u00f8gelsen brugte deltagerne Apple- eller Android-enheder og oprettede fire- eller sekscifrede PIN-koder. P\u00e5 Apple-enheder fra iOS 9 er der en sortliste over forbudte digitale kombinationer af PIN-koder, hvis valg automatisk er forbudt. Forskerne havde begge sortlister (for 6- og 4-cifrede koder) til r\u00e5dighed og k\u00f8rte brute force kombinationer p\u00e5 en computer. Den sorte liste over de modtagne 4-cifrede PIN-koder fra Apple indeholdt 274 numre, mens den for 6-cifrede indeholdt 2910.<\/p>\n

For Apple-enheder f\u00e5r brugeren 10 fors\u00f8g til at indtaste PIN-koden. If\u00f8lge forskerne giver det i dette tilf\u00e6lde n\u00e6sten ingen mening med sortlisten. Det viste sig at v\u00e6re sv\u00e6rt at g\u00e6tte det rigtige nummer p\u00e5 10 fors\u00f8g, selvom det er meget simpelt (som 123456). For Android-enheder kan man p\u00e5 11 timer foretage 100 indtastninger af PIN-koden, og i dette tilf\u00e6lde er sortlisten allerede et mere p\u00e5lideligt middel til at forhindre brugeren i at indtaste en simpel kombination og forhindre, at smartphone'en bliver hacket ved hj\u00e6lp af brute force metoden.<\/p>\n

<\/center><\/p>\n

I eksperimentet valgte 1220 deltagere selv PIN-koder, mens experimentatorerne fors\u00f8gte at g\u00e6tte dem p\u00e5 10, 30 eller 100 fors\u00f8g. Kombinationerne blev analyseret p\u00e5 to m\u00e5der. Hvis sortlistningen blev aktiveret, blev smartphones angrebet uden brug af numre fra listen. Uden aktivering af sortlisten begyndte kodeg\u00e6tteprocessen med at gennemg\u00e5 numrene fra sortlisten (da de var de mest almindeligt anvendte). I l\u00f8bet af eksperimentet blev det klart, at en fornuftigt valgt 4-cifret PIN-kode er forholdsvis sikker ved begr\u00e6nsede indtastningsfors\u00f8g og endda lidt mere p\u00e5lidelig end 6-cifrede koder.<\/p>\n

De mest almindelige 4-cifrede PIN-koder var kombinationerne 1234, 0000, 1111, 5555 og 2580 (det er en lodret s\u00f8jle p\u00e5 den numeriske tastatur). En dybere analyse viste, at den ideelle sortliste for 4-cifrede PIN-koder skulle indeholde omkring 1000 poster og v\u00e6re lidt forskellig fra den, der blev genereret til Apple-enheder.<\/p>\n

\"Unders\u00f8gelse:<\/p>\n

Endelig fandt forskerne ud af, at 4-cifrede og 6-cifrede PIN-koder er mindre sikre end adgangskoder, men mere p\u00e5lidelige end grafisk l\u00e5sning af smartphones (baseret p\u00e5 m\u00f8nstre). Den fulde rapport om unders\u00f8gelsen<\/a><\/noindex> vil blive pr\u00e6senteret i San Francisco i maj 2020 p\u00e5 konferencen IEEE Symposium on Security and Privacy.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Kilde: 3dnews.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043c\u0435\u0446\u043a\u043e-\u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0434\u043e\u0431\u0440\u043e\u0432\u043e\u043b\u044c\u0446\u0435\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0430 \u0438 \u0441\u0440\u0430\u0432\u043d\u0438\u043b\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0448\u0435\u0441\u0442\u0438\u0437\u043d\u0430\u0447\u043d\u044b\u0445 \u0438 \u0447\u0435\u0442\u044b\u0440\u0451\u0445\u0437\u043d\u0430\u0447\u043d\u044b\u0445 PIN-\u043a\u043e\u0434\u043e\u0432 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0442\u0435\u0440\u0438 \u0438\u043b\u0438 \u043a\u0440\u0430\u0436\u0438 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430 \u043b\u0443\u0447\u0448\u0435 \u0431\u044b\u0442\u044c \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u0445\u043e\u0442\u044f \u0431\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u043a\u0430\u0436\u0435\u0442\u0441\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430. \u0422\u0430\u043a \u043b\u0438 \u044d\u0442\u043e? \u0424\u0438\u043b\u0438\u043f\u043f \u041c\u0430\u0440\u043a\u0435\u0440\u0442 \u0438\u0437 \u0418\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0418\u0422-\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0425\u043e\u0440\u0441\u0442\u0430 \u0413\u0451\u0440\u0446\u0430 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0411\u043e\u0445\u0443\u043c\u0430 \u0438 \u041c\u0430\u043a\u0441\u0438\u043c\u0438\u043b\u0438\u0430\u043d \u0413\u043e\u043b\u043b\u0430 \u0438\u0437 \u0418\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":74250,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-74249","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Unders\u00f8gelse: for sikkerhed er 6-cifrede PIN-koder ikke bedre end 4-cifrede | ProHoster","description":"Et tysk-amerikansk forskerteam med frivillige","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/issledovanie-dlya-bezopasnosti-shestiznachnye-pin-kody-ne-luchshe-chem-chetyrehznachnye","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435: \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0448\u0435\u0441\u0442\u0438\u0437\u043d\u0430\u0447\u043d\u044b\u0435 PIN-\u043a\u043e\u0434\u044b \u043d\u0435 \u043b\u0443\u0447\u0448\u0435, \u0447\u0435\u043c \u0447\u0435\u0442\u044b\u0440\u0435\u0445\u0437\u043d\u0430\u0447\u043d\u044b\u0435 | ProHoster","og:description":"\u041d\u0435\u043c\u0435\u0446\u043a\u043e-\u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0434\u043e\u0431\u0440\u043e\u0432\u043e\u043b\u044c\u0446\u0435\u0432","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/issledovanie-dlya-bezopasnosti-shestiznachnye-pin-kody-ne-luchshe-chem-chetyrehznachnye","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-15T17:42:16+00:00","article:modified_time":"2020-03-15T17:42:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"74249","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:18:28","updated":"2022-10-02 00:04:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/74249","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=74249"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/74249\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/74250"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=74249"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=74249"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=74249"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}