Comment on Please create a non-secure password.

• purplemonkeymad@programming.dev ⁨2⁩ ⁨days⁩ ago

  The point of having a high entropy password is to protect against hackers brute forcing a leaked database of hashes.

  I don’t think you need to worry about that in this case, the special character restriction suggests to me that they don’t hash it.

  source
• Buffalox@lemmy.world ⁨3⁩ ⁨days⁩ ago

  The point of having a high entropy password is to protect against hackers brute forcing a leaked database of hashes.

  Seems a bit stupid if a database of passwords or other sensitive information can be brute forced.

  source

  • stevedice@sh.itjust.works ⁨3⁩ ⁨days⁩ ago

    Please clarify what you mean because your comment is giving me these vibes.

    1000014915

    source
• Buffalox@lemmy.world ⁨3⁩ ⁨days⁩ ago

  just use a password manager

  I will never do that, I have a system instead. I never understood why people would want to use a password manager. To me it seems it ads an attack vector, where you could lose EVERYTHING!

  source

  • thepreciousboar@lemm.ee ⁨1⁩ ⁨day⁩ ago

    That is true for online password managers, you need an offline one

    source
  • stevedice@sh.itjust.works ⁨3⁩ ⁨days⁩ ago

    I guarantee your system is less secure than the worst password manager. Humans are inherently bad at choosing passwords, or anything to do with randomness really.

    source
  • frezik@midwest.social ⁨2⁩ ⁨days⁩ ago

    Passwords suck as an authentication system in general. Your own system is probably worse than what password managers do. Yes, there are problems, but so does every other solution to this, and password managers win out in the comparison.

    source

    • Buffalox@lemmy.world ⁨2⁩ ⁨days⁩ ago

      Your own system is probably worse than what password managers do.

      How so? If you use a password manager across 3 platforms, that makes for 3 attack vectors.
      My personal system has guaranteed no vulnerabilities. So how do you conclude my system is worse?

      source

      • frezik@midwest.social ⁨2⁩ ⁨days⁩ ago

        My personal system has guaranteed no vulnerabilities

        If you think that’s true, then you don’t have the experience to make a secure system.

        source

        • -> View More Comments