3 ms·
People might not share my sentiment but I think doing this is fine. Yes, all your points are true, but they require the attacker to single you out specifically,
by etler 13y ago
People might not share my sentiment but I think doing this is fine. Yes, all your points are true, but they require the attacker to single you out specifically, and try and figure out your process. Frankly, unless you're a very important person to warrant someone singling you out, an attacker is going to go after the countless easier targets that do not require personal attention.
- cjh_ 13y agoOne assumption in security / cryptography is that the process is always known, otherwise it is security by obscurity. This is still better than password reuse as the plaintext doesn't disclose your other identified without further effort, however the users should be under no illusion of bullet-proof security.