Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #186318

Re: One-line password generator

From Brian <ad44@cityscape.co.uk>
Newsgroups linux.debian.user
Subject Re: One-line password generator
Date 2017-09-02 22:00 +0200
Message-ID <ulmKe-74M-37@gated-at.bofh.it> (permalink)
References <ulkfn-5Iy-3@gated-at.bofh.it> <ullO9-6x3-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On Sat 02 Sep 2017 at 20:58:13 +0200, Thomas Schmitt wrote:

> Brian wrote:
> > I think you had a provider's compromised database in mind when you wrote
> > this.
> 
> Yes. That's the way how an attacker can get the biggest harvest
> and also the risk which you cannot influence from remote.

True. I'm glad you ackowledged the user has no control over a breaching
of the provider's system.
 
> > An attacker would be limited by his imagination and monetary and
> > time costs but, in the end, it could be assumed he would get something
> > out of it.
> 
> It would be desirable if he could not get your password before the service
> provider takes notice of the theft and decides to take action. 

Very desirable.

> > The compromise is also not the user's responsibilty and it is
> > unfair to put the burden for mitigating it on him
> 
> If suddenly money vanishes from your account or luxury goods get ordered
> at your expense, then it will possibly be seen as lame excuse if you point
> to a possible password theft.

We are talking here about a provider's system being penetrated and a
number of password thefts happening, It is hardly a "lame excuse" if the
user uses this in a claim for compensation, so I do not know where you
are coming from. The provider is responsible for the information being
held on its systems, even if the user has used "password" for the
password.

> > Guessable? Is this the type of guessing done by friends, acquaintances
> > and close family members to try to get at your gmail or bank account?
> 
> I rather think of web crawlers, statistical tools, and artificial
> intelligence on the field of human psychology.
> The goal is to avoid most of the tries with passwords which a human is
> very unlikely create.

You would be better off thinking in terms of close family members. They
are the ones to beware of.

> > Random is excellent; write it down or use a password manager.
> 
> The first advice was deprecated for a long time but seems now to be
> revived by the necessity to use superhumanly safe passwords.
> Need makes courageous.
> 
> The second way means that you give all your passwords to one or a few pieces
> of software, which might be safe, maybe.
> You still need to memorize at least one password that is good enough to
> guard all the others.
> As for allowing only a limited frequency of tries: If the attacker can
> steal the encrypted passwords, then he can probably create a version of the
> password manager software which makes as many tries as fast as the CPU
> can do.
> It would help a lot if nobody knows how to make the tries fast.

We are back to the offline cracking. It is interesting and mesmorises
us because of its technological import but is of zero consequence for
online cracking.

Do you want to be safe online? Choose a good password and store it
safely,

Do you want to pre-empt your provider being breached and get ahead of
the game? Forget about it. Que Sera, Sera.

-- 
Brian.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-22 17:10 +0200
  Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-22 21:50 +0200
    Re: One-line password generator <tomas@tuxteam.de> - 2017-08-22 22:10 +0200
      Re: One-line password generator John Hasler <jhasler@newsguy.com> - 2017-08-22 22:50 +0200
        Re: One-line password generator Jude DaShiell <jdashiel@panix.com> - 2017-08-23 14:40 +0200
    Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-22 22:20 +0200
      Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-22 22:20 +0200
      Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-22 22:30 +0200
        Re: One-line password generator Glenn English <ghe2001@gmail.com> - 2017-08-23 22:40 +0200
      Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-23 00:40 +0200
        Re: One-line password generator Lck Ras <likcoras@riseup.net> - 2017-08-23 02:30 +0200
          Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-23 19:20 +0200
            Re: One-line password generator Lck Ras <likcoras@riseup.net> - 2017-08-24 03:00 +0200
        Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-23 17:20 +0200
          Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-23 19:00 +0200
            Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-23 20:00 +0200
              Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-23 21:20 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-24 01:10 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-24 19:50 +0200
                Re: One-line password generator David Wright <deblis@lionunicorn.co.uk> - 2017-08-25 03:00 +0200
                Re: One-line password generator Curt <curty@free.fr> - 2017-08-25 10:50 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-25 11:30 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-25 15:40 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-25 16:50 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-25 18:10 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-25 19:20 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-25 20:10 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-25 20:50 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-25 21:00 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-25 19:00 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-25 19:00 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-25 19:20 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-25 20:20 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-25 19:20 +0200
    Re: One-line password generator Jape Person <japers@comcast.net> - 2017-08-22 22:20 +0200
      Re: One-line password generator Jude DaShiell <jdashiel@panix.com> - 2017-08-23 14:40 +0200
    Re: One-line password generator Mike McClain <mike.junk.46@att.net> - 2017-08-23 03:10 +0200
  Re: One-line password generator Teemu Likonen <tlikonen@iki.fi> - 2017-08-23 06:10 +0200
  Re: One-line password generator Aaron Toponce <aaron.toponce@gmail.com> - 2017-08-23 21:20 +0200
    Re: One-line password generator Greg Wooledge <wooledg@eeg.ccf.org> - 2017-08-23 21:30 +0200
      Re: One-line password generator Aaron Toponce <aaron.toponce@gmail.com> - 2017-08-23 21:40 +0200
        Re: One-line password generator Fungi4All <fungilife@protonmail.com> - 2017-08-23 22:50 +0200
          Re: One-line password generator Terence <terence.john@gmail.com> - 2017-08-23 23:40 +0200
  Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-26 20:30 +0200
    Re: One-line password generator Nicolas George <george@nsup.org> - 2017-08-26 20:40 +0200
      Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-26 21:10 +0200
        Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-27 16:00 +0200
    Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-26 21:20 +0200
      Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-27 16:00 +0200
        Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-27 17:10 +0200
          Re: One-line password generator Curt <curty@free.fr> - 2017-08-27 20:10 +0200
          Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-27 20:10 +0200
            Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-27 21:10 +0200
              Re: One-line password generator Andy Smith <andy@strugglers.net> - 2017-08-28 00:00 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-28 09:40 +0200
                Re: One-line password generator Curt <curty@free.fr> - 2017-08-28 11:40 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-28 12:10 +0200
                Re: One-line password generator Andy Smith <andy@strugglers.net> - 2017-08-28 13:50 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-28 15:20 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-29 04:40 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-29 09:10 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-29 10:50 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-29 11:00 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-29 12:50 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-29 13:00 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-29 14:30 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-30 03:50 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 12:40 +0200
                Re: One-line password generator Andy Smith <andy@strugglers.net> - 2017-08-29 14:10 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-29 15:00 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-30 03:50 +0200
                Re: One-line password generator Greg Wooledge <wooledg@eeg.ccf.org> - 2017-08-30 14:20 +0200
                Re: One-line password generator Gene Heskett <gheskett@shentel.net> - 2017-08-30 14:50 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 15:20 +0200
                Re: One-line password generator Gene Heskett <gheskett@shentel.net> - 2017-08-30 15:30 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 15:50 +0200
                Re: One-line password generator Gene Heskett <gheskett@shentel.net> - 2017-08-30 16:00 +0200
                Re: One-line password generator Greg Wooledge <wooledg@eeg.ccf.org> - 2017-08-30 16:10 +0200
                Re: One-line password generator Gene Heskett <gheskett@shentel.net> - 2017-08-30 18:50 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 16:30 +0200
                Re: One-line password generator Gene Heskett <gheskett@shentel.net> - 2017-08-30 20:10 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 23:00 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-09-01 10:40 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-09-01 10:50 +0200
                Re: One-line password generator Curt <curty@free.fr> - 2017-08-30 16:30 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 17:00 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-30 20:00 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-29 11:00 +0200
            Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-27 21:20 +0200
              Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-29 21:20 +0200
                Re: One-line password generator Reco <recoverym4n@gmail.com> - 2017-08-29 21:40 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-29 22:00 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-29 23:00 +0200
                Re: One-line password generator Curt <curty@free.fr> - 2017-08-30 10:50 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 12:40 +0200
                Re: One-line password generator Reco <recoverym4n@gmail.com> - 2017-08-30 00:00 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-31 21:10 +0200
                Re: One-line password generator Fungi4All <fungilife@protonmail.com> - 2017-08-31 21:20 +0200
                Re: One-line password generator Reco <recoverym4n@gmail.com> - 2017-08-31 21:40 +0200
    Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-27 04:20 +0200
      Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-27 16:00 +0200
        Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-27 16:40 +0200
  Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-09-01 17:00 +0200
    Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-09-01 21:50 +0200
      Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-09-01 23:50 +0200
        Re: One-line password generator Jude DaShiell <jdashiel@panix.com> - 2017-09-02 11:50 +0200
          Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-09-02 13:00 +0200
            Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-09-02 19:20 +0200
              Re: One-line password generator Jude DaShiell <jdashiel@panix.com> - 2017-09-02 20:30 +0200
              Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-09-02 21:00 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-09-02 22:00 +0200
      Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-09-02 01:50 +0200
    Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-09-02 01:50 +0200
      Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-09-02 04:40 +0200
        Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-09-02 05:40 +0200
          Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-09-02 16:40 +0200
            Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-09-04 01:10 +0200

csiph-web