Live data from Hacker News

LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

krebsonsecurity.com

61–70 of 77 posts

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#61
A little while back I created a completely frontend-only (to the best of my knowledge) complex password generator in Codepen, maybe someone else can find it useful (or fork it and make it better).

https://codepen.io/pmarreck/pen/gOQxdqW

Here's an online demo of the zxcvbn library which makes a good-faith attempt to rule out passwords based on semantic/contextual evaluation:

https://lowe.github.io/tryzxcvbn/

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#62
post #21

Earlier quoted context omitted.

This is a classic issue with money. What do you do if you're Taylor Swift? You're a 750 millionaire, with the next couple 100 on the way from this tour. Whelp, spent the first 50 on a house all humans will drool over. Got the compulsory car. Got the compulsory jet. Got the compulsory yacht (not quite as large as Bezos' (ehmm, banana?) that could not leave its construction port). [1] And with the other 600 million? Pr…

Use it to give people jobs. Open up restaurants and build schools and hospitals. Help friends start their own businesses, stimulate the economy. Tony Hseih, RIP, didn't have a private air force, but he made downtown Vegas. Someone's already started an electric car company, and built a rocket company to go to Mars, so that's been done, but there's just so much out there. Rhianna's got her clothing line for people who…

Keeping your money invested in stocks is exactly the same as what you are describing.

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#63
post #22
post #19

Earlier quoted context omitted.

Nope, daily Bitcoin volume on Coinbase alone is over $200 million. Nobody cares if you sell 1% of that, at worst the price dips momentarily.

It’s hard to say how much of that are “real” trades, bots can have minimal liquidity but a huge trading volume. Satoshi is in theory holding onto ~25 billion in coins. Trying to cash that out would however absolutely tank the current valuations. But that’s hardly the only major risk. Bulgaria has something like 213,000 bitcoin worth nominally 5 billion or so and no particular interest in bitcoin, but trying to cash t…

I'm just saying $3 million doesn't do much to the price. If someone suddenly cashes out several thousand times that much, then sure, price will crash.

I've personally watched sell pressure on Coinbase in the multi-million range get executed over the course of a few minutes, with only a modest temporary effect on the price.

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#64
post #63
post #22

Earlier quoted context omitted.

It’s hard to say how much of that are “real” trades, bots can have minimal liquidity but a huge trading volume. Satoshi is in theory holding onto ~25 billion in coins. Trying to cash that out would however absolutely tank the current valuations. But that’s hardly the only major risk. Bulgaria has something like 213,000 bitcoin worth nominally 5 billion or so and no particular interest in bitcoin, but trying to cash t…

I'm just saying $3 million doesn't do much to the price. If someone suddenly cashes out several thousand times that much, then sure, price will crash. I've personally watched sell pressure on Coinbase in the multi-million range get executed over the course of a few minutes, with only a modest temporary effect on the price.

Yes, if the benchmark is 3 million then most of the time it’s inconsequential but there’s much larger wallets susceptible to being pillaged and I would expect a significantly larger impact from even just 30 million. Further liquidity isn’t a steady state. So, if you happen to execute a significant trade at the wrong time you can trigger a surprisingly large cascade effect.

Which is why very large transactions frequently occur either outside of open markets or across a surprisingly long period.

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#65
I never believed I could recover all my funds back to my wallet, my colleague introduced a professional hacker to me ADRAIN LAMO HACKER AGENCY, and this hacker recovered the $766,000 that was stolen from me by these online scammers. ADRIAN LAMO HACKER AGENCY recovered all my funds within 24 hours. If you’re a victim I do advise you to consult These professional hacker via email: Adrianlamo@consultant.com

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#66

Earlier quoted context omitted.

Take the 10 minutes to migrate to Bitwarden or 1Password or such and be done with it.

Yeah, if you have no attachments, otherwise it takes days and a lot of programming knowledge

You can have them both installed. Migrate your passwords today, then the other stuff as you get around to it.

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#67

Earlier quoted context omitted.

Can someone explain to me what is the advantage of using something like LastPass over simply the in-built password manager that Firefox or other browsers have? I know that LastPass can be used for desktop applications too, but if you are only using a password for the web, is LastPass offering anything more than the in-built browser password manager?

Safari's built-in pw manager: - until recently, didn't have 2fa - doesn't support multiple domains under the same account (e.g., the stackexchange network is considered one site per subdomain) - doesn't support generating complex passwords (it'll generate passwords but I'd hardly call them complex…) - doesn't support credentials not associated with websites (e.g., an SSH login, a bank pin…)

It does support the per-subdomain option now. You can edit a password to say whether it applies to the whole domain or a specific host.

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#68

Earlier quoted context omitted.

Yeah, if you have no attachments, otherwise it takes days and a lot of programming knowledge

You can have them both installed. Migrate your passwords today, then the other stuff as you get around to it.

The problem is there is no way to say "show me all items with attachments", so it's extremely tedious to find those

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#69
post #21

Earlier quoted context omitted.

This is a classic issue with money. What do you do if you're Taylor Swift? You're a 750 millionaire, with the next couple 100 on the way from this tour. Whelp, spent the first 50 on a house all humans will drool over. Got the compulsory car. Got the compulsory jet. Got the compulsory yacht (not quite as large as Bezos' (ehmm, banana?) that could not leave its construction port). [1] And with the other 600 million? Pr…

There's a risk of "dragon sickness" (from The Hobbit) and conflating one's self-worth with their financial value; I feel for these folks, and support regulation that would make it increasingly difficult to amass money beyond a certain point (basic needs being well met and all that), along with psychological help (not in a pejorative way- I am a beneficiary of therapy and medication and I don't feel lesser for it).

Generally agree. Had the same thought. However, related to this comment and @fragmede's response, is that wealth is strong correlated in human society with power, influence, celebrity ... and more wealth.

People quite literally just hand money to people who already have money. I have sat in a room, and watched someone nearby check their phone and say "There's a minor wealthy celebrity nearby! We all need to go and buy tickets to the stadium! We might see or meet them!"

I went to Dragon Con a few years ago, and people were willing to stand in line all Dragon Con, their entire weekend experience, to see a wealthy famous person. I'd go play games, go out, and see the people move in the line slightly. All weekend. Stretched all the way around the entire block and down the street. Wasn't even "that" famous (supporting movie character).

Re: LastPass: ‘Horse Gone Barn Bolted’ Is Strong Password

#70

Earlier quoted context omitted.

Use it to give people jobs. Open up restaurants and build schools and hospitals. Help friends start their own businesses, stimulate the economy. Tony Hseih, RIP, didn't have a private air force, but he made downtown Vegas. Someone's already started an electric car company, and built a rocket company to go to Mars, so that's been done, but there's just so much out there. Rhianna's got her clothing line for people who…

Keeping your money invested in stocks is exactly the same as what you are describing.

Haha, missing the /s tag, nearly fell for it.
Post reply on HN