Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #275907

Re: Writing passwords down

From Karen Lewellen <klewellen@shellworld.net>
Newsgroups linux.debian.user
Subject Re: Writing passwords down
Date 2024-12-19 02:20 +0100
Message-ID <JVdmN-HAs-3@gated-at.bofh.it> (permalink)
References (6 earlier) <JULgR-hBW-3@gated-at.bofh.it> <JULJT-hN1-1@gated-at.bofh.it> <JUUka-pdi-3@gated-at.bofh.it> <JUUka-pdi-1@gated-at.bofh.it> <JUZ0t-sAu-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Well,  I do not use hundreds.
Still that little black book is, speaking personally, far safer to my mind 
then any digital solution.



On Wed, 18 Dec 2024, Michael Kjörling wrote:

> On 17 Dec 2024 23:42 -0500, from klewellen@shellworld.net (Karen Lewellen):
>> Simply sharing a password method I was taught years ago that works well.
>> Granted I  never allow anything to choose a password for me, not ever.
>> Instead I create a sentence with aspects of the characters forming the
>> password.
>> As an example, I will create one, not in use of course,  for the below
>> sentence.
>> in 2012 I joined the Debian list.
>> Again everything above  is likely untrue, still it becomes the following.
>> ItlI#10t4l
>> [/snip description/]
>
> This method would seem to fail at generating randomness, because it's
> based on an initial meaningful sentence (keeping in mind that natural
> language has very low entropy; consider that in your example, "joined"
> is much more likely in that position than, say, "aardvark", "vibrated"
> or "swordsman") plus some relatively fixed, predetermined
> transformations.
>
> It also requires you to remember which sentence you used as the seed
> for which service. That might work for a few services, but does it
> scale into the hundreds or thousands?
>
> Thus xkcd 936 essentially applies. https://xkcd.com/936/
>
> As I note on https://michael.kjorling.se/password-tips/ (constructive
> criticism most welcome!) "someone who has perfect knowledge of you
> should not have any advantage in guessing the password".
>
> The two main ways of meeting that criteria (which is not the only one,
> but is the one which is pertinent here) is random out of a character
> set, and Diceware with words selected at random. The former gives a
> high degree of security for a given length, and the latter gives good
> memorability. The work factor of a password or passphrase generated
> using either method can be objectively quantified.
>
> And humans in general are terrible at randomness.
>
> -- 
> Michael Kjörling
> 🔗 https://michael.kjorling.se
>
>

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-15 09:00 +0100
  Re: a passwordless operating system debian-user@howorth.org.uk - 2024-12-15 14:50 +0100
    Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-15 15:30 +0100
    Re: a passwordless operating system songbird <songbird@anthive.com> - 2024-12-17 05:00 +0100
      Re: a passwordless operating system John Hasler <john@sugarbit.com> - 2024-12-17 05:30 +0100
        Writing passwords down [was: a passwordless operating system] <tomas@tuxteam.de> - 2024-12-17 06:50 +0100
          Re: Writing passwords down [was: a passwordless operating system] "Loris Bennett" <loris.bennett@fu-berlin.de> - 2024-12-17 08:30 +0100
            Re: Writing passwords down [was: a passwordless operating system] <tomas@tuxteam.de> - 2024-12-17 08:50 +0100
            Re: Writing passwords down [was: a passwordless operating system] Mike Castle <dalgoda+debian@gmail.com> - 2024-12-17 18:00 +0100
          Re: Writing passwords down [was: a passwordless operating system] Jeffrey Walton <noloader@gmail.com> - 2024-12-17 15:30 +0100
          Re: Writing passwords down [was: a passwordless operating system] Lee <ler762@gmail.com> - 2024-12-17 15:40 +0100
            Re: libreoffice/openoffice system theme <tomas@tuxteam.de> - 2024-12-17 16:00 +0100
          Re: Writing passwords down [was: a passwordless operating system] Michael Stone <mstone@debian.org> - 2024-12-17 17:10 +0100
            Re: Writing passwords down [was: a passwordless operating system] Jeffrey Walton <noloader@gmail.com> - 2024-12-17 18:30 +0100
              Re: Writing passwords down [was: a passwordless operating system] "James H. H. Lampert" <jamesl@touchtonecorp.com> - 2024-12-17 18:40 +0100
            Re: Writing passwords down [was: a passwordless operating system] <tomas@tuxteam.de> - 2024-12-17 18:30 +0100
              Re: Writing passwords down [was: a passwordless operating system] Jeffrey Walton <noloader@gmail.com> - 2024-12-17 18:40 +0100
                Re: Writing passwords down [was: a passwordless operating system] tomas@tuxteam.de - 2024-12-17 19:30 +0100
                Re: Writing passwords down [was: a passwordless operating system] Nicholas Geovanis <nickgeovanis@gmail.com> - 2024-12-17 21:10 +0100
          Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-17 18:50 +0100
            Re: Writing passwords down Peter Hillier-Brook <phb@hbsys.plus.com> - 2024-12-17 20:20 +0100
              Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-17 20:50 +0100
                Re: Writing passwords down Karen Lewellen <klewellen@shellworld.net> - 2024-12-18 06:00 +0100
                Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 11:00 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-18 18:20 +0100
                Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-18 19:00 +0100
                Re: Writing passwords down "James H. H. Lampert" <jamesl@touchtonecorp.com> - 2024-12-18 19:10 +0100
                Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-18 20:10 +0100
                Re: Writing passwords down pocket@homemail.com - 2024-12-18 21:20 +0100
                Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 19:30 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-18 20:30 +0100
                Re: Writing passwords down <tomas@tuxteam.de> - 2024-12-19 06:00 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-18 20:30 +0100
                Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-18 23:10 +0100
                Re: Writing passwords down Karen Lewellen <klewellen@shellworld.net> - 2024-12-19 02:20 +0100
                Re: Writing passwords down Karen Lewellen <klewellen@shellworld.net> - 2024-12-19 02:20 +0100
                Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-19 02:30 +0100
                Re: Writing passwords down Karen Lewellen <klewellen@shellworld.net> - 2024-12-19 02:40 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-19 10:20 +0100
                Re: Writing passwords down Joe <joe@jretrading.com> - 2024-12-19 12:20 +0100
                Re: Writing passwords down Max Nikulin <manikulin@gmail.com> - 2024-12-20 04:30 +0100
                Re: Writing passwords down George at Clug <Clug@goproject.info> - 2024-12-20 05:40 +0100
                Re: Writing passwords down <tomas@tuxteam.de> - 2024-12-20 05:40 +0100
                Re: Writing passwords down Jeffrey Walton <noloader@gmail.com> - 2024-12-20 06:10 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-20 10:50 +0100
                Re: Writing passwords down George at Clug <Clug@goproject.info> - 2024-12-21 01:40 +0100
                Re: Writing passwords down Max Nikulin <manikulin@gmail.com> - 2024-12-21 04:30 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-20 10:30 +0100
                Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 10:20 +0100
                Re: Writing passwords down <tomas@tuxteam.de> - 2024-12-18 10:20 +0100
                Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 10:30 +0100
                Re: Writing passwords down Chris Green <cl@isbd.net> - 2024-12-18 18:20 +0100
                Re: Writing passwords down <tomas@tuxteam.de> - 2024-12-18 19:00 +0100
                Re: Writing passwords down Jeffrey Walton <noloader@gmail.com> - 2024-12-18 19:20 +0100
                Re: Writing passwords down Frank Jezzer <etphonehomefrance@gmail.com> - 2024-12-22 17:30 +0100
              Re: Writing passwords down Jeffrey Walton <noloader@gmail.com> - 2024-12-17 23:30 +0100
            Re: Writing passwords down John Hasler <john@sugarbit.com> - 2024-12-17 20:30 +0100
            Re: Writing passwords down debian-user@howorth.org.uk - 2024-12-17 21:50 +0100
              Re: Writing passwords down Michael Kjörling <c9bc136c6063@ewoof.net> - 2024-12-18 10:30 +0100
      Re: a passwordless operating system debian-user@howorth.org.uk - 2024-12-17 12:10 +0100
  Re: a passwordless operating system Jeffrey Walton <noloader@gmail.com> - 2024-12-15 15:40 +0100
    Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-16 08:50 +0100
      Re: a passwordless operating system Jeffrey Walton <noloader@gmail.com> - 2024-12-16 08:50 +0100
        Re: a passwordless operating system Andy Smith <andy@strugglers.net> - 2024-12-16 09:00 +0100
          Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-16 09:10 +0100
        Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-16 09:10 +0100
          Re: a passwordless operating system Jeffrey Walton <noloader@gmail.com> - 2024-12-16 09:10 +0100
      Re: a passwordless operating system 🦓 <czyborra@gmail.com> - 2024-12-16 09:20 +0100

csiph-web