3 ms·

Wholly on Zuck for using the same weak password. Password managers are easy, there is no excuse for a tech savvy person to use a bad password (and even worse, r

by jonknee 10y ago

Wholly on Zuck for using the same weak password. Password managers are easy, there is no excuse for a tech savvy person to use a bad password (and even worse, re-use the same bad password).

everly 10y ago
You're correct regarding the sentiment on HN but I don't think the general public sees it that way.
- jonknee 10y ago
  I can't imagine the generally public caring about Zuckerberg's passwords in any capacity at all.
brianwawok 10y ago
For stupid sites who cares? If someone wants my hackernews or reddit passwords, cool. I am not going to go copy paste passwords so my hacker news password is safe.
- jonknee 10y ago
  To each their own, but in this case if Zuck had used a password manager he wouldn't come out looking like a chump. And honestly it's easier to use one than type even a simple password--one keyboard shortcut and you're automatically logged in.
  - brianwawok 10y ago
    Assuming you are on the correct device with the correct manager installed.
- brbsix 10y ago
  There's no need for copy and paste. Quite a few password managers have browser plugins that will autofill or auto login. If you have multiple accounts, it's as simple as selecting the desired username from a dropdown list.
  - brianwawok 10y ago
    Except they miss: 1) Weird browsers like adblock for android 2) Coffee shop browsers 3) Borrowing someone's laptop browser Why would I do all of that to make my pinterest password more secure? I think I have logged in twice.
- stephenr 10y ago
  You're really not familiar with a password manager either built in to the browser, or with an extension/plugin? What's life like in 1998 btw?
  - brianwawok 10y ago
    Ya? How well do password managers work in the adblock browser on Chrome? Or at a Coffee shop? Or on my Mom's laptop? Huge PITA for little to no gain. If people want my pinterest password, have at it.
    - stephenr 10y ago
      > the adblock browser on Chrome? I don't even know what that means. > Or at a Coffee shop? What kind of coffee shop are you going to that you aren't using your own device? > Or on my Mom's laptop? Why does she need your password? Regardless, if she syncs with your account it will work fine. > Huge PITA It really isn't if you use the right tools. > little to no gain Secure, easy management of passwords is little to no gain?
mattmanser 10y ago
I'm a tech savvy person and still don't use a pwd manager. I have a base password with extra stuff added at the end that I can figure out from the domain name. I want to use a password manager but it seems to me to not be easy as you claim. It's nowhere near as easy as you hand wavingly claim it is. Last time I tried the one everyone said to use had been bought and everyone was saying don't use it, but the other alternative didn't work on mobiles (or something, I forget) properly. I even had one installed for a bit but it never seemed to work so I gave up. It's still a broken ux with a non-trivial cost of using it. I know I should use it, I know when I get hacked I will regret it. I do use 2 factor for the important stuff, because it works and is actually easy, unlike the bolted on clunkiness of password managers.
- aianus 10y ago
  Which one did you try? I've been using 1Password for years and it works great across all of my devices (automatically synced via Dropbox). No affiliation besides being a customer.
- jonknee 10y ago
  Yea, well it is that hand wavingly easy. Mobile has gotten a lot better over the years as well, especially on iOS because you can use TouchID to unlock the password manager. On desktop it could not be easier, I hit command-\ and it autofills the username and password for the current site I am using and if I have more than one login for that site there's a list of logins to use. You can activate it the other way around too by choosing a site from the password manager and it will open the site in your browser, auto-fill the login and then submit it so that you're ready to go. I would still use this setup even if my passwords were all simple to remember like yours are.
  - mattmanser 10y ago
    But his Twitter account was setup in 2009. In 2009 password vaults were poor and definitely weren't easy. That's what I was talking about. We're talking about accounts that are years old, not something he set up last week.

by jonknee 10y ago

Wholly on Zuck for using the same weak password. Password managers are easy, there is no excuse for a tech savvy person to use a bad password (and even worse, re-use the same bad password).

everly 10y ago

You're correct regarding the sentiment on HN but I don't think the general public sees it that way.

jonknee 10y ago
I can't imagine the generally public caring about Zuckerberg's passwords in any capacity at all.

brianwawok 10y ago

For stupid sites who cares? If someone wants my hackernews or reddit passwords, cool. I am not going to go copy paste passwords so my hacker news password is safe.

jonknee 10y ago
To each their own, but in this case if Zuck had used a password manager he wouldn't come out looking like a chump. And honestly it's easier to use one than type even a simple password--one keyboard shortcut and you're automatically logged in.
- brianwawok 10y ago
  Assuming you are on the correct device with the correct manager installed.
brbsix 10y ago
There's no need for copy and paste. Quite a few password managers have browser plugins that will autofill or auto login. If you have multiple accounts, it's as simple as selecting the desired username from a dropdown list.
- brianwawok 10y ago
  Except they miss: 1) Weird browsers like adblock for android 2) Coffee shop browsers 3) Borrowing someone's laptop browser Why would I do all of that to make my pinterest password more secure? I think I have logged in twice.
stephenr 10y ago
You're really not familiar with a password manager either built in to the browser, or with an extension/plugin? What's life like in 1998 btw?
- brianwawok 10y ago
  Ya? How well do password managers work in the adblock browser on Chrome? Or at a Coffee shop? Or on my Mom's laptop? Huge PITA for little to no gain. If people want my pinterest password, have at it.
  - stephenr 10y ago
    > the adblock browser on Chrome? I don't even know what that means. > Or at a Coffee shop? What kind of coffee shop are you going to that you aren't using your own device? > Or on my Mom's laptop? Why does she need your password? Regardless, if she syncs with your account it will work fine. > Huge PITA It really isn't if you use the right tools. > little to no gain Secure, easy management of passwords is little to no gain?

mattmanser 10y ago

I'm a tech savvy person and still don't use a pwd manager. I have a base password with extra stuff added at the end that I can figure out from the domain name. I want to use a password manager but it seems to me to not be easy as you claim. It's nowhere near as easy as you hand wavingly claim it is. Last time I tried the one everyone said to use had been bought and everyone was saying don't use it, but the other alternative didn't work on mobiles (or something, I forget) properly. I even had one installed for a bit but it never seemed to work so I gave up. It's still a broken ux with a non-trivial cost of using it. I know I should use it, I know when I get hacked I will regret it. I do use 2 factor for the important stuff, because it works and is actually easy, unlike the bolted on clunkiness of password managers.

aianus 10y ago
Which one did you try? I've been using 1Password for years and it works great across all of my devices (automatically synced via Dropbox). No affiliation besides being a customer.
jonknee 10y ago
Yea, well it is that hand wavingly easy. Mobile has gotten a lot better over the years as well, especially on iOS because you can use TouchID to unlock the password manager. On desktop it could not be easier, I hit command-\ and it autofills the username and password for the current site I am using and if I have more than one login for that site there's a list of logins to use. You can activate it the other way around too by choosing a site from the password manager and it will open the site in your browser, auto-fill the login and then submit it so that you're ready to go. I would still use this setup even if my passwords were all simple to remember like yours are.
- mattmanser 10y ago
  But his Twitter account was setup in 2009. In 2009 password vaults were poor and definitely weren't easy. That's what I was talking about. We're talking about accounts that are years old, not something he set up last week.