3 ms·
I don't think this is good advice. An algorithm like this could easily be reverse engineered if someone had more than one. Considering how many places have pass
by nanodano 9y ago
I don't think this is good advice. An algorithm like this could easily be reverse engineered if someone had more than one. Considering how many places have password breaches it's not that inconceivable someone would get a hold of two of your passwords. The entropy is awful and there are 0 cryptographically secure psuedo random numbers being used.
Yahoo, Disqus, Experian, Tumblr, Adobe, LinkedIn, Dropbox, MySpace, Avast, DaniWeb, YouPorn, Trillian, Brazzers, Unreal Engine, PlayStation Network, Warframe, etc, etc, etc.
Here's a list of even more sites that have had passwords stolen:
https://haveibeenpwned.com/PwnedWebsites https://haveibeenpwned.com/PwnedWebsites
- djsumdog 9y agoYou need to be specifically targeted though. People rarely are. Most compromised accounts are discovered using automated scripts and credential stuffing (taking a compromised password and trying it on other websites). If you are being specifically targeted to that extent, a password manager may not be as helpful as you think .. and you probably have much bigger problems to worry about.