Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #275811

Re: Writing passwords down [was: a passwordless operating system]

From <tomas@tuxteam.de>
Newsgroups linux.debian.user
Subject Re: Writing passwords down [was: a passwordless operating system]
Date 2024-12-17 08:50 +0100
Message-ID <JUAv7-aMC-3@gated-at.bofh.it> (permalink)
References (1 earlier) <JTXap-hd9b-1@gated-at.bofh.it> <JUwUx-8vi-5@gated-at.bofh.it> <JUxnz-8U5-9@gated-at.bofh.it> <JUyCZ-9Eu-1@gated-at.bofh.it> <JUAbL-aFI-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On Tue, Dec 17, 2024 at 08:07:52AM +0100, Loris Bennett wrote:
> <tomas@tuxteam.de> writes:
> 
> > On Mon, Dec 16, 2024 at 10:22:43PM -0600, John Hasler wrote:
> >> songbird writes:
> >> > perhaps because the accounts are jointly owned and it is much easier
> >> > to just continue using the credentials as they exist instead of having
> >> > to set everything up all over again for no real gain.
> >> 
> >> Then follow Bruce Schneier's advice and*write them down*.
> >
> > Do you have a reference?
> >
> > I ask because I'm in the middle of a discussion (and that was my advice,
> > too). Seeing what Schneier has to say on that would be very interesting.
> 
> I have a German copy of "Secrets & Lies" from 2001 in which Schneier
> discusses writing passwords down on p. 138 (Chapter 9 "Identification
> and Authentication, Section "Access Tokens").  He says that passwords
> are no worse than other "simple tokens" (anything which can be stolen or
> copied) but if you write them down, keeping them in your wallet can be
> safer than sticking them with a post-it to you monitor.  His actual
> advice is that you should only write half your password down and commit
> the other half to memory.

Thanks :)

Cheers
-- 
t

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-15 09:00 +0100
  Re: a passwordless operating system debian-user@howorth.org.uk - 2024-12-15 14:50 +0100
    Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-15 15:30 +0100
    Re: a passwordless operating system songbird <songbird@anthive.com> - 2024-12-17 05:00 +0100
      Re: a passwordless operating system John Hasler <john@sugarbit.com> - 2024-12-17 05:30 +0100
        Writing passwords down [was: a passwordless operating system] <tomas@tuxteam.de> - 2024-12-17 06:50 +0100
          Re: Writing passwords down [was: a passwordless operating system] "Loris Bennett" <loris.bennett@fu-berlin.de> - 2024-12-17 08:30 +0100
            Re: Writing passwords down [was: a passwordless operating system] <tomas@tuxteam.de> - 2024-12-17 08:50 +0100
            Re: Writing passwords down [was: a passwordless operating system] Mike Castle <dalgoda+debian@gmail.com> - 2024-12-17 18:00 +0100
          Re: Writing passwords down [was: a passwordless operating system] Jeffrey Walton <noloader@gmail.com> - 2024-12-17 15:30 +0100
          Re: Writing passwords down [was: a passwordless operating system] Lee <ler762@gmail.com> - 2024-12-17 15:40 +0100
            Re: libreoffice/openoffice system theme <tomas@tuxteam.de> - 2024-12-17 16:00 +0100
          Re: Writing passwords down [was: a passwordless operating system] Michael Stone <mstone@debian.org> - 2024-12-17 17:10 +0100
            Re: Writing passwords down [was: a passwordless operating system] Jeffrey Walton <noloader@gmail.com> - 2024-12-17 18:30 +0100
              Re: Writing passwords down [was: a passwordless operating system] "James H. H. Lampert" <jamesl@touchtonecorp.com> - 2024-12-17 18:40 +0100
            Re: Writing passwords down [was: a passwordless operating system] <tomas@tuxteam.de> - 2024-12-17 18:30 +0100
              Re: Writing passwords down [was: a passwordless operating system] Jeffrey Walton <noloader@gmail.com> - 2024-12-17 18:40 +0100
                Re: Writing passwords down [was: a passwordless operating system] tomas@tuxteam.de - 2024-12-17 19:30 +0100
                Re: Writing passwords down [was: a passwordless operating system] Nicholas Geovanis <nickgeovanis@gmail.com> - 2024-12-17 21:10 +0100
          Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-17 18:50 +0100
            Re: Writing passwords down Peter Hillier-Brook <phb@hbsys.plus.com> - 2024-12-17 20:20 +0100
              Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-17 20:50 +0100
                Re: Writing passwords down Karen Lewellen <klewellen@shellworld.net> - 2024-12-18 06:00 +0100
                Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 11:00 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-18 18:20 +0100
                Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-18 19:00 +0100
                Re: Writing passwords down "James H. H. Lampert" <jamesl@touchtonecorp.com> - 2024-12-18 19:10 +0100
                Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-18 20:10 +0100
                Re: Writing passwords down pocket@homemail.com - 2024-12-18 21:20 +0100
                Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 19:30 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-18 20:30 +0100
                Re: Writing passwords down <tomas@tuxteam.de> - 2024-12-19 06:00 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-18 20:30 +0100
                Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-18 23:10 +0100
                Re: Writing passwords down Karen Lewellen <klewellen@shellworld.net> - 2024-12-19 02:20 +0100
                Re: Writing passwords down Karen Lewellen <klewellen@shellworld.net> - 2024-12-19 02:20 +0100
                Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-19 02:30 +0100
                Re: Writing passwords down Karen Lewellen <klewellen@shellworld.net> - 2024-12-19 02:40 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-19 10:20 +0100
                Re: Writing passwords down Joe <joe@jretrading.com> - 2024-12-19 12:20 +0100
                Re: Writing passwords down Max Nikulin <manikulin@gmail.com> - 2024-12-20 04:30 +0100
                Re: Writing passwords down George at Clug <Clug@goproject.info> - 2024-12-20 05:40 +0100
                Re: Writing passwords down <tomas@tuxteam.de> - 2024-12-20 05:40 +0100
                Re: Writing passwords down Jeffrey Walton <noloader@gmail.com> - 2024-12-20 06:10 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-20 10:50 +0100
                Re: Writing passwords down George at Clug <Clug@goproject.info> - 2024-12-21 01:40 +0100
                Re: Writing passwords down Max Nikulin <manikulin@gmail.com> - 2024-12-21 04:30 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-20 10:30 +0100
                Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 10:20 +0100
                Re: Writing passwords down <tomas@tuxteam.de> - 2024-12-18 10:20 +0100
                Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 10:30 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-18 18:20 +0100
                Re: Writing passwords down <tomas@tuxteam.de> - 2024-12-18 19:00 +0100
                Re: Writing passwords down Jeffrey Walton <noloader@gmail.com> - 2024-12-18 19:20 +0100
                Re: Writing passwords down Frank Jezzer <etphonehomefrance@gmail.com> - 2024-12-22 17:30 +0100
              Re: Writing passwords down Jeffrey Walton <noloader@gmail.com> - 2024-12-17 23:30 +0100
            Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-17 20:30 +0100
            Re: Writing passwords down debian-user@howorth.org.uk - 2024-12-17 21:50 +0100
              Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 10:30 +0100
      Re: a passwordless operating system debian-user@howorth.org.uk - 2024-12-17 12:10 +0100
  Re: a passwordless operating system Jeffrey Walton <noloader@gmail.com> - 2024-12-15 15:40 +0100
    Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-16 08:50 +0100
      Re: a passwordless operating system Jeffrey Walton <noloader@gmail.com> - 2024-12-16 08:50 +0100
        Re: a passwordless operating system Andy Smith <andy@strugglers.net> - 2024-12-16 09:00 +0100
          Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-16 09:10 +0100
        Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-16 09:10 +0100
          Re: a passwordless operating system Jeffrey Walton <noloader@gmail.com> - 2024-12-16 09:10 +0100
      Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-16 09:20 +0100

csiph-web