Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #4683

Re: Neat implementation of the master password idea

Show all headers | View raw

Hallöchen!

Rich writes:

> Torsten Bronger <bronger@physik.rwth-aachen.de> wrote:
>
>> A coupld of weeks ago, the German c't magazin published an
>> article about password management.  (Unfortunately, it is not one
>> of the few that got translated into English
>> <http://www.heise.de/ct/heft/2014-18-Ein-neues-Konzept-fuer-den-Umgang-mit-Passwoertern-2284364.html>.)
>> The key point is the discussion of
>> <http://masterpasswordapp.com/>.  Yesterday, I switched my
>> passwords to it, and I am very much in awe of the thing.  The
>> principle is quite simple and not even new -- the Master Password
>> App itself is around since 2011 -- but googling for it yields
>> suprisingly few hits.
>>
>> [...]
>
> If I'm understanding your description properly and if I'm
> understanding the description on the website properly, this is
> vulernerable to an "offline" dictionary attack, without ever
> having any access to any of your data.

It's all about choosing a good master password.  How to do this is
explained in great length on the MasterPasswordApp's website.  It is
very easy to generate enough entropy there so that a dictionary
attack is fruitless.

Note that any system must only be good enough to not be the weakest
link in the chain.  (http://xkcd.com/538/ :)

Tschö,
Torsten.

-- 
Torsten Bronger    Jabber ID: torsten.bronger@jabber.rwth-aachen.de
                                  or http://bronger-jmp.appspot.com

Back to comp.misc | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Neat implementation of the master password idea Torsten Bronger <bronger@physik.rwth-aachen.de> - 2014-09-02 19:08 +0200
  Re: Neat implementation of the master password idea Rich <rich@example.invalid> - 2014-09-02 20:52 +0000
    Re: Neat implementation of the master password idea Torsten Bronger <bronger@physik.rwth-aachen.de> - 2014-09-03 08:31 +0200

csiph-web