5 ms·
Right, but it may reboot at the most inopportune moments, like after the battery runs out, and where you may not have access to the 20 character long master pas
by herge 10y ago
Right, but it may reboot at the most inopportune moments, like after the battery runs out, and where you may not have access to the 20 character long master password which is impossible to remember.
- koolba 10y agoHow about a QR code on a business card kept in your wallet? Scan the QR code (with you phone's camera) to input the long passphrase (or even better just random bits). There could still be a short pin/passphrase in addition to that. Keepass allows for something similar by having a local file + passphrase to unlock a password vault. Backups of the QR code could be as easy as photocopying it!
- Dylan16807 10y agoIf you're putting it in your wallet, just use plaintext.
- koolba 10y ago> If you're putting it in your wallet, just use plaintext. That has the same issue of not being able to input it into the phone. The QR code can be easily scanned. Sure OCR of plain text is possible but some more standardized like a QR Code would be better.
- Dylan16807 10y agoI'd rather just type than fuss with getting a QR code to scan in possibly-bad lighting. I just tested a password of 30 random lowercase letters, which is total overkill for security, and it took less than 30 seconds to type into my phone. Doing that perhaps once a month, or once you find a charger after your battery dies, is no problem.
- koolba 10y ago> I'd rather just type than fuss with getting a QR code to scan in possibly-bad lighting. Nothing says you can't do either, or even both[1]. The idea of using a QR Code is so that mom/dad/grandpa/grandma can use a long password to unlock their phone without having to type it in. Bonus points if the QR Code itself is in the shape of a key! [1]: Which would be "something you have" + "something you know".
- Pxtl 10y agoA ring or bracelet with an NFC tag in it. Well, a ring is probably too small for a proper NFC tag, but either way: NFC jewellery.
- wyldfire 10y agoThey absolutely make rings w/NFC tags. At least men's rings, I assume they may do it for women's too.
- Pxtl 10y agoNeat. Does android support NFC for the bootup FDE decrypt?
- wyldfire 10y agoI doubt it. But you might not prefer it to, depending on the threats you want to secure against. If you had extremely valuable secrets, someone could just execute you and use your NFC jewelry to unlock those secrets.
- desiderantes 10y agoOr rip off your fingers if you use your fingerprints to unlock, or just drug you with scopolamine to unlock it.
- Pxtl 10y agoI'm looking for normal corporate security here, not fighting the KGB.
- athenot 10y agoReally? That is something I dreamed about for a long time. A small object on the finger is the least obstructive form factor and becomes part of self. But unlike a fingerprint, a ring can be replaced if somehow compromised.
- 10y ago
- ashitlerferad 10y agoUse Diceware and you will have no problem remembering a secure passphrase. https://en.wikipedia.org/wiki/Diceware https://en.wikipedia.org/wiki/Diceware