Ask HN: Google warned me that a state organized hacking group targeted me • Hacker News Board

Re: Ask HN: Google warned me that a state organized hacking group targeted me

#41

Post by asdsa5325 » Sat, Mar 31, 2018, 10:21 PM UTC

herbst wrote: post #9

amingilani wrote: post #7

Earlier quoted context omitted.

Absolutely use a password manager, and a strong passphrase for the master password [1] Why would you say not? I'm not trying to be rude or anything. Let's have a discussion, and if I can convince you to do use one, I'd have made one more person safer. [1] I made this for a dead simple way to make passphrases: https://amingilani.github.io/password-maker/

Not OP but open for a chance. Last time I checked the popular password managers saved the passwords in one way or another. Which personally simply sounds like a bad idea to begin with. Even if in theorie they are safe. Even the slight chance that a single failure could lead to all my passwords getting in the wrong hands at once just is to scary.

Password managers use client side encryption. They are not stored unencrypted on the manager's servers.

Re: Ask HN: Google warned me that a state organized hacking group targeted me

#42

Post by zaphirplane » Sun, Apr 01, 2018, 1:54 AM UTC

amingilani wrote: post #7

zaphirplane wrote: post #5

Earlier quoted context omitted.

What ! Don’t use a password manager and turn on 2 factor Authentication

Absolutely use a password manager, and a strong passphrase for the master password [1] Why would you say not? I'm not trying to be rude or anything. Let's have a discussion, and if I can convince you to do use one, I'd have made one more person safer. [1] I made this for a dead simple way to make passphrases: https://amingilani.github.io/password-maker/

Because The security of your passwords depend on the security of the password manager and the security of their infrastructure ... the big password managers have had issues, in code, design and even last pass was attached by hackers.

trusting your bank / email and other important password is an unneeded risk.

Your turn why should I rely on someone and their servers to save my passwords why a good password and 2fa will protect my account?

Re: Ask HN: Google warned me that a state organized hacking group targeted me

#43

Post by zaphirplane » Sun, Apr 01, 2018, 1:56 AM UTC

mercer wrote: post #18

herbst wrote: post #9

Earlier quoted context omitted.

Not OP but open for a chance. Last time I checked the popular password managers saved the passwords in one way or another. Which personally simply sounds like a bad idea to begin with. Even if in theorie they are safe. Even the slight chance that a single failure could lead to all my passwords getting in the wrong hands at once just is to scary.

How do you propose one memorizes a properly random/secure/long password, let alone multiple ones, without trusting 'something' with it, whether a password manager of good repute, a hand-rolled version with potentially bigger security issues, or a piece of paper somewhere?

Your password doesn’t need be a long random string, just a long unguessable one and safe from dictionary attacks Ilikeapples! Is fine But You know I’m not a security researcher