Live data from Hacker News

Ask HN: I have 176 logins/accounts. How many do you have?

news.ycombinator.com

161–170 of 300 posts

Re: Ask HN: I have 176 logins/accounts. How many do you have?

#161
Roughly 350, all with unique passwords and mostly with unique email addresses too. They're categorised, and the only categories with more than about 20 entries are catch-alls I never look at anyway. It's pretty useful and sometimes interesting to go on a website and find out I made an account there two years ago.

Re: Ask HN: I have 176 logins/accounts. How many do you have?

#163

Earlier quoted context omitted.

I'm confused about what you're fucking off. Would you prefer to schedule haircuts via a call or an anonymous online form? Being able to schedule appointments online is one of the big wins of modern life imo: it beats waiting around on hold and laboriously explaining to the receptionist how to spell my last name.

> Would you prefer to schedule haircuts via a call or an anonymous online form? Why the hell no? At worst "an anonymous form" can ask for your mobile number only to remind you about the appointment (if it's not today for example). At best it should be really optional. In both cases there is absolutely zero need for both a login and a password. I have a local pizza joint working like that - you just punch in what you…

exactly.

i can make appointments for my country's embassy by picking a time slot and giving them my email address. confirmation then comes by email. no login and password needed.

Re: Ask HN: I have 176 logins/accounts. How many do you have?

#166
post #144

Over 300 in a self-hosted vaultwarden. I’ve got my vault password memorized but that’s about it. All 300+ are secure randomly generated ones that I do not know. And I’ve got 2FA stored there too. Despite the huge number of accounts, logging into anything is seamless across any of my devices. And access to my vaultwarden is securely protected. Password managers are great. Really looking forward to vaultwarden eventual…

What's the point of 2FA if you store it in the same place as the first auth factor? Or maybe I've misunderstood. Are they behind different master passwords or something?

As far as I understand it:

The password is the "thing you know" and the password manager file is the "thing you have". So if someone compromised your email account knowing your password, they still need to access your password manager file to get access to the 2FA codes.

So it's still a second factor in that sense.

Re: Ask HN: I have 176 logins/accounts. How many do you have?

#168
post #144

Over 300 in a self-hosted vaultwarden. I’ve got my vault password memorized but that’s about it. All 300+ are secure randomly generated ones that I do not know. And I’ve got 2FA stored there too. Despite the huge number of accounts, logging into anything is seamless across any of my devices. And access to my vaultwarden is securely protected. Password managers are great. Really looking forward to vaultwarden eventual…

What's the point of 2FA if you store it in the same place as the first auth factor? Or maybe I've misunderstood. Are they behind different master passwords or something?

If an individual account password leaks, the second factor still protects the account.

This primarily only protects against leaked passwords from the site being hacked. Not from vaultwarden being hacked. But if my vaultwarden gets hacked I’m done anyway. They will had to have used multiple factors to get into the vaultwarden anyway.

Quick edit: I’ve also got all the codes in an actual Authenticator app on my phone (so I can get into vaultwarden if I have to) But they are additionally in vaultwarden for convenience. When vaultwarden autofills, it copies the code to my clipboard and I can seamlessly pass the second factor check. Either way, access to the codes needs physical access to a device I’m already on. In practice I’m only ever logged into vaultwarden on my phone and my PC, although I could login remotely if I had to. As an additional safety measure, when my vault is logged into some monitoring software sends me a push notification through an external service.

Re: Ask HN: I have 176 logins/accounts. How many do you have?

#170
With a version controlled password store you can do silly things like this:

  $ gource … ~/.password-store | ffmpeg … password-store.mp4
  $ publish password-store.mp4
  QmeN62Ewuv93epe27VmniXHUFJQLirFfEo5eM1sKdxd2m5
https://cloudflare-ipfs.com/ipfs/QmeN62Ewuv93epe27VmniXHUFJQ...
Post reply on HN