2 ms·
I guess that is something of a double-edged sword then. You might force someone to use a weaker password, but then hopefully they wouldn't be keeping it in a pl
by 67726e 13y ago
I guess that is something of a double-edged sword then. You might force someone to use a weaker password, but then hopefully they wouldn't be keeping it in a place where they could simply copy/paste it. This really starts to delve into the whole "security is a gradient with tradeoffs" situation.
- aestra 13y ago>hopefully they wouldn't be keeping it in a place where they could simply copy/paste it. ??? Passwords can be simple copy/pasted from. Encrypted files can be simply copy/pasted from.
- 67726e 13y agoI'm assuming in this scenario that they would be keeping passwords in a plaintext file. If they kept passwords in an encrypted file, wouldn't they need to decrypt it? Wouldn't you presumably have a strong password to decrypt it? Where is that kept? How strong must one's password be when that password is keeping other passwords secure? If they can remember that password, why can they not remember others?
- maxerickson 13y agoRemembering 1 password is easier than remembering dozens of them. Reusing passwords is not a great idea, so dozens of passwords is a real concern. It's also the case that disabling paste doesn't do anything to stop a user from storing their passwords in an unencrypted file.
- dllthomas 13y agoBecause remembering one strong password is way easier than remembering 50 strong passwords.