[-] [email protected] -2 points 5 days ago

Until the password manager gets compromised, or you lose access to your PW manager. In that case, you'll really wish you had implemented "Zone 3" of my plan.

[-] [email protected] -1 points 5 days ago

For absolutely best security, you would change your password to a new, extremely long, randomly generated character string every time you logged in. What the best security options are, and what users are willing/able to put up with has a very small, if any overlap.

As for writing them down, my advice is to obfuscate them. Apply your own secret code to the password, hide it in a poem, get creative. Once an attacker is at your desk, they pretty much own your shit. At that level, the only thing your password is providing is privacy, not security.

[-] [email protected] 6 points 5 days ago

As long as your phone is secure, and the manager only stores data locally, I'd say yes. I would still encourage you to have any "reset capable" accounts secured with a strong password and 2FA that is not in your PW manager.

As with all things IT, there is a tradeoff between comfort/usability and security.

[-] [email protected] 7 points 5 days ago

Shitty sites that store PWs in plain text, or they get compromised and the password is figured out from the hash. Probably the most common way right now is phishing, and with AI/LLM it's pretty easy to do spearphishing attacks on a large scale. The target enters their password on a seemingly legit site, but it's actually an attacker's site that logs the PW. There are lots of ways to get a password, and password-only authentication is considered pretty weak, even with a "strong" password.

[-] [email protected] 37 points 5 days ago

IT, more specifically user support.

Let's talk passwords. You should have a different password for every site and service, over 16 character long, without any words, or common misspellings, using capital, lowercase, number and special characters throughout. MyPassword1! is terrible. Q#$bnks)lPoVzz7e? is better. Good luck remembering them all, also change them all every 30 days, so here are my secrets.

1: write your password down somewhere, and obfuscate it. If an attacker has physical access to your desk, your password probably isn't going to help much. 2: We honestly don't expect you to follow those passwords rules. I suggest breaking your passwords down into 3 security zones. First zone, bullshit accounts. Go ahead and share this one. Use it for everything that does not have access to your money or PII (Personally Identifiable Information). Second zone, secure accounts, use this password for your money and PII accounts, only use it on trusted sites.Third, reset accounts. Any account that can reset and unlock your other accounts should have a very strong and unique password, and 2FA.

Big industry secret, your passwords can get scraped pretty easily today, 2FA is the barest level of actual security you can get. Set it up. I know it's a pain, but it's really all we've got right now.

[-] [email protected] 1 points 6 days ago

She might be wearing it to keep other people away and stop them from taking to her.

It really does stop the voices, just not the voices you'd expect.

[-] [email protected] 1 points 1 week ago

In the US, you own the airspace up to the highest point of your property, including structures (and maybe trees). You also technically own your underground property to the center of the earth, but you may not have mineral rights to it.

[-] [email protected] 3 points 1 week ago

Some newer (in the last 10 years) smoke detectors use an infrared sensor to detect fire as well as smoke, and it may be going haywire off a reflection of the sun, or intense heating of a spot within its detection area.

If you can, borrow a FLIR or infrared camera and check the area when the detector goes off.

If you post your model of smoke detector, it would be easier to tell if it has this feature.

[-] [email protected] 7 points 1 week ago

Simple, if any religion was true and objectively based in reality, why the fuck do they need missionaries to spread it?

If any religion was true, it would have measurable, verifiable, and predictable traits that would be discovered in isolated societies. If all of mankind's knowledge was erased, we would eventually rebuild our understandings of physics, biology, chemistry and mathematics as they are today. If all knowledge of religions were erased, we would never get the same religions back.

[-] [email protected] 3 points 1 week ago

It's really a shitty coping mechanism.

[-] [email protected] 9 points 1 week ago* (last edited 1 week ago)

Objective reality doesn't matter to you if you close your eyes, cover your ears and insist on living in a fantasy world.

Let's put it this way, if I went around basing my entire understanding of reality on Greek gods, people would rightly think I was fucking nuts.

Do it with the bible though...

[-] [email protected] 12 points 1 week ago

You're only seeing the most outrageous edge cases. It's a weird kind of survivorship bias.

Prom was kinda like graduation to me. It's a school event, I mostly went because it was important to someone else, and it's a very common and relatable event in American life. All in, it was a waste of 50 bucks and a few good hours of gaming/relaxing with my GF.

view more: ‹ prev next ›

Bytemeister

joined 11 months ago