3 ms·

> All my passwords are stored in a Password Manager. And that is the problem! I've never bought the hype about a different password for each service. I've 4 p

by pif 4y ago

> All my passwords are stored in a Password Manager. And that is the problem! I've never bought the hype about a different password for each service. I've 4 passwords in total, sorted by importance, and each new service gets the one most appropriate according to the data it manages. So, having Hacker News pirated means my Quora account is at risk: so what? And really important stuff (read: banks) is protected by two-factor authentication anyway. > In the boring analogue world - I am pretty sure that I'd be able to convince a human that I am who I say I am. Not really, if you have spent your whole life introducing you as "qjkhgjbhjhgjhgj" to one person and "opiqnbasvwnezc" to the other.

bigDinosaur 4y ago
This literally is saying that if someone compromises one of the passwords you use for all the important stuff like banking, they've literally just gained access to every important account you have which can be life changing in a very bad way. Props on using four passwords instead of just one, though.
- pif 4y ago
  > And really important stuff (read: banks) is protected by two-factor authentication anyway.
  - bigDinosaur 4y ago
    Still a bad idea, you're leaking information for social engineering attacks either against you or the company holding your account. Anyway your 2FA is acting to make your passwords actually unique, in a sense, I suppose. Not that I'd necessarily trust it on its own.
    - pif 4y ago
      The worst information leaks are passwords written on a post-it, and they are usually the outcome of obnoxious safety rules.
emaro 4y ago
> I've never bought the hype about a different password for each service. It's not a hype. Any reasonable security expert will recommend you this. Because passwords evidentially get leaked. And most people are (I'm sure you aren't) vulnerable to social engineering, especially if the attacker has access to other accounts like HN or Quora. I surely hope that you don't reuse the password of your email account.
- pif 4y ago
  > I surely hope that you don't reuse the password of your email account. That one is very important for me and is not reused at the moment. > Any reasonable security expert will recommend you this. Not when you get to the point that you cannot manage them in your head any more, and you need one more service (or piece of hardware) that you need to protect (via a password and/or physically).
fzeroracer 4y ago
> So, having Hacker News pirated means my Quora account is at risk: so what? This is all well and good until you encounter hackers that sell off your account(s) for spam or other malicious reasons and pretend to be you while doing whatever illegal services or transactions you can think of. If you can't think of reasons why hackers can't make your life hell when they get access to your accounts then you're not thinking hard or creatively enough.
Vladimof 4y ago
I used to do that 5+ years ago.... Password manager is much easier...

by pif 4y ago

bigDinosaur 4y ago

This literally is saying that if someone compromises one of the passwords you use for all the important stuff like banking, they've literally just gained access to every important account you have which can be life changing in a very bad way. Props on using four passwords instead of just one, though.

pif 4y ago
> And really important stuff (read: banks) is protected by two-factor authentication anyway.
- bigDinosaur 4y ago
  Still a bad idea, you're leaking information for social engineering attacks either against you or the company holding your account. Anyway your 2FA is acting to make your passwords actually unique, in a sense, I suppose. Not that I'd necessarily trust it on its own.
  - pif 4y ago
    The worst information leaks are passwords written on a post-it, and they are usually the outcome of obnoxious safety rules.

emaro 4y ago

> I've never bought the hype about a different password for each service. It's not a hype. Any reasonable security expert will recommend you this. Because passwords evidentially get leaked. And most people are (I'm sure you aren't) vulnerable to social engineering, especially if the attacker has access to other accounts like HN or Quora. I surely hope that you don't reuse the password of your email account.

pif 4y ago
> I surely hope that you don't reuse the password of your email account. That one is very important for me and is not reused at the moment. > Any reasonable security expert will recommend you this. Not when you get to the point that you cannot manage them in your head any more, and you need one more service (or piece of hardware) that you need to protect (via a password and/or physically).

fzeroracer 4y ago

> So, having Hacker News pirated means my Quora account is at risk: so what? This is all well and good until you encounter hackers that sell off your account(s) for spam or other malicious reasons and pretend to be you while doing whatever illegal services or transactions you can think of. If you can't think of reasons why hackers can't make your life hell when they get access to your accounts then you're not thinking hard or creatively enough.

Vladimof 4y ago

I used to do that 5+ years ago.... Password manager is much easier...