Just an interesting authentication mechanism, which a customer of mine has asked me to test out for them as part of a pentest / security audit, and wondered if anyone has any experiences with it - good, bad or indifferent.

http://www.syferlock.com/

I can think of many ways one MIGHT be able to bypass it, or gain info over time, and plan to do  some testing (which I'll report here after I do,) but figured if anyone else here has already played with it, I don't want to reinvent the wheel.

Thanks.

hayabusa

Thanks for the reply, BillV.  It's looks to be an interesting concept / product, so I'm kind of pumped to be testing against something of a newer variety than I usually come across.  I likely won't actually do the analys and testing until early March, so there'll be a little hiatus here, but again, figured I'd get as much info as I could, so I'm not reinventing the wheel, if someone else has experiences with it.