Protecting Secrets from Computers (2023)

Clamchop wrote: post #6

Still reading but this is an interesting position to juxtapose with the repeated axiom that thou shalt not roll thine own crypto. Instead, the claim here is that you cannot trust crypto that you didn't roll yourself. Indeed, maybe you should compute it by hand! Ha! I love having my beliefs challenged. Completely impractical but very fun.

Only keep your passwords in your head. That way only one person can know them - you. And then, you can forget them, and now no-one knows them.

As we continually have told to and is pushed upon us by IT - this is the most secure system to have.

The one that no one can use.

Re: Protecting Secrets from Computers (2023)

#10

Post by chaosite » Tue, Jan 30, 2024, 6:27 AM UTC

chaxor wrote: post #9

Clamchop wrote: post #6

Still reading but this is an interesting position to juxtapose with the repeated axiom that thou shalt not roll thine own crypto. Instead, the claim here is that you cannot trust crypto that you didn't roll yourself. Indeed, maybe you should compute it by hand! Ha! I love having my beliefs challenged. Completely impractical but very fun.

Only keep your passwords in your head. That way only one person can know them - you. And then, you can forget them, and now no-one knows them. As we continually have told to and is pushed upon us by IT - this is the most secure system to have. The one that no one can use.

Passwords are useless if only you know them.

You can use private keys like that, but people are not expected to remember them.