Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Password Generator

beta.browxy.com

Post reply on HN
Print view View original

31–40 of 44 posts

Re: Password Generator

#31

Post by majewsky »

iudqnolq wrote: post #13
TheDong wrote: post #2

This generates the password on a server you don't control. I recommend not using it. Using 'tr -dc A-Za-z0-9 < /dev/urandom | head -c $length' is more secure and available on your linux or osx machine even more easily than waiting a second for a server to run some java off in a magic black box.

You can also try indexing into /usr/share/dict/words for a correcthorsebatterystaple-style password. I'm sure there's a cute on-liner, I did it in Python because that took a lot less time than all the man page searching how to do it with Unix text processing tools would have taken. Yes, it would be better to remember random characters of the same length. But most people don't. I personally have one password I use to…

You might be interested in https://github.com/laerling/xkcdget, the correcthorsebatterystaple-type version of my own https://github.com/majewsky/pwget.

Re: Password Generator

#32

Post by tobr »

dbremmen wrote: post #22

Thanks for all the nice comments that are intended with good karma. What other feature can I add to this password generator that is useful? I agree that using linux is more secure but for passwords that are not as important I think this tool works fine, also you don't need to remember a big line of code and you can execute it on your mobile phone

It seems surprisingly complicated. Why is there a “start” and “stop” button? Why does it take so long for it to generate a random string? Why is there a “console” that just seems to show the page template?

Re: Password Generator

#33

Post by iudqnolq »

anon9001 wrote: post #30
iudqnolq wrote: post #29

Earlier quoted context omitted.

I will, I hope, someday. I want to get an intermediate knowledge of Lisp, or C, or Rust first I think. I know a bit of Python, and think I'd prefer to learn something more different than it next. My impression is that Python is a less whimsical more enterprise-y and conformist sibling of ruby.

My unsolicited advice: Don't worry too much about specific languages. The most valuable thing you can do is get a strong command of *nix and solve a lot of real-world problems with it. Make it your desktop OS and spend a lot of time with it. Build yourself a router. Make a RPi do something to improve your life. Take some cloud service you use and figure out if you could do it the libre way yourself. Build your own NA…

Thank you for the advice. I'm trying two now: Ubuntu for my daily driver, Emacs (with spacemacs to simplify config for now) for most writing.

I bought an rpi, but could never figure out something to do with it. Any suggestions?

My feeling with languages is that they may go in cycles but it'd be useful to learn either something with a completely different conceptual model (Lisp) or requiring me to understand pointers. But I'd been thinking about trying to lean Unix instead lately.

I feel like I'm pointing a flashlight around a cave with Linux systems. Any advise for some systemic learning? My cs curriculum won't cover anything that applied.

Re: Password Generator

#34

Post by iudqnolq »

majewsky wrote: post #31
iudqnolq wrote: post #13

Earlier quoted context omitted.

You can also try indexing into /usr/share/dict/words for a correcthorsebatterystaple-style password. I'm sure there's a cute on-liner, I did it in Python because that took a lot less time than all the man page searching how to do it with Unix text processing tools would have taken. Yes, it would be better to remember random characters of the same length. But most people don't. I personally have one password I use to…

You might be interested in https://github.com/laerling/xkcdget , the correcthorsebatterystaple-type version of my own https://github.com/majewsky/pwget .

It looks cool, but I'd rather use completely independent random passwords. You seem like a nice person, but I don't trust you you to have gotten your crypto totally right. Someday I'll describe how a massive flaw in my understanding of gpg and pass let me recover from loosing my gpg key.

One small comment: the password I remember is the password I type, or I run into issues. If the sentence has "the" and plurals, so will the password.

(This password I generated was only used as a master and for a handful of key services)

Re: Password Generator

#35

Post by dbremmen »

tobr wrote: post #32
dbremmen wrote: post #22

Thanks for all the nice comments that are intended with good karma. What other feature can I add to this password generator that is useful? I agree that using linux is more secure but for passwords that are not as important I think this tool works fine, also you don't need to remember a big line of code and you can execute it on your mobile phone

It seems surprisingly complicated. Why is there a “start” and “stop” button? Why does it take so long for it to generate a random string? Why is there a “console” that just seems to show the page template?

You right! Console and stop button are not necessary. The UI is generated with a UI creation tool that match program arguments with UI widgets (see: https://ibb.co/phQQFxr). In this case there is an option missing to don't show the stop button and the console (These are shown due that you can create interactive programs with browxy)

Re: Password Generator

#36

Post by [deleted] »

TheDong wrote: post #2

This generates the password on a server you don't control. I recommend not using it. Using 'tr -dc A-Za-z0-9 < /dev/urandom | head -c $length' is more secure and available on your linux or osx machine even more easily than waiting a second for a server to run some java off in a magic black box.

[deleted]

Re: Password Generator

#37

Post by anon9001 »

iudqnolq wrote: post #33
anon9001 wrote: post #30

Earlier quoted context omitted.

My unsolicited advice: Don't worry too much about specific languages. The most valuable thing you can do is get a strong command of *nix and solve a lot of real-world problems with it. Make it your desktop OS and spend a lot of time with it. Build yourself a router. Make a RPi do something to improve your life. Take some cloud service you use and figure out if you could do it the libre way yourself. Build your own NA…

Thank you for the advice. I'm trying two now: Ubuntu for my daily driver, Emacs (with spacemacs to simplify config for now) for most writing. I bought an rpi, but could never figure out something to do with it. Any suggestions? My feeling with languages is that they may go in cycles but it'd be useful to learn either something with a completely different conceptual model (Lisp) or requiring me to understand pointers.…

> Thank you for the advice. I'm trying two now: Ubuntu for my daily driver, Emacs (with spacemacs to simplify config for now) for most writing.

If you don't know either of them yet, I'd suggest vim ;)

> I bought an rpi, but could never figure out something to do with it. Any suggestions?

Pi-hole is a super popular project, maybe give that a try.

> or requiring me to understand pointers

Maybe learn to do some old-school stack smashing? https://insecure.org/stf/smashstack.html

There are a bunch of CTFs out there you can play with that help build skills.

> I feel like I'm pointing a flashlight around a cave with Linux systems. Any advise for some systemic learning?

Sounds like you're on the right path :)

Maybe try doing http://www.linuxfromscratch.org/lfs/read.html if you really want a deep understanding of how Linux works.

Also, just browsing the Linux documentation is useful: https://www.kernel.org/doc/html/latest/

Re: Password Generator

#38

Post by iudqnolq »

anon9001 wrote: post #37
iudqnolq wrote: post #33

Earlier quoted context omitted.

Thank you for the advice. I'm trying two now: Ubuntu for my daily driver, Emacs (with spacemacs to simplify config for now) for most writing. I bought an rpi, but could never figure out something to do with it. Any suggestions? My feeling with languages is that they may go in cycles but it'd be useful to learn either something with a completely different conceptual model (Lisp) or requiring me to understand pointers.…

> Thank you for the advice. I'm trying two now: Ubuntu for my daily driver, Emacs (with spacemacs to simplify config for now) for most writing. If you don't know either of them yet, I'd suggest vim ;) > I bought an rpi, but could never figure out something to do with it. Any suggestions? Pi-hole is a super popular project, maybe give that a try. > or requiring me to understand pointers Maybe learn to do some old-scho…

I have a few years muscle memory with basic vim. I'm not the most efficient yet, mostly limited to hjkl, :wq, and %s//, but I know enough to edit a file on a remote system in vi and I think that's close to all I need. I use evil in emacs because I hate and don't want to learn vimscript, and because I like the concept of literate programming in org mode and want to learn it (recently tried literate programming hacky wifi config setup, found it reduced repetition and confusion).

I'll take a look at your links, but I don't think RTFMing will be super useful to me right now. I want to learn the kind of questions I should be asking. For example, I recently heard the words "selinux" and "apparmour". Now that I know them I can Google around and eventually figure out how to use apparmour, but I'm more worried about what other gotchas I've never thought of. Any advise for something less comprehensive than the docs, with more of a focus on what works nowadays?

Thank you!

Re: Password Generator

#39

Post by anon9001 »

iudqnolq wrote: post #38
anon9001 wrote: post #37

Earlier quoted context omitted.

> Thank you for the advice. I'm trying two now: Ubuntu for my daily driver, Emacs (with spacemacs to simplify config for now) for most writing. If you don't know either of them yet, I'd suggest vim ;) > I bought an rpi, but could never figure out something to do with it. Any suggestions? Pi-hole is a super popular project, maybe give that a try. > or requiring me to understand pointers Maybe learn to do some old-scho…

I have a few years muscle memory with basic vim. I'm not the most efficient yet, mostly limited to hjkl, :wq, and %s//, but I know enough to edit a file on a remote system in vi and I think that's close to all I need. I use evil in emacs because I hate and don't want to learn vimscript, and because I like the concept of literate programming in org mode and want to learn it (recently tried literate programming hacky w…

I didn't mean RTFM exactly, what I mean is that if you're curious about how SELinux fits into the system, check where it is in the docs: https://www.kernel.org/doc/html/latest/admin-guide/LSM/index...

You can see that both AppArmor and SELinux are part of the "Linux Security Module" framework.

If you know what's in the table of contents on the left, particularly "The Linux kernel user’s and administrator’s guide", you'll have a pretty good idea of how Linux hangs together: https://www.kernel.org/doc/html/latest/admin-guide/index.htm...

Re: Password Generator

#40

Post by iudqnolq »

anon9001 wrote: post #39
iudqnolq wrote: post #38

Earlier quoted context omitted.

I have a few years muscle memory with basic vim. I'm not the most efficient yet, mostly limited to hjkl, :wq, and %s//, but I know enough to edit a file on a remote system in vi and I think that's close to all I need. I use evil in emacs because I hate and don't want to learn vimscript, and because I like the concept of literate programming in org mode and want to learn it (recently tried literate programming hacky w…

I didn't mean RTFM exactly, what I mean is that if you're curious about how SELinux fits into the system, check where it is in the docs: https://www.kernel.org/doc/html/latest/admin-guide/LSM/index... You can see that both AppArmor and SELinux are part of the "Linux Security Module" framework. If you know what's in the table of contents on the left, particularly "The Linux kernel user’s and administrator’s guide", yo…

I'll have a look. Thanks for the pointers.
Post reply on HN