• 2 Posts
  • 25 Comments
Joined 1 month ago
cake
Cake day: April 30th, 2025

help-circle

  • https://sh.itjust.works/post/39160164

    Might be an interesting thread to read.

    Many says that your system is “better than the average person reusing the same password”, but still not better than a password manager, and that you can’t “out remember a machine”. Many have also pointed out that data breaches and hacking is actually very common these days, all an attacker would need is 2 sample and they would see the pattern; On top of that, with the development of AI, there could eventually be a bot that would to test variations of jusr one leaked password and attack your acounts on different websites, then you’d have to change all your passwords, instead of just one. Someone also said that, this is essentially like a Master Password of a password vault + a “Salt” as your passwords, and the password is only as secure as those few unique characters, which could be cracked very easily.


  • Perhaps a pc you gotta use you don’t trust completely so loggin in with your master passsord in a cloud based password manager, isn’t a good idea, even if you only want the password for a not so important service, you’d still be exposing yourself unnecessarily.

    Pre-Smartphone Era, you’d have a point.

    These days, everyone has a smartphone that is compatible with password managers.

    The Standard Operating Procedue is:

    1. Don’t log in on an untrusted machine

    2. If you must do it*, then find the password on your phone and type that in to the computer.

    Then after you’re done, you generate a new password on your phone password manager app and change it using your phone.

    If you don’t like to be distracted by smartphones, you can carry one turned off. If you don’t want to carry one for privacy reasons: Use an Offline Password Manager (Keepass) on Graphene OS, another Open Source Operating System, or a phone that has removable battery and with airplane mode on all the time.

    If you need a password for work and work doesn’t allow phones, memorize that password on top of your password manager’s vault password. Two passwords to remember are still better than remembering 20.

    What if you want to type in your password in a printer with limited capability? You’d have to manually and painstakingly type in your long generated e-mail/dropbox/etc password. And more.

    You generate a shorter password specifically for the printer, just read it from your phone when you need it.





  • Its probably in a government database somewhere, it’s only inaccessible to you.

    Reminds me of this joke (with a modern digital-era spin):


    The son is accused of drug trafficking

    The father: “I can’t access the cloud drive account on [Site Name]”

    The son: “If you ever remember the password and get in, delete the account. That’s where my (drug trade) ledger is”

    Overnight, the FBI filed subpoena to the cloud company requesting a copy of any files on any of [the father]'s accounts. Within days, the company compiled and send the info to the FBI.

    [The son]'s defence attorney got a copy of the files due to the discovery process, and passed it on to the father.

    The father: “Son, I don’t know how, but your lawyer just sent me an email this afternoon with all the family photos”

    (Original Thread: https://sh.itjust.works/post/37145912/18347741)



  • throwawayacc0430@sh.itjust.workstoProgrammer Humor@programming.devPerfect
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    5
    ·
    15 days ago

    No, I mean the context is, when you buy a phone from Best Buy, the sales person uses deceptive language to frame it as if your phone will not function unless you purchase a plan by asking “Would you like to activate your phone right now”, implying its locked and can’t even be used for Google Voice/VOIP calls, and as a multi-function tool (GPS, Camera, Notes, E-Reader, Audio Recorder, etc…).

    Deceptive Corporatist language.





  • In America at least, “law enforcement” (Police, Ice, CBP) aren’t allowed to force you to enter your password

    Might wanna rethink that. If you aren’t a citizen, they could just threaten to send you to el salvador if you refuse to unlock (and maybe still do it after you complied). Even judges are getting arrested by the gestapo, I don’t feel safe even as a citizen. These are not normal times, I wouldn’t put so much faith on the rule of law.





  • I usually don’t.

    Unless its a food delivery, then I just try to find a white male name, to avoid racial profiling/harassment.

    I dont think that really do much in terms of privacy, the merchant is gonna know who you are. And sometimes they will reject an order if the name used in the order doesn’t match the name of the card holder.

    Any card/bank transaction, anything that gets sent to your address, that’s not really something you can have privacy over. Unless you use cash payments and use someone else’s address. Its very difficult to hide financial activity.