4 ms·
I do the same thing but worry about a nation state or rich enough hackers to just take over the project and add nefarious code. I’ll never audit the code and m
by DougN7 5y ago
I do the same thing but worry about a nation state or rich enough hackers to just take over the project and add nefarious code. I’ll never audit the code and make sure it produces the binary I get from the Apple store. So I’ve started adding my own “salt” - I type an extra character or two (same for all passwords) to the end of every password I enter. It’s the easiest way to protect against not being able to trust my local password app that I can think off.
- brokenmachine 5y agoIf the hacker can decrypt your whole password safe and view all your plaintext passwords, I think they'll work out your scheme.
- BenjiWiebe 5y agoUnless the hacker mass decrypts a couple million passwords, in which case one person's passwords that don't work for the login bot probably won't catch the hacker's attention.
- DougN7 5y agoI don’t understand how. If I record that my password for Google is xyzzy, but in reality it’s xyzzy123, and 123 is part of every password but not recorded anywhere (other than my mind), how would they work that out? They’d just see that none of my passwords worked. If there is a weakness to this system please let me know.