Esca

joined 2 years ago
[–] [email protected] 2 points 2 years ago (1 children)

I would definitely unplug it. If you, someone else, or perhaps even a pet accidentally closes the door and it turns on with nobody realizing it bad things can happen. It will basically microwave itself and if you leave it running long enough it creates a big fire risk. It is a small mistake to make with a high risk.

[–] [email protected] 3 points 2 years ago (1 children)

I know that feeling lol.

I have a love/hate relationship with my Google speaker. Some examples that have happened:

"Hey google, set the temperature to 21 degrees"

google: "Sure. Setting the heater to 71 degrees!"

And

me: hey google, start a timer for ten minutes

google: okay, starting a 10 minute timer

me: perfect

google: okay, consider it cancelled

me: ...

[–] [email protected] 5 points 2 years ago

Might I point out the reason why people might react so offended by it? You have your opinions. And that is fine. Nobody can tell you your opinions are invalid. But if you look back to your message, your opinions are stated as hard facts:

They’re often very loud

they demand your attention constantly

they’re always in your space

Dogs are just exhausting.

I understand what you mean with this. But it kind of reads similar to someone saying something like "All Americans are dumb". And then when everyone gets offended by it they be like "It's just my opinion, why is everyone angry at me?". And of course people get angry, You get all the responses from people who have an American friend, and THAT person isn't dumb! So of course your facts are invalid!

Anyway. Not a dig at you in any way. Thought I'd just let you know how it reads.

[–] [email protected] 3 points 2 years ago* (last edited 2 years ago) (1 children)

I'm not the person you're replying to but I have a fun answer for how I did it before I moved to password managers.

I used to have just a single password, normal-ish password. Reasonable length, some numbers in there, random caps. But in order for me to have unique passwords on every site without losing track of all the passwords, I added the first and last letter of the name of the service at a specific point inside the password. My password was cryptic enough that if you would see it you wouldn't immediately notice it. But for me it meant I had a single strong password that was easy to remember and unique for every service.

I'm still kind of proud of that one, even though I don't use that method anymore.

[–] [email protected] 2 points 2 years ago

See my response a few comments down this thread. I found the counter and password-template too. I don't have an iphone so I can't test the app, but I very much think this app stores the 'settings' (counter, template) to generate the password. Based on what the api and CLI can do.... it has to, surely. It also has the ability to retrieve a custom password.

Of course the webapp in the link doesn't do all of that. You're stuck with 1 password in 1 format. Unless you change your secret and then all your passwords change.

[–] [email protected] 1 points 2 years ago

There's a couple of us!

[–] [email protected] 2 points 2 years ago

In practice it can be anything though. It just gets thrown in one of the hashing functions. They way they describe it:

user-key = SCRYPT( user-name, user-secret )

site-key = HMAC-SHA-256( site-name . site-counter, user-key )

site-password = PW( site-template, site-key )

Which is kinda interesting, they mention site-counter and site-template. The counter indicates you can set it to a different value to get a different password for that site. But then obviously every time you want to recall that password, you have to set the site counter correctly. I guess the app will remember this, but the web version obviously doesn't. But the gimmick is that it doesn't store anything, but it seems for the app to work it does need to store the settings to generate your password.

And also there is a site-template, which seems to hold various ways to generate passwords. Long, medium, short, pin, etc etc. With or without special symbols. It even mentions 'saved personal password' so I guess it can save custom passwords? Hopefully encrypted though.

That sorta addresses the concerns I have. But obviously that means you need the app, the website doesn't do all those extra things. And if you loose the app you loose your custom site counter and template.

Also, the CLI version seems to happily store the username and secret on your pc? Or at least lets you read it from a file, so...

(I haven't actually used the app, just going through some docs and source code here)

[–] [email protected] 4 points 2 years ago* (last edited 2 years ago) (5 children)

So basically a fancy hashing algorithm to get the same password for the same information you give it. Neat idea but I am not convinced yet.

If your Spectre secret gets somehow leaked (and your full name could easily be found), that's immediately all your current and future passwords leaked. Now, this would in theory also be a problem with regular password managers that live in the cloud. Though smart ones hopefully add 2FA or similar before they let their users log in. For offline password managers the hacker would need your secret + database to get your password. That's a lot harder. Spectre takes one of those items away, because the 'database' is their algorithm which literally runs on their webpage. All they need is a single password.

What if a site you use leaks your password and you have to change your password for that site only? Spectre won't help you with that, as it will still give you the (burned) password. So you manually have to remember which sites use Spectre for passwords and which ones don't.

Have any services that have been provided to you with a set password you can't change (eg: some service your job uses), Spectre won't help you with this as it won't hold any custom passwords. Have any weird services that requires a specific length and/or forbidden characters Spectre does? Good luck, Spectre can't help you here either. It's not a password manager.

[–] [email protected] 25 points 2 years ago* (last edited 2 years ago) (10 children)
[–] [email protected] 1 points 2 years ago

Search cannot be set to anything else but All. It springs back to All as soon as I select something else. I think it reloads the page.

[–] [email protected] 1 points 2 years ago (1 children)

That only works if they're actually discoverable when you search for them, so you can pick the correct one. On reddit if you search for a specific thing, you get a list of all possible subreddits in one go. On lemmy... it really depends on the instance you're on, and if anyone else on your instance has discovered the other communities yet. You never know if the search results are complete. Even https://browse.feddit.de is not always showing all the communities I noticed.

And even now I have to keep rechecking communities/interests I have already subscribed too because new duplicates get made all the time with new instances showing up.

view more: ‹ prev next ›