Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #194454

Re: Chaniging focus: security ouitside a password manager

Path csiph.com!feeder.erje.net!1.eu.feeder.erje.net!news.unit0.net!news.mixmin.net!aioe.org!bofh.it!news.nic.it!robomod
From Cindy-Sue Causey <butterflybytes@gmail.com>
Newsgroups linux.debian.user
Subject Re: Chaniging focus: security ouitside a password manager
Date Tue, 03 Apr 2018 18:30:01 +0200
Message-ID <vAwYN-1R2-7@gated-at.bofh.it> (permalink)
References <vxgdP-5Um-11@gated-at.bofh.it> <vz7pL-2ir-3@gated-at.bofh.it> <vzdOx-6GE-1@gated-at.bofh.it> <vA7nH-1KQ-5@gated-at.bofh.it> <vAn98-3IN-11@gated-at.bofh.it>
X-Original-To Debian Users <debian-user@lists.debian.org>
X-Mailbox-Line From debian-user-request@lists.debian.org Tue Apr 3 16:25:31 2018
Old-Return-Path <butterflybytes@gmail.com>
X-Amavis-Spam-Status No, score=-6.999 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FOURLA=0.1, FREEMAIL_FROM=0.001, LDO_WHITELIST=-5, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no
X-Policyd-Weight using cached result; rate: -7
Dkim-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=vARzKxyF4BLna8oxUEsppBEWX3Qi+DKB9wgeVt0pt1w=; b=PLEyhk6zB18+60/HK+/qP3kAOdKhgYSosm6qj5c3F11ANOpZfOXTVtSnbgYI/vdiBM t/n/X+06LVoyiGfJ/z9BUWpPbXbFZ4c9jcFE73Y16dh3+6R+iLsq2mRZ+h8ywi5d1rwB v+yu2KmKvQ32kqQWWVQh812JV4EpqrzcKN3axQri/uogwyOwxygqGaMpzJqGWCq0MPna 8GPq9Tvl3HtudiJBs+fpH2pThUSbZmK/Zazy5gH+1y51N7nbnvJHDFBfoo/gR7bPC9BF kX+FbR3tou3KYLPDdTVZEctjkzvTRY93AAJ/bFr45xkSDKSPKPMtS5RsIJ/8/M64pxzI mCXw==
X-Google-Dkim-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=vARzKxyF4BLna8oxUEsppBEWX3Qi+DKB9wgeVt0pt1w=; b=PwFS/1Mv8nygxmH0y52PdwZlVyHN5hjvhz9yeYV8nqKiAKfrwYoJKfQvGik1663tXX TY2Fd2Honptd8bMrVZY9Hc2td2jAK4eDZtZ2rw0WUlY1tctkPs7tBR8lPzDyTHPDzepc ielzKr2EBmW8vS9UOnxaWUQqZN4RfUBlkrDVMHZNWXBL8TbsTVGaTmkgxS3V3ejyAWgA jR/i32eMiWaHk36VVtBlBR2BkZCjeyT3WVC7pbq10q1h25gI7bV2Oxr/bSVG9T43Kc53 drkLg4tyb+BGmAZd9iyD+XpGdZM0fdPqOZpX16/1ZAaw5NJz90+AFJmhsU+ON4ZsnNdM zJBg==
X-Gm-Message-State AElRT7GxtTFE1Kbla3iNW6RTUFu9KEH9Myy/M9KSKRHBzNGKwoVmORpK 2+xT9pMZMUl+J5wtTGNGYFxeEHJ9utAtUz0t1fE=
X-Google-SMTP-Source AIpwx48juj8T/CRJN7ex20akRmwzhGDVskMwtxAv0hmTASmCjNeMdsPzzn7i6mfZ7eFKipjS216KCpPeNyKPSm3Y2B0=
X-Received by 2002:a9d:4501:: with SMTP id w1-v6mr8028366ote.365.1522772712371; Tue, 03 Apr 2018 09:25:12 -0700 (PDT)
MIME-Version 1.0
Content-Type text/plain; charset="UTF-8"
X-Mailing-List <debian-user@lists.debian.org> archive/latest/734289
List-ID <debian-user.lists.debian.org>
List-URL <https://lists.debian.org/debian-user/>
List-Archive https://lists.debian.org/msgid-search/CAO1P-kAE9Gwd6taouS=mUMk8o=C1NPDG9fZ7P9ZEWaDNru4h2w@mail.gmail.com
Approved robomod@news.nic.it
Lines 37
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Date Tue, 3 Apr 2018 12:25:11 -0400
X-Original-Message-ID <CAO1P-kAE9Gwd6taouS=mUMk8o=C1NPDG9fZ7P9ZEWaDNru4h2w@mail.gmail.com>
X-Original-References <201803251152.13825.rhkramer@gmail.com> <alpine.DEB.2.11.1803301838360.282@post> <a4a40926-cea2-5d71-9a5c-d45c0460d8c0@affinityvision.com.au> <201804020907.16879.rhkramer@gmail.com> <31806f43-f301-501c-9086-bc348f83d5bf@walnut.gen.nz>
Xref csiph.com linux.debian.user:194454

Show key headers only | View raw

On 4/3/18, Richard Hector <richard@walnut.gen.nz> wrote:
> On 03/04/18 01:07, rhkramer@gmail.com wrote:
>> the plaintext passwords would
>> disappear from RAM (except to the extent that (iiuc) there are (NSA) ways
>> to
>> recover the contents of RAM if power is restored to the machine fairly
>> quickly).
>
> I'm not sure you actually need to be the NSA for that. Anything you can
> plug in that can do DMA can probably do it - firewire is one option, but
> for something with PCI(e) or other slots you could probably plug in a
> special card (or maybe just a firewire card). I think the RAM will
> persist for a few minutes at least.


Speaking firsthand, for those worried that much about the possibility,
one thing is to add more than ample memory so that RAM has some place
to go quickly.

Just yesterday, my RAM was still *maxxed out* a half hour or so after
I logged back in from having been away from the computer. THAT was
because hardware memory was maxxed out k/t 320+ open (although not
active) browser tabs. It hadn't crossed my mind as to potential
negative consequences of RAM just hanging there until reading the
above.

Am working on my personal lack of enough (computer) memory issue, but
in the meantime, its glass half full side is that it shows what can
and does happen timely to what's being chatted here. Chalked it up on
the win side. :)

Cindy :)
-- 
Cindy-Sue Causey
Talking Rock, Pickens County, Georgia, USA

* runs with duct tape *

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Password Manager opinions and recommendations rhkramer@gmail.com - 2018-03-25 18:00 +0200
  Re: Password Manager opinions and recommendations likcoras <likcoras@riseup.net> - 2018-03-25 18:40 +0200
    Re: Password Manager opinions and recommendations Ben Finney <bignose@debian.org> - 2018-03-26 00:10 +0200
  Re: Password Manager opinions and recommendations Brian <ad44@cityscape.co.uk> - 2018-03-25 19:50 +0200
    Re: Password Manager opinions and recommendations Roberto C. Sánchez <roberto@debian.org> - 2018-03-25 20:10 +0200
      Re: Password Manager opinions and recommendations Brian <ad44@cityscape.co.uk> - 2018-03-25 20:50 +0200
        Re: Password Manager opinions and recommendations Ángel <debian-user@debian.16bits.net> - 2018-03-25 23:20 +0200
          Re: Password Manager opinions and recommendations Brian <ad44@cityscape.co.uk> - 2018-03-26 21:40 +0200
            Re: Password Manager opinions and recommendations Mark Fletcher <mark27q1@gmail.com> - 2018-03-27 04:50 +0200
  Re: Password Manager opinions and recommendations Richard Hector <richard@walnut.gen.nz> - 2018-03-26 02:40 +0200
    Re: Password Manager opinions and recommendations rhkramer@gmail.com - 2018-03-26 04:00 +0200
      Re: Password Manager opinions and recommendations Brian <ad44@cityscape.co.uk> - 2018-03-26 22:00 +0200
        Re: Password Manager opinions and recommendations rhkramer@gmail.com - 2018-03-26 23:40 +0200
          Re: Password Manager opinions and recommendations Joe <joe@jretrading.com> - 2018-03-27 10:10 +0200
            Re: Password Manager opinions and recommendations rhkramer@gmail.com - 2018-03-27 14:50 +0200
              Re: Password Manager opinions and recommendations rhkramer@gmail.com - 2018-03-27 15:00 +0200
        Update: Re: Password Manager opinions and recommendations rhkramer@gmail.com - 2018-03-27 03:10 +0200
          Re: Update: Re: Password Manager opinions and recommendations Abdullah Ramazanoglu <ar018@yahoo.com> - 2018-03-27 03:40 +0200
          Re: Update: Re: Password Manager opinions and recommendations Kushal Kumaran <kushal@locationd.net> - 2018-03-27 07:00 +0200
            Re: Update: Re: Password Manager opinions and recommendations rhkramer@gmail.com - 2018-03-27 14:40 +0200
          Re: Update: Re: Password Manager opinions and recommendations Joe <joe@jretrading.com> - 2018-03-27 10:00 +0200
            Re: Update: Re: Password Manager opinions and recommendations rhkramer@gmail.com - 2018-03-27 14:50 +0200
          Re: Update: Re: Password Manager opinions and recommendations Brian <ad44@cityscape.co.uk> - 2018-03-27 13:20 +0200
            Re: Update: Re: Password Manager opinions and recommendations Richard Hector <richard@walnut.gen.nz> - 2018-03-28 04:30 +0200
              Re: Update: Re: Password Manager opinions and recommendations Brian <ad44@cityscape.co.uk> - 2018-03-28 12:40 +0200
          Re: Update: Re: Password Manager opinions and recommendations Tomaž Šolc <tomaz.solc@tablix.org> - 2018-03-30 14:00 +0200
            Re: Update: Re: Password Manager opinions and recommendations Curt <curty@free.fr> - 2018-03-30 14:50 +0200
              Re: Update: Re: Password Manager opinions and recommendations rhkramer@gmail.com - 2018-03-30 16:10 +0200
                Re: Update: Re: Password Manager opinions and recommendations Cindy-Sue Causey <butterflybytes@gmail.com> - 2018-03-31 01:00 +0200
            Storing "real" user data: was: Re: Update: Re: Password Manager opinions and recommendations rhkramer@gmail.com - 2018-03-30 16:00 +0200
              Re: Storing "real" user data: was: Re: Update: Re: Password Manager  opinions and recommendations Greg Wooledge <wooledg@eeg.ccf.org> - 2018-03-30 16:20 +0200
              Re: Storing "real" user data: was: Re: Update: Re: Password Manager  opinions and recommendations "der.hans" <deb-user@LuftHans.com> - 2018-03-30 20:20 +0200
    Re: Password Manager opinions and recommendations "der.hans" <deb-user@LuftHans.com> - 2018-03-30 10:50 +0200
      Re: Password Manager opinions and recommendations rhkramer@gmail.com - 2018-03-30 15:20 +0200
        Re: Password Manager opinions and recommendations "der.hans" <deb-user@LuftHans.com> - 2018-03-30 21:00 +0200
          Re: Password Manager opinions and recommendations Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-03-31 03:50 +0200
            Chaniging focus: security ouitside a password manager (was: Re: Password Manager opinions and recommendations) rhkramer@gmail.com - 2018-04-02 15:10 +0200
              Re: Chaniging focus: security ouitside a password manager (was: Re:  Password Manager opinions and recommendations) <tomas@tuxteam.de> - 2018-04-02 15:20 +0200
                Re: Chaniging focus: security ouitside a password manager (was: Re: Password Manager opinions and recommendations) rhkramer@gmail.com - 2018-04-02 20:30 +0200
              Re: Chaniging focus: security ouitside a password manager (was: Re:  Password Manager opinions and recommendations) Roberto C. Sánchez <roberto@debian.org> - 2018-04-02 15:30 +0200
              Re: Chaniging focus: security ouitside a password manager likcoras <likcoras@riseup.net> - 2018-04-02 16:00 +0200
              Re: Chaniging focus: security ouitside a password manager Ben Finney <bignose@debian.org> - 2018-04-03 01:30 +0200
              Re: Chaniging focus: security ouitside a password manager (was: Re:  Password Manager opinions and recommendations) "der.hans" <deb-user@LuftHans.com> - 2018-04-03 02:10 +0200
              Re: Chaniging focus: security ouitside a password manager Richard Hector <richard@walnut.gen.nz> - 2018-04-03 08:00 +0200
                Re: Chaniging focus: security ouitside a password manager rhkramer@gmail.com - 2018-04-03 13:50 +0200
                Re: Chaniging focus: security ouitside a password manager Cindy-Sue Causey <butterflybytes@gmail.com> - 2018-04-03 18:30 +0200
              Re: Chaniging focus: security ouitside a password manager (was: Re:  Password Manager opinions and recommendations) Brian <ad44@cityscape.co.uk> - 2018-04-03 11:40 +0200
              Re: Chaniging focus: security ouitside a password manager (was: Re:  Password Manager opinions and recommendations) Brian <ad44@cityscape.co.uk> - 2018-04-03 21:10 +0200
  Re: Password Manager opinions and recommendations Abdullah Ramazanoglu <ar018@yahoo.com> - 2018-03-26 03:40 +0200
    Re: Password Manager opinions and recommendations Abdullah Ramazanoglu <ar018@yahoo.com> - 2018-03-26 04:20 +0200
      Re: Password Manager opinions and recommendations Ben Caradoc-Davies <ben@transient.nz> - 2018-03-26 05:10 +0200
  Re: Password Manager opinions and recommendations Ben Caradoc-Davies <ben@transient.nz> - 2018-03-26 04:00 +0200

csiph-web