Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.misc > #1499

Re: Ask Usenet: How do you manage your passwords?

From Randy Westlund <Vorzakir@invalid.invalid>
Newsgroups comp.misc
Subject Re: Ask Usenet: How do you manage your passwords?
Date 2014-03-12 04:08 +0000
Organization A noiseless patient Spider
Message-ID <lfomjg$m2n$1@dont-email.me> (permalink)
References <lfnd0s$61k$1@dont-email.me> <531f447e$0$61206$c3e8da3$5e5e430d@news.astraweb.com> <lfnub5$cdh$1@dont-email.me> <531fcb20$0$17194$c3e8da3$dd9697d2@news.astraweb.com>

Show all headers | View raw


On 2014-03-12, Rich wrote:
> Randy Westlund <Vorzakir@invalid.invalid> wrote:
>> I've been hesitant to trust my phone.  It makes me uneasy that my
>> email account is only protected by a 5-digit pin when phones are so
>> easy to lose.  I've kept my private keys off of it for that reason,
>> which means I can't sign an email that I send from my phone.
>
> That is a risk.  A 5 digit pin is only 100000 possible combinations. 
> Although with something like a password safe compatible app., you will
> still have to enter your password safe master password to gain access
> to the stored passwords.  The master password is integral to decrypting
> the storage file format.  Without it, the file remains encrypted.

I have a USB rubber ducky, which is a keystroke injection tool:
https://hakshop.myshopify.com/products/usb-rubber-ducky-deluxe

With a quick ducky script to brute force a 4-digit pin and a USB OTG
adapter, I can get into any android with a 4-digit pin in about 16
hours, tops.  For a five digit pin, I believe the time required was
just under a week.  Custom ROMs may be better, but stock android
just lets you keep guessing without penalty until you get it right.
Scary stuff, especially once you've done it to yourself and seen how
easy it is.

Back to comp.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Ask Usenet: How do you manage your passwords? Randy Westlund <Vorzakir@invalid.invalid> - 2014-03-11 16:18 +0000
  Re: Ask Usenet: How do you manage your passwords? Rich <rich@example.com> - 2014-03-11 17:14 +0000
    Re: Ask Usenet: How do you manage your passwords? Randy Westlund <Vorzakir@invalid.invalid> - 2014-03-11 21:14 +0000
      Re: Ask Usenet: How do you manage your passwords? Rich <rich@example.com> - 2014-03-12 02:49 +0000
        Re: Ask Usenet: How do you manage your passwords? Randy Westlund <Vorzakir@invalid.invalid> - 2014-03-12 04:08 +0000
          Re: Ask Usenet: How do you manage your passwords? Oregonian Haruspex <bob_davis_retired@yahoo.com> - 2014-03-12 08:08 +0000
            Re: Ask Usenet: How do you manage your passwords? Randy Westlund <Vorzakir@invalid.invalid> - 2014-03-12 08:26 +0000
  Re: Ask Usenet: How do you manage your passwords? Tim Watts <tw_usenet@dionic.net> - 2014-03-11 17:20 +0000
    Re: Ask Usenet: How do you manage your passwords? Jerry Peters <jerry@example.invalid> - 2014-03-11 20:24 +0000
      Re: Ask Usenet: How do you manage your passwords? Tim Watts <tw_usenet@dionic.net> - 2014-03-11 20:48 +0000
  Re: Ask Usenet: How do you manage your passwords? Oregonian Haruspex <bob_davis_retired@yahoo.com> - 2014-03-11 19:49 +0000
  Re: Ask Usenet: How do you manage your passwords? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-11 20:49 +0000
  Re: Ask Usenet: How do you manage your passwords? "Andy K." <andy.k466@gmail.com> - 2014-03-11 23:17 +0100
    Re: Ask Usenet: How do you manage your passwords? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-12 01:01 +0000
    Re: Ask Usenet: How do you manage your passwords? Huge <Huge@nowhere.much.invalid> - 2014-03-12 09:43 +0000
      Re: Ask Usenet: How do you manage your passwords? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-12 21:15 +0000
  Re: Ask Usenet: How do you manage your passwords? Dave Royal <dave@dave123royal.com> - 2014-03-12 08:04 +0000
    Re: Ask Usenet: How do you manage your passwords? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-12 08:58 +0000
      Re: Ask Usenet: How do you manage your passwords? Dave Royal <dave@dave123royal.com> - 2014-03-12 09:07 +0000
      Re: Ask Usenet: How do you manage your passwords? Memnon Anon <memnon+usenet@freeshell.org> - 2014-03-12 11:04 +0000
        Re: Ask Usenet: How do you manage your passwords? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-12 21:04 +0000
  Re: Ask Usenet: How do you manage your passwords? Morten Nygaard Åsnes <mnaasnes@gmail.com> - 2014-03-12 12:46 +0100
  Re: Ask Usenet: How do you manage your passwords? Spalls Hurgenson <spallshurgenson@gmail.com> - 2014-03-12 10:16 -0400
  Re: Ask Usenet: How do you manage your passwords? RS Wood <rsw@therandymon.com> - 2014-03-12 14:21 +0000
    Re: Ask Usenet: How do you manage your passwords? Rich <rich@example.com> - 2014-03-12 16:21 +0000
    Re: Ask Usenet: How do you manage your passwords? David Jones <david.jones@fmail.co.uk> - 2014-03-12 16:43 +0000
      Re: Ask Usenet: How do you manage your passwords? RS Wood <rsw@therandymon.com> - 2014-03-12 17:14 +0000
        Re: Ask Usenet: How do you manage your passwords? Randy Westlund <Vorzakir@invalid.invalid> - 2014-03-13 06:32 +0000
  Re: Ask Usenet: How do you manage your passwords? "q.kontinuum" <achsis_of_elvis@yahoo.co.uk> - 2014-03-17 07:41 +0100

csiph-web