Morumotto
Visual Authentication
Han Kessels
Hanamaru

Morumotto?

Visual Authentication
Overlap of images shares

How does it work?

?

Password?

Authentication can be hard to do right
- Some sites store your password in the clear
- Some sites even e-mail it to you
- Easy to guess password recovery questions

Password Reuse
As safe as the least secure site
(Ask Twitter...)

Tradeoff
between security and convenience

What can we do to improve this tradeoff?

One Time Passwords (OTP)
No need to remember a complicated password
Get a new password each time
Can be used only once

Share a single user ID between many sites

.com

morumotto.com

morumotto.com
OpenID provider service
One-Time-Passwords

morumotto.com
Visual authentication
Multi-factor
JRuby
Free

Firefox 3+
Safari 3+
Chrome
IE 6+
Opera 9+ (using bookmarklet)
No plugins!

Docomo
J2ME
Android
iPhone (web-app)
Soon:
AU
iPhone (native)

Secure Reset
Phishing Protection

OpenID Extensions
popup
checkid_immediate

Private Beta
Public in a few weeks
Please ask me for an account
han@87zero.com
@h4n
or register at
http://morumotto.com