Technology

67151 readers

4439 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago

MODERATORS

[email protected]

-26

Password Managers. (lock.cmpxchg8b.com)

submitted 2 years ago* (last edited 2 years ago) by [email protected] to c/[email protected]

23 comments fedilink hide all child comments

You don't know Tavis Ormandy? https://en.m.wikipedia.org/wiki/Tavis_Ormandy

tl;dr "If you want to use an online password manager, I would recommend using the one already built into your browser. They provide the same functionality, and can sidestep these fundamental problems with extensions."

I can only speak for myself but his article confirmed my suspicion about any Password Manager, even Bitwarden and I never have or will use any online Password Managers. I create all my Passwords individually with my own algorithm in my head and can always recreate them.

you are viewing a single comment's thread
view the rest of the comments

[–] AlternateRoute 12 points 2 years ago* (last edited 2 years ago) (1 children)

~~Would be more relevant if you linked to something relevant to your argument not just the wiki on him.~~

Travis actually recommends several https://lock.cmpxchg8b.com/passmgrs.html

Good examples of simple and safe password managers are keepass and keepassx, or even pass if you’re a nerd.

He doesn't like password managers that are hosted or integrate with apps via plugins.

[–] [email protected] 7 points 2 years ago* (last edited 2 years ago) (1 children)

the post title is actually the link you pasted here, which I think it's even worse because it demonstrates a severe lack of interpreting skills from OP.

[–] AlternateRoute 4 points 2 years ago* (last edited 2 years ago)

Ya the conclusion is very clear

Conclusion If you want to use an online password manager, I would recommend using the one already built into your browser. They provide the same functionality, and can sidestep these fundamental problems with extensions.

I use Chrome, but the other major browsers like Edge or Firefox are fine too. They can isolate their trusted UI from websites, they don’t break the sandbox security model, they have world-class security teams, and they couldn’t be easier to use.

Also there are studies showing how bad mental formula passwords are, while computers are not truly random, humans are even worse.

https://lifehacker.com/password-formulas-don-t-fool-hackers-1826238163