The Password Game
351–360 of 540 posts
Re: The Password Game
#352That's a shame, I reached an impossible situation. The best chess move is Re5+ which includes the letters Re which is the element Rhenium with atomic number 75. However since the roman numerals need to multiply to 35 then the only valid solution is having VII and V (XXXV for 35 is not recognized for some reason), and V is Vanadium with atomic number 23 and I is Iodine with 53. That already leaves me with 227, above t…
Re: The Password Game
#353Earlier quoted context omitted.
Hah! I was wondering about that. Mine dropped me into what looks like a 3D modeled version of a real place, but sandboxed - there's no way to move around. (that iframe embed is: https://www.google.com/maps/embed?pb=!4v1686332716861!6m8!1m... ) It led me down the path of reverse engineering these URLs though, so that's fun.
here is the street view link: https://www.google.de/maps/@25.0897073,51.1817779,3a,75y,268...
Re: The Password Game
#354Re: The Password Game
#355Re: The Password Game
#356Re: The Password Game
#357A warning to future players: I got to rule 16 and was given an egg named paul that I had to keep safe. Then on rule 18 a fire (of emojis) broke out in my password, killing paul and ending the game. Dont be like me, keep Paul safe.
OH NO!!
Re: The Password Game
#358I'm stuck at "iatetomatoesyesterday0265Z#521juneVpepsiVIIxngxcaboutAg[moon emojis]italy2020Bf7+" trying to solve the chess notation puzzle. I especially laughed at the rule "must include today's Worldle" and I'm happy with my solution including every emoji for "must include the current phase of the moon as an emoji." (HackerNews doesn't seem to display emoji. My solution is to paste every moon phase emoji.) Excited t…
Re: The Password Game
#359Earlier quoted context omitted.
I don't think passwords will be replaced. This is more of a demonstration of over complicated password rules, than against passwords itself. Hardware and biometric keys can be stolen, cloned and lost. And trusting third-parties with keys to harddrive encryption is also not really trustworthy.
1. You can have multiple hardware keys or devices bound to an account as a backup of for ease of use. 2. Passkeys allow you to pick a backup solution of your choosing. Could be your own nextcloud server in the corner. This is no different than giving someone a choice of cloud-synced password manager Both solutions avoid phishing, password re-use, keylogging, or people picking weak passwords. There is no excuse for an…
How does that help if someone steals your hardware key, login in with it and then puts it back. You don't even know that it was stolen and your account was messed with. With a good password you know if you tell someone. Granted people could film you typing your password, but stealing your hardware key is much easier.
> 2. Passkeys allow you to pick a backup solution of your choosing. Could be your own nextcloud server in the corner. This is no different than giving someone a choice of cloud-synced password manager
This isn't about backup, but trust. Do I trust a third-party to manage the keys to my kingdom? No. And even if, the third-party is a much easier target for 3 letter agencies, governments or other rich/influential bad actors. Also I haven't seen a solution where passkey can be used to decrypt my LUKS partition.
> There is no excuse for anyone even supporting passwords at this point. Sysadmins have not commonly used passwords for ssh in 20 years, favoring private keys on either hardware or encrypted disks. Keys better than passwords-over-the-wire in every way.
The encrypted disks are hopefully protected with a password, and not magically unencrypted, just by booting it with the right TPM configuration. The hardware hopefully requires a pin or password in order to unlock the SSH key, and the SSH key on disk is hopefully encrypted with a password as well.