Who knows, some idiot keeps using my email and signing up on various spammy services. Probably time to get a new email address.
Ask HN: I have 176 logins/accounts. How many do you have?
281–290 of 300 posts
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#282Shit, just looking at the replies, there's a solid case for password managers. No normal human is going to memorize 100+ unique passwords meeting various complexity requirements. It almost makes shaming people for re-using passwords look like you're out of touch. Of course they're following bad practices, how could they not be?!
I take a pragmatic approach: the dozen logins in my life that actually matter get strong unique passwords, and everything I don't give a shit about gets the same password.
That's how I lost my Twitter account. Using a PW manager only for the non-important accounts is a definitive improvement at a very low cost.
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#283I have 967 entries in my KeePassXC database. That includes tons of now obsolete logins and passwords from previous jobs or/and defunct services. It doesn't bother me, and I dont want to spend days just to validate/clean up it.
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#284Earlier quoted context omitted.
> some standardized interop between browsers and a password manager. Like, my browser shouldn't know or care about passwords, it should just mediate the authentication request to my chosen password manager through some standardized means. This way lies dragons. Browsers are among the most complicated software that most people run on their machines these days, and the number of bugs lurking in them is probably large.…
Well, the alternatives you mention are all prone to keyloggers or similar. If you take say OAuth/OIDC, the only thing the browser needs is the token. It doesn't have to be involved in the authentication at all really, it just needs a token it can send as part of the requests. Of course this requires that the site uses OAuth/OIDC, but hopefully that's where things are headed.
I don't disagree.. but I stopped really using oauth when realizing that I could lose access to all those services if the whim of an algorithm closes my (oauth) account.
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#285I see many people mentioning the number of passwords in their KeepassXC. I can't find the option for that. Where is it?
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#286Earlier quoted context omitted.
Well, the alternatives you mention are all prone to keyloggers or similar. If you take say OAuth/OIDC, the only thing the browser needs is the token. It doesn't have to be involved in the authentication at all really, it just needs a token it can send as part of the requests. Of course this requires that the site uses OAuth/OIDC, but hopefully that's where things are headed.
I don't disagree.. but I stopped really using oauth when realizing that I could lose access to all those services if the whim of an algorithm closes my (oauth) account.
Right, but using OAuth doesn't mean using Google, Microsoft or Facebook for everything. It's common cause it's convenient, but has issues like you say.
Someone running a Discourse forum could very well run say Ory[1] to have their own OAuth2 authentication service, if they wanted. Hopefully things like this will get a bit tighter integrated than it currently is.
[1]: https://www.ory.sh/run-oauth2-server-open-source-api-securit...
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#287Earlier quoted context omitted.
Similar, around 290 personal accounts. In addition comes the logins and such for various internal services like Home Assistant, PiHole etc. Total over 400 in my password manager. I keep wishing for something better. A great start would be to reduce friction, by having some standardized interop between browsers and a password manager. Like, my browser shouldn't know or care about passwords, it should just mediate the…
> some standardized interop between browsers and a password manager. Like, my browser shouldn't know or care about passwords, it should just mediate the authentication request to my chosen password manager through some standardized means. This way lies dragons. Browsers are among the most complicated software that most people run on their machines these days, and the number of bugs lurking in them is probably large.…
> I don't use any browser plugins for password managers, choosing instead either to copy/paste them by hand from my password manager
This is my practice, but I take it a step further. My passwords are stored in a non-networked password manager on my phone, not on any other machine. So when I need to use a password, I can't copy/paste. I have to type it in by hand.
I want maximal disconnect between my password manager and anything that uses passwords. And I never use SSO stuff, because I don't want anybody involved in authentication aside from me and the thing I'm authenticating to.
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#288I'm probably the one with the least. I have 35 in my password manager. I purge the ones I don't need every 2 or 3 months. I even gave away GOG and Steam accounts to friends after years of not playing games. Sometimes I have to send a threatening email to delete some accounts. Currently there's about 2 I'm waiting for an answer. It's gotten worse lately: people just don't delete your account anymore :D. Because of tha…
I'm confused about what you're fucking off. Would you prefer to schedule haircuts via a call or an anonymous online form? Being able to schedule appointments online is one of the big wins of modern life imo: it beats waiting around on hold and laboriously explaining to the receptionist how to spell my last name.
> Would you prefer to schedule haircuts via a call or an anonymous online form?
I 100% prefer to schedule appointments over the phone. That's never gone wrong for me, where scheduling online has gone very wrong quite a lot.
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#289I'm probably the one with the least. I have 35 in my password manager. I purge the ones I don't need every 2 or 3 months. I even gave away GOG and Steam accounts to friends after years of not playing games. Sometimes I have to send a threatening email to delete some accounts. Currently there's about 2 I'm waiting for an answer. It's gotten worse lately: people just don't delete your account anymore :D. Because of tha…
a barbershop that needs login/password for scheduling haircuts? fuck off If it takes reservations, it's not a barber shop. It's a beauty salon.
[deleted]
Re: Ask HN: I have 176 logins/accounts. How many do you have?
#290Shit, just looking at the replies, there's a solid case for password managers. No normal human is going to memorize 100+ unique passwords meeting various complexity requirements. It almost makes shaming people for re-using passwords look like you're out of touch. Of course they're following bad practices, how could they not be?!
It's a solid case for FIDO2 keys. - Inherent MFA that is faster and more secure than SMS codes, or app notifications. - One pin code and/or biometric to remember rather than hundreds. The answer isn't to add another layer of management to passwords, but to eliminate passwords as a method of authentication.
I find those keys immensely inconvenient, though. I used them for a couple of years, but finally gave up and went back to long, randomly-generated passwords.