Conversation

Notices

1. Embed this notice
   PerryM ✅ (perrym@newsie.social)'s status on Wednesday, 17-May-2023 03:27:59 JST PerryM ✅

   As a computer hobbyist, I often worry how good my passwords are. I've never seen anything to describe how important it is. This chart and the research is super. My hat off to HIVE!

   • Embed this notice
     :blobcathug: (jain@blob.cat)'s status on Wednesday, 17-May-2023 03:27:59 JST :blobcathug:

     in reply to
     @PerryM just use a hash of your password :blobcatgooglybadumtss:
   • Embed this notice
     Kainoa (kainoa@calckey.social)'s status on Wednesday, 17-May-2023 03:40:47 JST Kainoa

     in reply to

     • Steve Dinn

     @steve@social.dinn.ca @PerryM@newsie.social that's good, especially since password-cracking algorithms are getting better.

   • Embed this notice
     Steve Dinn (steve@social.dinn.ca)'s status on Wednesday, 17-May-2023 03:40:48 JST Steve Dinn

     in reply to

     @PerryM Ha! Thanks to password managers, all my passwords are 24 - 36 characters long and use all the combinations. Perhaps that's overkill.

   • Embed this notice
     Kainoa (kainoa@calckey.social)'s status on Wednesday, 17-May-2023 04:20:09 JST Kainoa

     in reply to

     • Bitwarden
     • Steve Dinn
     • Johan S 🌀

     @spiralmind @steve@social.dinn.ca @PerryM@newsie.social 1Password has had some pretty bad data breaches, I'd recommend @bitwarden@fosstodon.org

   • Embed this notice
     Johan S 🌀 (spiralmind@calckey.social)'s status on Wednesday, 17-May-2023 04:20:22 JST Johan S 🌀

     in reply to

     • Steve Dinn
     • Kainoa

     @kainoa @steve@social.dinn.ca @PerryM@newsie.social I use 1Password to generate (and store, of course) passwords, and I just keep it cranked up to whatever 60-something the maximum is in 1Password.
     
     Some sites get angry about that.

   • Embed this notice
     Kainoa (kainoa@calckey.social)'s status on Wednesday, 17-May-2023 04:25:02 JST Kainoa

     in reply to

     • Steve Dinn
     • Johan S 🌀

     @spiralmind @steve@social.dinn.ca @PerryM@newsie.social https://password-managers.bestreviews.net/faq/which-password-managers-have-been-hacked/
     
     2020 and 2016.

   • Embed this notice
     Johan S 🌀 (spiralmind@calckey.social)'s status on Wednesday, 17-May-2023 04:25:03 JST Johan S 🌀

     in reply to

     • Steve Dinn
     • Kainoa

     @kainoa @steve@social.dinn.ca @PerryM@newsie.social That sounds like LastPass, I'm not aware of any published 1P breaches.

   • Embed this notice
     Johan S 🌀 (spiralmind@calckey.social)'s status on Wednesday, 17-May-2023 04:28:34 JST Johan S 🌀

     in reply to

     • Steve Dinn
     • Kainoa

     @kainoa @steve@social.dinn.ca @PerryM@newsie.social Ah, that kind of vector, I was thinking more actual data exfiltration attacks. Bit of an ingenious headline on that page, and BitWarden should also be included for that level of vulnerability. https://flashpoint.io/blog/bitwarden-password-pilfering/

     Kainoa likes this.
   • Embed this notice
     Kainoa (kainoa@calckey.social)'s status on Wednesday, 17-May-2023 04:29:16 JST Kainoa

     in reply to

     • Steve Dinn
     • Johan S 🌀

     @spiralmind @steve@social.dinn.ca @PerryM@newsie.social fair enough. I wasn't aware bitwarden had a similar vector.

   • Embed this notice
     matthieu_xyz@calckey.social's status on Wednesday, 17-May-2023 04:39:23 JST matthieu_xyz

     in reply to

     • Steve Dinn
     • Kainoa
     • Johan S 🌀

     @kainoa @spiralmind @steve@social.dinn.ca @PerryM@newsie.social There are two kinds of password managers. Those that were breached and the one that haven’t been breached yet.
     
     Now, from the one that were breached. Did they loose your passwords or not?
     
     The real bad breach is lastpass loosing payment information. I was a free user at the time so I’m unaffected. But that sure didn’t look good.

     Kainoa likes this.
   • Embed this notice
     Kainoa (kainoa@calckey.social)'s status on Wednesday, 17-May-2023 04:40:19 JST Kainoa

     in reply to

     • Steve Dinn
     • matthieu_xyz
     • Johan S 🌀

     @matthieu_xyz @spiralmind @steve@social.dinn.ca @PerryM@newsie.social the best password managers are the ones you host on your own machine. Far, FAR less chance of any breach.