The Spanner logo
    • Home
    • Blog
      • Blog home
      • RSS
    • Login
    • Home
    • Blog
      • Blog home
      • RSS
    • Login
    The Spanner logo

    The Spanner
    Web security blog

    Made by Gareth Heyes
    Follow me on Twitter: @garethheyes

    Javascript for hackers!

    Hackvertor logo
    Shazzer logo
    My Github account
    Recent posts
    Introducing Feedworm: A Privacy-First RSS Reader That Lives in DevToolsSpeedy RSVP extensionAutoVaderHackvertor history and tag finderShadow Repeater v1.2.3 releaseBurp Hackvertor v2.1.24 releaseHacking roomsXSSing TypeErrors in SafarivalueOf: Another way to get thisMaking the Unexploitable Exploitable with X-Mixed-Replace on FirefoxThe curious case of the evt parameterCSS-Only Tic Tac Toe ChallengeRewriting relative urls with the base tag in SafariBypassing DOMPurify with mXSSNew IE mutation vectorHow I smashed MentalJSMentalJS DOM bypassAnother XSS auditor bypassXSS Auditor bypassBypassing the IE XSS filterUnbreakable filterMentalJS bypassesmXSSJava SerializationBypassing the XSS filter using function reassignmentRPOSandboxed jQueryX-Domain scroll detection on IE using focusEpic fail IEnew operatorDecoding complex non-alphanumeric JavaScriptHacking FirefoxDOM ClobberingBypassing XSS AuditorThe evolution of codeNon-Alpha PHP in 6-7 charsetTweetable PHP-Non AlphaMentalJS for PHPOpera x domain with video tutorialSandboxing and parsing jQuery in 100ms

    Authorisation techniques

    By Gareth Heyes (@hackvertor)

    Published 19 years ago • Last updated March 22, 2025 • ⏱️ < 1 min read

    ← Back to articles

    KeyPress Authorisation

    Continuing on from my previous post I've developed another authorisation technique. The idea this time is to enable a user to pick a simple password and make it stronger. It works by either generating a random password or a user enters a desired one, then the system creates a timing per character so for example the user picks "cat" as a password, the system then tells the user to hold "C" for 2 seconds, "A" for 0 seconds and "T" for 1 second.

    I've called this technique "Heyes KeyPress Authorisation" (I'm no marketing expert :) ), the system currently only accepts alpha input but it could be developed to accept a full character set. Javascript is required to perform the login and I have tested it on multiple browsers Safari, IE 6, Firefox and it seems to work fine.

    Demo here:- KeyPress Auth

    Source here:- HeyesKeyPressAuth

    Token based authorisation

    My previous post :- Token based auth

    ← Back to articles