3 ms·

It actually does, provided the passwords aren't stored in plaintext. Even something ridiculously weak like a SHA-1 hash isn't going to be cracked if the passwo

It actually does, provided the passwords aren't stored in plaintext. Even something ridiculously weak like a SHA-1 hash isn't going to be cracked if the password is 16 characters long and completely random.

ianseyer 9y ago
provided: - the passwords aren't stored in plaintext or any other compromised hashing mechanism - you autogenerated your password - your password manager does not get compromised saying "it actually does" is a bit of absolutist stretch...
- arghwhat 9y ago
  Furthermore, none of this is a side-effect of using a password manager. It just makes doing so more convenient.
  - aidenn0 9y ago
    Within a margin of error, zero people can remember 20 16-character random alphanumeric passwords. Therefore it is only possible using some sort of password manager, whether it be something like 1password or an old-fashioned notebook.
    - majewsky 9y ago
      > Within a margin of error, [the value of a measure is] zero. Nitpick: Zero does not have a magnitude, so "a margin of error" is not remotely well-defined here.
      - aidenn0 9y ago
        Nitpick nitpick: margin of error can be either absolute or relative.
        arghwhat 9y ago
        Nitpick nitpick nitpick: "margin of error" without any value effectively means "the following value has no meaning at all", as the margin of error is unspecified.
    - arghwhat 9y ago
      You need to specify your margin of error. ± the full population of humans on Earth is "a margin of error". I may be an outlier, but I certainly remember 10+ 20-25 character random full-printable-ASCII passwords, some of which don't let a password manager handle them, others which I don't want to have in a manager. And then there's my password manager master password, which is close to 70 characters long. And I have shitty memory—I wouldn't be able to remember what happened more than a few days ago if my life depended on it.
lightedman 9y ago
"Even something ridiculously weak like a SHA-1 hash isn't going to be cracked if the password is 16 characters long and completely random." Uh, yea, about that - that's how we cracked 4chan Tripcodes. 16-character SHA-1 is dead in just a few seconds with a GPU and that was, what, a decade ago?

ianseyer 9y ago

provided: - the passwords aren't stored in plaintext or any other compromised hashing mechanism - you autogenerated your password - your password manager does not get compromised saying "it actually does" is a bit of absolutist stretch...

arghwhat 9y ago
Furthermore, none of this is a side-effect of using a password manager. It just makes doing so more convenient.
- aidenn0 9y ago
  Within a margin of error, zero people can remember 20 16-character random alphanumeric passwords. Therefore it is only possible using some sort of password manager, whether it be something like 1password or an old-fashioned notebook.
  - majewsky 9y ago
    > Within a margin of error, [the value of a measure is] zero. Nitpick: Zero does not have a magnitude, so "a margin of error" is not remotely well-defined here.
    - aidenn0 9y ago
      Nitpick nitpick: margin of error can be either absolute or relative.
      - arghwhat 9y ago
        Nitpick nitpick nitpick: "margin of error" without any value effectively means "the following value has no meaning at all", as the margin of error is unspecified.
  - arghwhat 9y ago
    You need to specify your margin of error. ± the full population of humans on Earth is "a margin of error". I may be an outlier, but I certainly remember 10+ 20-25 character random full-printable-ASCII passwords, some of which don't let a password manager handle them, others which I don't want to have in a manager. And then there's my password manager master password, which is close to 70 characters long. And I have shitty memory—I wouldn't be able to remember what happened more than a few days ago if my life depended on it.

lightedman 9y ago

"Even something ridiculously weak like a SHA-1 hash isn't going to be cracked if the password is 16 characters long and completely random." Uh, yea, about that - that's how we cracked 4chan Tripcodes. 16-character SHA-1 is dead in just a few seconds with a GPU and that was, what, a decade ago?