Comments

This profile is from a federated server and may be incomplete. Browse more on the original instance.

drathvedro, to piracy in I feel like the Steam Deck is the best proof of Gabe Newell's quote that "piracy is a service issue."

There’s literally no way they could do that without being sued into ashes.

drathvedro, to memes in I lose mine last month :(

Never. My current and all previous phones have toothpicks stuck in the holes and knife marks all around the sim tray.

drathvedro, to memes in Add-on: same password, same identity.

they’re saved as notes in my phone, and no I don’t type the whole password in

Then I must have misunderstood your approach. Is it like a single note with all the keywords only, then?

I guess I’m not understanding how this is functionally different from what I already am doing. Why would your 12 character solution be more secure than my 14 character example

Yeah, it’s because it’s close to the associated domain. The way I see it, this bastardization adds little entropy (there’s only so much possible variations) but also rather easy to forget. And a huge problem, in my opinion, is it’s using your mental capacity for per-site suffixes rather than master password.

A possible attack I see, is if I set up a site, say a forum called MyLittlePony.su with no password protection whatsoever, and lure you to register on it. If I scroll through the accounts and notice your password to be “hunter2MyLittlePenis”, I might go to paypal and give it a shot with “hunter2PenisPal”. Or, somebody whom I sold the database to, might. It’s extremely rare that anyone would even look at your password specifically unless you are some kind of celebrity, but it’s still a possibility. Maybe some future AI tech would be able to crack your strategy (I’ve tried, ChatGPT told me to fuck right off and FreedomGPT is not good enough yet)

Though you’ve said you also keep notes, which deals with the easy-to-forget part of the problem, so my first thought was to get rid of bastardization and add fuck-all amount of entropy by using a truly random suffix. That’d deal with the above problem. But, that’d mean that it’s your master password that is the suffix now, and you wouldn’t be able to access sites without the notes at all, hence it’d be easier to go with password manager at that point.

drathvedro, to memes in Sure it is

No we don’t

drathvedro, to memes in How's your housing market these days?

I actually misread this meme as “Hey hosing market, where are you going”. Oh well, the house on chicken legs is still quite rad though.

But. this got me wondering - could you actually legally live in the US federal land in such a house, that moves to a different location every so often? I know some RV guys live like this, but would an actual building that can move itself, be okay, too?

drathvedro, to asklemmy in Good “Buy for Life” Brands

Thanks, I’ll check it out. Yeah, there’s not much features to expect from a teapot other than maybe specific cutoff temperatures for brewing exotic sorts of tea. Other than that, reliability is the main concern, and I’ve had even the seemingly well built ones suddenly die on me for no particular reason.

drathvedro, to programmer_humor in no.. just no

No. The arrow function in where eliminates any possibility of using indexes. And how do you propose to deal with logical expressions without resorting to shit like .orWhereNot() and callback hell? And, most importantly, what about joins?

drathvedro, to linuxmemes in Useless messenger
drathvedro, to memes in I lose mine last month :(

Dunno, just my personal observation is that the heavier the phone is the more likely it is to crack, just from the sheer amount of mass the case has to dampen. I’ve seen heavy phones, in protective cases and even those marketed as “rugged” crack from minor falls, and lightweight cheap shit survive the nastiest of falls. What you’re probably referring to is those cases with thick rubber pads on the corners, but most cases are like half a mm thick wraps, which, IMO, won’t help squat in a fall.

drathvedro, to memes in I lose mine last month :(

Sure, but I don’t carry a sewing needle with either. Probably should, actually. The reason toothpicks are there is because it’s the only thing at hand in those rare case when you need it, mostly middle of fuck nowhere and far away from home, when only one of the phones has charge but the other has reception.

drathvedro, to memes in I lose mine last month :(

I don’t find them useful. Unless you’re talking about a huge sponge of a case, or those crazy corner ball ones, it doesn’t really make a difference. If a phone is prone to cracks it’s going to crack, with or without the case.

drathvedro, (edited ) to memes in Add-on: same password, same identity.

I’d say the approach is potentially vulnerable, but the tech isn’t quite there. The modern approach to password cracking is to take a huge dictionary, and run permutations on it, like change a’s to @'s, capitalizing first letters or adding numbers in the end. Any cracker worth their salt will have something like “add _netflix” as a permutation, too. I don’t think that anyone would have “NutFlex” in there, yet, but it’s possible if one of them stumbles on your leaked password from somewhere else.

As for “basic text”, do you mean like .txt’s? And do you store the entire password there? We do have viruses that scan for crypto wallets and it’s seed phrases already. It’s not too far fetched to imagine one that would cross-match any txt’s contents in the system with browser’s saved logins.

The most glaring issue I see is that the bastardization is effectively part of your password. With 1000+ passwords it’s going to be easy to forget (was it nutflix, sneedtflex, nyetflex or something?) and it’s going to be hard to find it if you don’t manage the codes properly. I recently had to scan over every single of my password manager entries (forgot a 100% random login, password and domain), and let me tell ya, It wasn’t fun.

You could possibly switch to a “client-side salting” approach, having a strong consistent password in you head, and storing a short but truly random suffixes for each service. e.g. text file named “Netflix” containing something like “T3M#f” and the final password would be something like “hunter2T3M#f”. At least that’s what responsible sites do to protect people who have simple/matching passwords. You could even store those suffixes somewhere semi-openly, like in a messenger as messages to yourself. But at that point, it’s probably easier to go with a password manager. Though that’s an option if you don’t trust those.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #