4 ms·
This is a far more enthusiastic response than I expected to this service. Just to note I'm not (currently) planning on building this service although given the
by petenixey 15y ago
This is a far more enthusiastic response than I expected to this service. Just to note I'm not (currently) planning on building this service although given the demand maybe I should be.
There are a few interesting points that have come out of this:
1. I anticipated this service appealing to someone who's afraid of computers, I did not expect such a bullish response from people who are very much in control of their machines
2. There is very good (real world) precedent for this in Lifelock who sell a somewhat shady service which packages up some free services the US government offers and then resells them as a package to consumers. The company is KP backed and has made a fortune from this.
3. People have mentioned this being a potential one-key-to-rule-them-all security vulnerability. While storing your passwords anywhere is a vulnerability, this particular one already exists in the form of "forgotten password". Most (but not all) accounts have a "forgotten password" facility which sends a login to your email. Access your email and you've accessed everything with a "forgotten password" facility
4. I believe that as @tylermenezes pointed out, one could avoid storing unencrypted passwords by using your deadbolt password as a two-way encryption key.
It would be interesting to hear the thoughts of security experts on such a solution.