3 ms·
Yeah, I reacted to that too. It's like nonchalantly saying that you have all your passwords written on post-it notes at your desk. The topic of discussion shou
by Drakim 3y ago
Yeah, I reacted to that too. It's like nonchalantly saying that you have all your passwords written on post-it notes at your desk.
The topic of discussion shouldn't be how to secure your desk from spying eyes, but about why having post-it notes with passwords is bad practice and just a bad idea overall.
If your private github repo accidentally goes public, the response should be "that's annoying but ultimately harmless", anything else is misguided.
- bluGill 3y agoPostits for passwords are better practice than memorizing passwords. If you can memorize it, it is a bad password. Password managers are better yet, but you still need the master password. The problem is not keeping those passwords in a secure location, treat it like a stack of $100 bills.
- Drakim 3y agoFor your home desk? I can buy that. But for your work desk? No way is that even remotely more acceptable than having a memorizable password.
- bluGill 3y agoYou don't leave them on the desk. Lock them up with a key. Every office gives you file cabinet that locks.
- Drakim 3y agoThat's basically an analog password manager, we have gone full circle. Or we return the metaphor to github repos, having a separate cabinet is like having a secret vault so that secrets are not directly in plain view in the repo itself, which is exactly what you should be doing.