D-Nice

6 ms·

1.
by D-Nice 5y ago
Vaults, self-hosting, all these needless complications imo for what should be simple. Just give me a secure deterministic password from a website address + master pass combo. That's exactly what my project, https://app.srspa
2.
by D-Nice 5y ago
Why is every and any TOR and sometimes VPN user deemed a DoS attack... it discriminates against users who value privacy by forcing hCaptcha on them by default. Worst of all... it could be a de-anonymization attack as well, hence why I as a
3.
by D-Nice 5y ago
It's a definite improvement, and good point indeed regarding phishing... just as your answer precludes, a whole different authentication mechanism is needed to avoid phishing, that is why unfortunately that couldn't make my list.
4.
by D-Nice 5y ago
As someone whose main project surrounds passwords, I could appreciate a future without passwords, because I consider most existing solutions to be quite poor. However, this feels more like having your sheep be herded by a fox... Many here h
5.
by D-Nice 6y ago
This reads like an April Fools joke, and I'll give the author the benefit of the doubt on that one as the author's company literally works in the cryptocurrency space, except they apparently refer to themselves as a cryptoledger.
6.
by D-Nice 6y ago
Run noJS by default with something like uMatrix/uBlock Origin, and never worry about this or similar problems again. All parts of a page for me, even 1st party, have JS disabled... you'd be surprised, most useful ones work complet
7.
by D-Nice 6y ago
Sigh, I remember a similar experience. It was a third-party rep they pushed us to, but we would be asking for ways to re-architect one thing we already had setup on AWS, and all they would do is just try and upsell us on random offerings th
8.
by D-Nice 6y ago
Try srspass.com which runs argon2id in the browser. Takes about 3 seconds on my ARM phones for the unlock, which uses quite heavy argon2id parameters, above the recommended memory and iterations. I don't think a 3s wait for a session,
9.
by D-Nice 6y ago
I completely agree on server-side derivation being flawed, which is why I made SrsPass, which derives child passwords for you client side, you can use across accounts, and ensures even if you end up making a password on a shitty site that p
10.
by D-Nice 6y ago
LastPass has essentially put a gun to the head of its free users. It has probably gained much traction, by offering a free service. Yet now, as it isn't actually FOSS, they are able to make a change to its model you can do nothing abou
11.
by D-Nice 6y ago
Speaking of competitors and alternatives to this. I've used a version of my own for years, and have recently started working on a FOSS password generator and manager, called SrsPass. Would love feedback on it, and it has an open-spec s