3 ms·
If the goal is to avoid having to remember strong passwords, then a strong password generator + a paper journal is resistant to more threat models and should be
by sagichmal 7y ago
If the goal is to avoid having to remember strong passwords, then a strong password generator + a paper journal is resistant to more threat models and should be preferred.
Password managers without transparent sync and autofill UX are a half-product at best.
- greedo 7y agoTyping a long, complex password on a mobile device is tedious. Much easier to use 1Password.
- sagichmal 7y agoThe pain of doing that is nonzero, but much less than the pain of keeping the passwords synced manually, or through an intermediary like Dropbox (permissions, having Dropbox installed and running on my phone, etc.)
- sixstringtheory 7y agoIt’s probably similar but I’m not convinced it’s preferred. If I lose that journal anyone can read it. If I lose my computer it is most likely locked already, and if not it (as well as 1PW) autolocks itself after a short time. Also like I mentioned elsewhere, I do sync my vaults, but only using the local WiFi option.
- sagichmal 7y agoThere are nearly infinite vectors to exfiltrate files from your computer, the vast majority of which are currently unknown to you, and would be entirely undetected. And what's more, most of those vectors can be done from anywhere on the planet. There is only one way to exfiltrate information from a notebook, it requires physical proximity, and it's very likely that you would notice. Every rational threat model for almost every human on the planet (excepting perhaps major political, cultural, or economic figures) would conclude in the paper journal being the better (safer) choice.
- sixstringtheory 7y agoYou made a lot of good points here. Thanks for sticking with me and having a nice conversation!