281–284 of 284 posts
Earlier quoted context omitted.
Fingerprinting and everything work perfectly fine on Fedora with the ThinkPad's built in fingerprint scanner.
Interesting, how can fingerprints be used as a cryptographic unlocking method on Linux? Does this involve the TPM somehow, or does the security model assume a non-compromised userspace and/or kernel?
Earlier quoted context omitted.
That's about as unclear as I could imagine. "If you use this option please ensure you take the appropriate precautions."
That's not what it says though. How would you phrase it? I don't think they do a great job but this is pretty hard to explain in two sentences if you're targeting a non-technical person.
Earlier quoted context omitted.
Or multiple machines. There are about 31k seconds in a year. 3.1 seconds per iteration seems already slow as a response time to unlock a db so it's about one year for those 10000 attempts. Split it between 10 machines by first digit, it's down to a little more than one month. Split it between 100 machines by the first two digits and it's down to half a week. A four digit PIN is poor security. What Bitwarden could do…
31.5 million seconds in a year
Earlier quoted context omitted.
Buy a U2F USB key.
I would loose that, unless I kept it permanently in my laptop's USB port, in which case it would use up a USB port. I think the system I suggested above would work a lot better. What I have now isn't so bad as my passcode is moderately strong, it just could be better.