| Forum Home | ||||
| PC World Chat | ||||
| Thread ID: 127378 | 2012-10-19 20:42:00 | to save you going nuts with passwords | Frank_sumbody (16923) | PC World Chat |
| Post ID | Timestamp | Content | User | ||
| 1307682 | 2012-10-19 22:21:00 | Thanks Myth Just to clear the air. There is one password I use for a government department that I use only once a year, I have not used it this year (I should of by now) I have forgotten it. Every year is the same, Because it is a uppercase lowercase job it is the only password I use only once a year so when I work out what it is I might put on my page "nLinLLnll" now that is similar to another of my passwords I use, but it tells me which character is uppercase and which is lowercase. (I got this password headache idea just the other day) I did not want to use any "password reminder" software as how do we know the software might report the passwords back to some hidden "headquarters" via Internet connection where the people like doing things to getting other peoples money for nothing, or do other strange things. I did think of printing off the list using the actual password you would use like "Forum-X, 123qwe" but what happens if other eyes see it, and want to have some fun at my expense? it least when they see "Forum-X, nnnlll" that should slow them down a bit. |
Frank_sumbody (16923) | ||
| 1307683 | 2012-10-19 22:31:00 | I did not want to use any "password reminder" software as how do we know the software might report the passwords back to some hidden "headquarters" via Internet connection where the people like doing things to getting other peoples money for nothing, or do other strange things . Seems highly unlikely . What I'd be more worried about would be the site being hacked and somebody getting all my passwords at once . |
Nick G (16709) | ||
| 1307684 | 2012-10-19 22:38:00 | What I'd be more worried about would be the site being hacked and somebody getting all my passwords at once.The good ones aren't vulnerable* to this kind of attack, because the encryption / decryption is all done client-side. The password manager site cannot see your passwords, ever - even if an attacker compromised the servers, it wouldn't do them any good. *There are two exceptions to the above: If the attacker already knows the 'master password' you used to encrypt everything else; If the attacker can come up with a viable CSRF attack to force your browser to upload your passwords in plaintext after decryption.Naturally this also assumes that the crypto algorythm used is a good one, and you have a decent master password. If either of those assumptions are wrong, then you have bigger problems... |
Erayd (23) | ||
| 1307685 | 2012-10-19 22:40:00 | The good ones aren't vulnerable* to this kind of attack, because the encryption / decryption is all done client-side. The password manager site cannot see your passwords, ever - even if an attacker compromised the servers, it wouldn't do them any good. *There are two exceptions to the above: If the attacker already knows the 'master password' you used to encrypt everything else; If the attacker can come up with a viable CSRF attack to force your browser to upload your passwords in plaintext after decryption.Naturally this also assumes that the crypto algorythm used is a good one, and you have a decent master password. If either of those assumptions are wrong, then you have bigger problems... That's good to know :thumbs: |
Nick G (16709) | ||
| 1307686 | 2012-10-19 23:32:00 | I hated when they ask you to enter some security questions in case you need to reset your password, question like What's your pet's name? So I entered say Ally (press enter) and they told me I must need at least input 5 characters... @*(#&!* !! What if my cat is called "Tom" ? .. | SKT174 (1319) | ||
| 1307687 | 2012-10-19 23:58:00 | You must name your pets with a name consisting of no less than 5 characters, including a capital letter and a numerical digit. | fred_fish (15241) | ||
| 1307688 | 2012-10-20 01:08:00 | You must name your pets with a name consisting of no less than 5 characters, including a capital letter and a numerical digit.You forgot the special character as well... I guess from now on, when I call my dog, I guess I should be calling "Hey you %#*&ingMonGrel!" ? Or can it not start with a special character ? |
Myth (110) | ||
| 1307689 | 2012-10-20 02:53:00 | https://lastpass.com/ +1 |
Tony (4941) | ||
| 1307690 | 2012-10-20 18:42:00 | I'm very confused. | pine-o-cleen (2955) | ||
| 1 2 | |||||