5 ms·
I have a clear box of about 50 colorful dice on my desk. I can shake the box anytime I need a strong password. Dicewords.com word lists are an easy way to gener
by todd8 7y ago
I have a clear box of about 50 colorful dice on my desk. I can shake the box anytime I need a strong password. Dicewords.com word lists are an easy way to generate strong passwords completely off-line. If that isn’t a requirement, a SHA256 hash of a photo of the box contents after shaking can easily generate 256 bits of entropy over and over.
- hachibu 7y agoThat's awesome. It would be cool to somehow automate the shaking of the box, taking a picture and making a SHA hash.
- jjeaff 7y agoWouldn't a good psuedorandom number generator that takes measures from different sources in the computer and ambient room noise from the mic, mouse movements, etc be plenty of entropy while being much easier than having to shake a physical box and take a photo? That would be a lot harder to recreate and reverse engineer than getting a copy of the photo of the dice.
- todd8 7y agoYes, you might be right. I don't do top secret work, but I do want to protect my personal, business, banking, etc. information so I fiddle around with various approaches to generating passwords. I actually bought a small, very cheap, PC that I run Linux on expressly for the purpose of managing passwords. It never connects to a network and has software for generating gpg keys, certificates and passwords. I use it infrequently enough that each time I do it takes a lot of work to remember how I decided best to use it. What I use more than anything for 95% of my passwords is Apple's Keychain app. The information is backed up in the cloud and is available on my Apple computers, iPad, and iPhone. It's been a very helpful application, and I like how it's integrated into Apple's software. For important passwords I resort to the box of dice or my air-gaped little linux laptop.