Re: Is Keychain or any other program safe for storing sensitive data on a desktop Mac?

From	Your Name <YourName@YourISP.com>
Newsgroups	comp.sys.mac.misc
Subject	Re: Is Keychain or any other program safe for storing sensitive data on a desktop Mac?
Date	2018-11-16 14:14 +1300
Organization	Aioe.org NNTP Server
Message-ID	<psl5m2$1rua$1@gioia.aioe.org> (permalink)
References	<ps2re1$af$1@gioia.aioe.org> <2018111512255053837-tomevans9890@yahoo.ca>

Show all headers | View raw

On 2018-11-15 20:25:50 +0000, Tom Evans said:
> On 2018-11-13 01:00:32 +0000, Your Name said:
>> On 2018-11-12 21:34:27 +0000, Tom Evans said:
>>> On 2018-11-11 05:09:38 +0000, Your Name said:
>>>> On 2018-11-11 03:56:30 +0000, Tom Evans said:
>>>>> 
>>>>> Thanks, John and Your. Do you recommend Ipassword over Keychain?
>>>> 
>>>> They completely diffent apps for dsifferent purposes.
>>>> 
>>>> Keychain utility isn't meant to be a user-friendly password manager for 
>>>> looking up passwords, adding new passwords, etc. Keychain is meant to 
>>>> be used along-side auto-form filling as an automatic process, and the 
>>>> utility is only there to allow you to delete old passwords and change 
>>>> passwords.
>>>> 
>>>> 1Password and other similar apps are proper password managers (and in 
>>>> some cases like 1Password they can store other things as well, such as 
>>>> software license codes). They are much easier to use.
>>> 
>>> In that case it seems that Ipassword would be more appropriate for me 
>>> because it's easier to use than Keychain.
>>> 
>>> As I wrote, I want to keep an anlphabetical list of information about 
>>> the companies I deal with (such as Amazon, Apple, Best Buy, Costco, 
>>> etcetera) and then have particular notes about those companies (such as 
>>> serial numbers; coupon codes; customer service URL if it's hard to find 
>>> on the companies' Net sites; notes about the Web site forum if it has 
>>> one and if I'm a memberr of that forum;, and security question and 
>>> answers for Web sites if that's applicable.  And as I wrote I want to 
>>> be able to control type characteristics, such as font, font size and 
>>> font bolding in my alphabetical, searchable list of company notes.  I 
>>> also would want the ability to print the list of notes while 
>>> maintaining the text characteristics.
>> 
>> 1Password can store all sorts of things, but the Notes box in each 
>> entry can't be formatted (it's just plain text) ... or at least it is 
>> in version 6, I haven't got version 7 yet. I'm still trying to decide 
>> about their changeover to silly subscriptions (upgrading from version 6 
>> does mean I can get a license for verison 7, but we don't know about 
>> versions after that) or just swapping to one of the other 'normal' apps.
>> 
>> It can print entries, but you don't have any control over the layout. 
>> It can also export the entries to a plain text file which you could 
>> then format in any word processor. Both printing and exporting kind of 
>> defeats the main purpose of having a secure password manager though. 
>> You may as well just use a text file or Word / Pages document.
> 
> I dont think that's true, because my computer seems to be more 
> susceptible to hacking than physical attack.
> 
> There's not much at risk of a physical attack of my premises.
> 
> My security breach that just happened wasn't perpetrated by a physical 
> intruder.
> 
> It's very unlikely that a thief would have found my bank data 
> (including written questions and answers to my security questions and 
> other information such as the dates of my bank transactions and how 
> many accounts I have and perphaps PINs) by going through my garbage, so 
> a hack either of my computer -- or one of the bussinesses that I deal 
> with --  is I think the mose likely cause.

The "security breach that just happened", assuming it had anything at 
all to do with computers, is most likely caused by you entering the 
password into a fake phishing webpage. There's basically nothing any 
piece of software can do about that ... they can block *known* phishing 
websites, but they'll never be able to block them all since hundreds of 
new ones spring up daily. You instead have to use some common sense and 
never click on links simply because they tell you to.

Thread

csiph-web