Re: Root password strength

From	Michael Kjörling <2695bd53d63c@ewoof.net>
Newsgroups	linux.debian.user
Subject	Re: Root password strength
Date	2024-03-20 19:10 +0100
Message-ID	<Ik8xX-s8H-9@gated-at.bofh.it> (permalink)
References	(3 earlier) <Ik637-qzl-3@gated-at.bofh.it> <Ik6FQ-r20-17@gated-at.bofh.it> <Ik6Pv-r57-5@gated-at.bofh.it> <Ik8eB-rNd-7@gated-at.bofh.it> <Ik8eB-rNd-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 20 Mar 2024 18:46 +0100, from peb@debian.org (Pierre-Elliott Bécue):
>>> Most of the time, writing down a password is a very bad idea.
>> 
>> Not in your own home.  And in any event, it depends where one keeps that
>> 'written down' password.
>> 
>> And if it *does* become an issue at home, you've got bigger, more
>> immediate, problems to deal with;  Of the intruder variety.
> 
> You have a rather bad cybersecurity approach. And you did not do a
> proper risk assessment.

"Writing a password down" can also be known as "using a password
manager".

Which I would say is _solid_ advice for just about everyone, because
if you're doing passwords properly and have any kind of Internet
presence, you have essentially no chance of remembering every last
one.

The requirement being, of course, that you use a trustworthy password
manager and a _very good_ password database protection passphrase.

Learning a handful of strong passwords that you use regularly (FDE
unlocking, login, password manager, maybe another set of those for
work, and perhaps a few others) is perfectly reasonable, especially if
you aren't arbitrarily forced to change them every few months.
Committing _every_ password to memory is completely impractical.

-- 
Michael Kjörling                     🔗 https://michael.kjorling.se
“Remember when, on the Internet, nobody cared that you were a dog?”

Thread

Root password strength Jan Krapivin <daydreamer199005@gmail.com> - 2024-03-19 15:50 +0100
  Re: Root password strength Jan Krapivin <daydreamer199005@gmail.com> - 2024-03-19 16:00 +0100
  Re: Root password strength Dan Ritter <dsr@randomstring.org> - 2024-03-19 16:10 +0100
    Re: Root password strength debian-user@howorth.org.uk - 2024-03-19 16:50 +0100
      Re: Root password strength Greg Wooledge <greg@wooledge.org> - 2024-03-19 21:20 +0100
  Re: Root password strength Greg Wooledge <greg@wooledge.org> - 2024-03-19 16:10 +0100
    Re: Root password strength jeremy ardley <jeremy.ardley@gmail.com> - 2024-03-19 21:30 +0100
      Re: Root password strength <tomas@tuxteam.de> - 2024-03-20 06:40 +0100
        Re: Root password strength Jeffrey Walton <noloader@gmail.com> - 2024-03-20 07:10 +0100
          Re: Root password strength tomas@tuxteam.de - 2024-03-20 08:40 +0100
        Re: Root password strength jeremy ardley <jeremy.ardley@gmail.com> - 2024-03-20 08:50 +0100
          Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 12:10 +0100
            Re: Root password strength <tomas@tuxteam.de> - 2024-03-20 12:20 +0100
              Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 13:20 +0100
            Re: Root password strength jeremy ardley <jeremy.ardley@gmail.com> - 2024-03-20 12:30 +0100
              Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 13:10 +0100
              Re: Root password strength Dan Ritter <dsr@randomstring.org> - 2024-03-20 13:40 +0100
            Re: Root password strength Jeffrey Walton <noloader@gmail.com> - 2024-03-20 14:30 +0100
              Re: Root password strength <tomas@tuxteam.de> - 2024-03-20 14:50 +0100
  Re: Root password strength Marco Moock <mm@dorfdsl.de> - 2024-03-19 16:40 +0100
  Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-19 20:40 +0100
    Re: Root password strength debian-user@howorth.org.uk - 2024-03-19 22:00 +0100
  Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 16:00 +0100
    Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 16:20 +0100
      Re: Root password strength Jan Krapivin <daydreamer199005@gmail.com> - 2024-03-20 16:30 +0100
        Re: Root password strength John Hasler <john@sugarbit.com> - 2024-03-20 17:10 +0100
          Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 17:20 +0100
            Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 18:50 +0100
              Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 19:10 +0100
                Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 19:30 +0100
              Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 19:50 +0100
              Re: Root password strength Lee <ler762@gmail.com> - 2024-03-20 20:50 +0100
                Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 21:00 +0100
                Re: Root password strength Lee <ler762@gmail.com> - 2024-03-20 21:30 +0100
          Re: Root password strength <tomas@tuxteam.de> - 2024-03-20 18:50 +0100
            Re: Root password strength John Hasler <john@sugarbit.com> - 2024-03-20 19:50 +0100
        Re: Root password strength "Alexander V. Makartsev" <avbetev@gmail.com> - 2024-03-21 20:40 +0100
          Re: Root password strength Jan Krapivin <daydreamer199005@gmail.com> - 2024-03-22 11:00 +0100
            Re: Root password strength Joe <joe@jretrading.com> - 2024-03-22 12:00 +0100
            Re: Root password strength "Alexander V. Makartsev" <avbetev@gmail.com> - 2024-03-22 13:30 +0100
              Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-23 10:50 +0100
            Re: Root password strength Lee <ler762@gmail.com> - 2024-03-23 01:10 +0100
              Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-23 11:30 +0100
      Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 16:50 +0100
    Re: Root password strength John Hasler <john@sugarbit.com> - 2024-03-20 17:00 +0100
      Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 17:10 +0100
        Re: Root password strength Jeffrey Walton <noloader@gmail.com> - 2024-03-20 17:30 +0100
          Re: Root password strength Max Nikulin <manikulin@gmail.com> - 2024-03-20 17:50 +0100
          Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 18:00 +0100
            Re: Root password strength Jeffrey Walton <noloader@gmail.com> - 2024-03-20 18:40 +0100
              Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 18:50 +0100
                Re: Root password strength Jeffrey Walton <noloader@gmail.com> - 2024-03-20 19:20 +0100
                Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 19:40 +0100
                Re: Root password strength Jeffrey Walton <noloader@gmail.com> - 2024-03-20 21:20 +0100
                Re: Root password strength Curt <curty@free.fr> - 2024-03-21 17:50 +0100
                Re: Root password strength John Hasler <john@sugarbit.com> - 2024-03-20 19:40 +0100
                Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 19:50 +0100
        Re: Root password strength John Hasler <john@sugarbit.com> - 2024-03-20 17:30 +0100
          Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 18:00 +0100
        Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 19:20 +0100
      Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 17:10 +0100

csiph-web