Chris Hirby
19th February 2005 - 06:55 AM
the keys you type, and the relationships between the keys you type.
the timing between certain keys can give away hand motion, and also time gaps between words may signal a mental strategy. not just the words, but the time, being an attribute worth recording.
with regard to what Ovidiu is saying, I think the longer the better. the longer a string of words that you produce, the higher the security that can be established. this typing need not be the same as a recorded "password" but the style in which you type it would identify you. again, timing and relationships.
though, we would need new text inputs which care about the timing on keystrokes. or simply new script event handling...
[form]
please enter some text so that we may identify you based on your typing[br /]
[input type="text"
onkeypress="document.getElementById("keylog").update_keylog(event,now());" /][br /]
[input type="hidden" name="keylog" id="keylog"]
[/form]
[script type="text/javascript"]
document.getElementById("keylog").update_keylog = function (evt, when) {
this.setAttribute("value",this.getAttribute("value") + evt.keyCode + ", " + when + "; ");
}
[/script]
then the server might analyze this data in lieu of some previously recorded logs
perhaps this is how it works. despite if this is how they are doing it, i believe it could indeed work this way

-chris