4 ms·
yes truly awful, I should be ashamed for making it. Why do I make anything. Thank you for the feedback
by ca98am79 1y ago
yes truly awful, I should be ashamed for making it. Why do I make anything. Thank you for the feedback
- TimTheTinker 1y agoSorry, nothing personal. :) No shaming/accusation intended - all I intended was a warning to potentially naive readers about the security principles involved. Keep building, the UX is great. Unfortunately, security stuff has some pretty hard lines we had to start drawing and moving further forward due to excellent security research (of whatever color hat)...
- ca98am79 1y agothanks. I think security is super important, however I do not think it is necessary to obsess over it for no reason. If I want to share a dev password with someone, I can tell them the login over discord and then send them a link to temp.pw. Easy peasy and absolutely no security risk. This is why I created it.
- TimTheTinker 1y agoSounds like the temp.pw server is owned by you and you're willing to trust AWS with your secrets. So your security posture with respect to this service is significantly different from people on the web.
- BrandoElFollito 1y agoOr you just tell them the password.
- TimTheTinker 1y agoThis is a much better way.
- BrandoElFollito 1y agoYes, especially that you can use a "human-readable" password such as galleria-blunderer-tutor-omit-nursing-unify which is easy to provide via voice
- BrandoElFollito 1y ago... and as secure as ljpvxzbygjnzmbfoazibgmpwmegwkmrlczybzxgbctdbqkmtdq
- BrandoElFollito 1y agoI do not think this was personal. As a security professional I have the same reaction. Security is hard, but not only in the technical area. The whole governance is not obvious for someone who did not have these threats on their radar. If you do security you need to be ready to get feedback you do not expect, in areas you may have not fully addressed.