gfsadhfsd

4 ms·

1.
by gfsadhfsd 10y ago
It's not really friendly to mobile sync, so if you're heavily into that, it's not a full solution. I'm sure you can find a way to securely push the file to the phone as an exercise to the reader, but it would probably in
2.
by gfsadhfsd 10y ago
What? Where did I say I share these passwords? I don't. Go up to my top post. Passwords of any importance are unique, also random, and stored in a text file in an encrypted volume (with a unique, strong, memorized key). The only non-un
3.
by gfsadhfsd 10y ago
If it works for you, great. Maybe I was being deliberately controversial calling xkcd/diceware bullshit. Kudos for raising bad password awareness and improving practices, I suppose. But, I still contend it basically knocks down a straw
4.
by gfsadhfsd 10y ago
Out-of-touch SV types discover the single-wide trailer, decide to make crappy ones from containers and overcharge for them. You know, Warren Buffet already has that business model and moats don't get a lot wider than Berkshire Hathaway
5.
by gfsadhfsd 10y ago
Please elucidate. Misinformation like, "Always use a reputable cloud password manager, like LastPass?" Along with a trusty antivirus, am I right? To be further contrarian, if the common man is going to use a password manager, use
6.
by gfsadhfsd 10y ago
> How many 12+ character passwords are you able to memorize? As I need to enter on a regular basis. In practice, no more than half a dozen. Usually I have 3 or 4 in use. Might be work, personal, and a couple for crypto. > How long doe
7.
by gfsadhfsd 10y ago
Nope. 94^12 ~= 4.76e23 > 7776^6 ~= 2.21e23. And typing 12 characters from muscle memory is faster than learning and typing "limbdumaslaterjuramondohalf", which is what diceware^6 just gave me. The supposed mnemonic value of dic
8.
by gfsadhfsd 10y ago
No: Antitrust. There's no excuse for Amazon selling and profiting from counterfeits though. Buck stops with them.
9.
by gfsadhfsd 10y ago
If it's really ultrasensitive, it's 12+ character random ASCII string committed to muscle memory only. No horse battery stapling bullshit.
10.
by gfsadhfsd 10y ago
Also, I do not keep the encrypted volume in the cloud. It's only on my trusted device. If it's important enough to secure the password, it's important enough to bring the device. Further, I've used variations of the same
11.
by gfsadhfsd 10y ago
Flat text file on an encrypted volume. I use cat or vi for editing, and grep for reading. If it's ultrasensitive, I keep it on a non-networked device and type it in. Otherwise, normally, I grep and copy/paste from terminal to pass
12.
by gfsadhfsd 10y ago
http://www.facebook.com/l.php?u=https://www.wsj.com/articles...