4 ms·
That's only true for very specific threat models. For most people, the limit in entropy for your passwords implied by keeping them all in your head makes them m
by MatthewWilkes 9y ago
That's only true for very specific threat models. For most people, the limit in entropy for your passwords implied by keeping them all in your head makes them more vulnerable than writing them down in a place with imperfect security.
- kybernetikos 9y agoI recently wrote a thing for myself to let me remember one password and generate different passwords for each of my accounts. https://github.com/kybernetikos/sinkless https://github.com/kybernetikos/sinkless I like it because there isn't any third party or service for me to trust, but I can still have unique complex passwords for each purpose. It feels pretty much the same as having them all in my head.
- deleted 9y ago[deleted]
- JetSpiegel 9y agoUntil you have to change a password.
- tzs 9y agoHe addresses that on the page he linked to.
- pishpash 9y agoHow do you deal with devices that do not support extensions?
- kybernetikos 9y agoPoorly at present, but it runs as a website on anything with a recent browser: https://kybernetikos.github.io/sinkless/ https://kybernetikos.github.io/sinkless/ and you can copy and paste, or there is a node script that will generate the same passwords. I'd like to make the UI work better in general, but in particular on mobile devices. But then I have many projects I'd like to make time for, and this one is probably usable enough for me for now.
- rkeene2 9y agoSimilar: https://webpass.rkeene.org/ https://webpass.rkeene.org/ Though it does syncing
- kybernetikos 9y agoThat's pretty cool. How does the syncing work? You should add emojis! :-)
- rkeene2 9y agoIt just posts an encrypted json blob to a CGI script that waits for another connection with the same ID. The script then connects those two connections so that anything one sends the other receives using a FIFO, so no disk involved and they can stream as much as they want to each other.