5 ms·
Why people can't get it that passwords are plain stupid? I for once use the same password Azcbnm1]{} for all these websites requiring strong passwords. I don't
by theplumber 4y ago
Why people can't get it that passwords are plain stupid? I for once use the same password Azcbnm1]{} for all these websites requiring strong passwords. I don't care if my password has been leaked. Eventually all passwords are leaked.
- ranguna 4y agoAny recommendations as an alternative to passwords?
- resoluteteeth 4y agoFido/u2f can be used without passwords
- toomuchtodo 4y agohttps://news.ycombinator.com/item?id=31643917 https://news.ycombinator.com/item?id=31643917 https://fidoalliance.org/apple-google-and-microsoft-commit-to-expanded-support-for-fido-standard-to-accelerate-availability-of-passwordless-sign-ins/ https://fidoalliance.org/apple-google-and-microsoft-commit-t...
- m-p-3 4y agoI'd be okay with public keys, but Fido/U2F/WebAuthn is more secure and simple to handle from the user perspective.
- ranguna 4y agoI love the idea of hardware keys, but the issue with those is that everyone would have to get one, and that's only realistic on the long term. Also, a hardware key is much easier to get stolen then a password. On one side, passwords are breached of one or two websites, on the other side hardware keys get stolen and all your keys are out there. Another point against hardware keys is the current market: I'm trying to find a key with open source firmware with the ability to upgrade said firmware, but no luck so far. Good keys are all sold out or are being sold through crowd funding with months of waiting time. I'd love to use my EU eIDAS citizen card which requires a password to unblock (not a simple "touch to unlock" ) , which has signing capabilities, but I can't seem to find any usable software that allows me to expose my card as a fido device. So, for now I'll stick with my password manager.
- theplumber 4y agoWebauthn