Skip Navigation

Posts
46
Comments
645
Joined
2 yr. ago

  • Yes. And every application has a different salt. I really just hope these websites don't store plaintext passwords.

  • deleted by creator

    Jump
  • They really should just add a button. I usually just type in about:profiles in the address bar and select the profile I'll use.

  • Really? The example "bank+[40 character password]" was just an example. Obviously I wouldn't use bank for my banking credentials. I was also under the impression that many websites and applications wouldn't store or transmit plaintext passwords (I wouldn't use http for transmitting credentials). I do concede that there is a news story every month about a corporation getting hacked and the user's passwords were stolen and in plaintext so they could compromise me that way. But I don't think hackers are really going after me because I'm broke. The government maybe. This is really just so I can have a convenient way to have a complex password. I can't remember 5 different 15-20 character complex passwords.

  • I'm sorry. My original post did not convey my intentions adequately. The fact that I have to change my password every 3 months is what sparked my curiosity and question for my original post. For work I just generate a password using a password manager and store it on a Yubikey that I use for work purposes when I need to update my password. The question in the post is for a personal Yubikey. I started using a generated password on that one and wondered if adding a prefix password to it, changing the prefix for different applications, would be considered secured.

  • You can tweak the algorithm to match the requirements in KeePassXC. That is for passwords for individual sites that have requirements. This "prefix" algorithm would be for applications that don't have those requirements. Applications can range from website logins to password protected encrypted volumes.

  • I may not have been clear in my original post. My work computer does have it's own KeePass database. This question is for my use of a Yubikey on multiple sites. For clarification I use a separate Yubikey to store my work computer credentials that I back up to my personal Keepass database (can't access the work database if I'm locked out). I do this because of the requirement to change passwords every three months and I don't want to reuse the limited passwords I remember so I use a password generator.

    My question is with using a "prefix" with my personal Yubikey (the one I don't use for work). Specifically, even if the last 40 characters is from a generator configured to generate a high entropy excellent quality password if I use that password with a different "prefix" (different lengths too) for different sites then would it really be compromised if one site gets hacked? They are different passwords, different hashes, different entropy. It's just a large part is the same. I don't know much about security I just want to know if this is a risk. I'm trying to move my security from something that I memorize to something that I physically have and know.

  • I think they meant the one where they sic'd the police on us if we got out of line.

  • It has everything to do with it. Ukraine was part of the USSR. NATO was created to counter the USSR. After it broke up and NATO remained they started adding more to the alliance. The alliance crept closer and closer to Russia. If Ukraine joined NATO then that would be the greatest threat to Russia. They don't trust the west.

  • A knife battle sounds kinda better. I'll have a greater chance to survive and some bad-ass scars.

  • Shit happened to me yesterday. Pissed me off. Bought this TV years ago and suddenly I can't use it until I accept their new arbitration shit. I'm building a stream box and disabling the internet on this thing. I'm sick of ads anyway.

  • I like the phrase you used for maintaining a community. "Gardening" seems appropriate. You've got to till the soil (infrastructure), plant the seeds (content), water and fertilize (users), and watch it grow as you pull the weeds (moderate). Lemmy definitely needs more and better gardening tools so we, the community, should build them.

  • Lemmy is not the perfect replacement but with some work it can become better. It could use some improved tooling, I want the ability to follow other users, and there's always room for improvement with the apps.

  • Some people don't want to sign up to a cloud provider or manage their own instance. KeePassXC offers a simple file that can be stored on your devices. It's easy to sync using your existing cloud accounts and encrypted.

  • Oh man! Download KeePassXC, put your passwords on there, install the browser extension to use it in your browsers. You can back it up any way you want, including using Google Drive because the file is encrypted.

  • You store your passwords on Chome?

  • Let's see how many bugs this will launch with.

  • You think that will happen with GameFreak as developers? lol