5 ms·
Protecting Secrets from Computers (2023)
- rho138 3y ago[flagged]
- deleted 3y ago[deleted]
- Clamchop 3y agoStill reading but this is an interesting position to juxtapose with the repeated axiom that thou shalt not roll thine own crypto. Instead, the claim here is that you cannot trust crypto that you didn't roll yourself. Indeed, maybe you should compute it by hand! Ha! I love having my beliefs challenged. Completely impractical but very fun.
- chaxor 3y agoOnly keep your passwords in your head. That way only one person can know them - you. And then, you can forget them, and now no-one knows them. As we continually have told to and is pushed upon us by IT - this is the most secure system to have. The one that no one can use.
- chaosite 3y agoPasswords are useless if only you know them. You can use private keys like that, but people are not expected to remember them.
- WolfeReader 3y agoMaybe I'm dumb, but how do you read the article?
- sophacles 3y agoClick the red PDF button. Or click the "view all formats" button to select your prefered option.
- WolfeReader 3y agoAh, you click on "All Formats". Which is apparently a synonym for the verb "read".
- ramon156 3y agoNo! you click on the pdf button which... uh... opens an empty firefox tab
- montecarl 3y agohttps://dl.acm.org/doi/pdf/10.1145/3623614 https://dl.acm.org/doi/pdf/10.1145/3623614
- hairyplanner 3y agoMy biggest challenge as I’m getting older is remembering my long secret key. Even with a password manager that requires me to remember only a few passphrases (personal and work being two), there is a non zero chance now that a fall and a concussion would lock me out of my password manager. Anyone else have a solution or a suggestion for this problem?
- charcircuit 3y agoWrite it down on a piece of paper.
- Vecr 3y agoWear a helmet and hip pads, but failing that split the password in half (as in literally the first half and the second half, don't try to get fancy with crypto) and give the halves to two people unlikely to collude. Your computer will no longer have 5th amendment protection, though.
- kilmanio 3y agoOr better, use `Shamir's Secret Sharing` https://en.wikipedia.org/wiki/Shamir%27s_secret_sharing https://en.wikipedia.org/wiki/Shamir%27s_secret_sharing
- couchand 3y agoGP specifically called out, "don't try to get fancy with crypto" and I'm inclined to agree with them for this use case.
- SSNLF 3y agoYou could try Entropy Keycrypt -> https://entropykey.com/features https://entropykey.com/features
- a_imho 3y agoBiometrics?
- 3y ago
- Klaus23 3y agoIs there a good pen-and-paper OTP authentication mechanism?
- bandie91 3y agootpw PAM module does this. https://manpages.debian.org/buster/libpam-otpw/pam_otpw.8.en.html https://manpages.debian.org/buster/libpam-otpw/pam_otpw.8.en...
- Klaus23 3y agoI was talking about a point discussed in the article. There is an attack on OTP because the attacker can change the message if there is no hash-like authentication of the message's correctness. I asked if there was a pen-and-paper way to authenticate an OTP message.
- 127361 3y agoWhat about reducing our usage of the Internet and using local resources instead? Personally I have local mirrors of various code repositories, and thousands of ebooks. If you want to nearly eliminate all surveillance, then you can air-gap your computer? So we shift back from the collective (networked) systems to a more individualistic local information store? We already have local AI models, which is a step in the right direction.
- Logans_Run 3y ago* Pricing Pricing and access depends on your membership or subscriptions with ACM. Purchase this Article Purchase this Article: Protecting Secrets from Computers Terence Kelly Purchase Article Purchase Article Non Member$15.00 ACM Professional Member$10.00 ACM Student Member$5.00 Already an acm Member? Sign In or become a member deepdyve logo Available at DeepDyve The Largest Online Rental Service for Scholarly Research Price: $0.00 * I.A. or similar link kindly requested please. TYIA
- knowaveragejoe 3y agoAll you have to do is click "all formats" and select one. https://queue.acm.org/detail.cfm?id=3623614&doi=10.1145%2F3623614 https://queue.acm.org/detail.cfm?id=3623614&doi=10.1145%2F36...