Technology

59358 readers

6724 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

-26

Password Managers. (lock.cmpxchg8b.com)

submitted 1 year ago* (last edited 1 year ago) by lemba@discuss.tchncs.de to c/technology@lemmy.world

26 comments fedilink hide all child comments

You don't know Tavis Ormandy? https://en.m.wikipedia.org/wiki/Tavis_Ormandy

tl;dr "If you want to use an online password manager, I would recommend using the one already built into your browser. They provide the same functionality, and can sidestep these fundamental problems with extensions."

I can only speak for myself but his article confirmed my suspicion about any Password Manager, even Bitwarden and I never have or will use any online Password Managers. I create all my Passwords individually with my own algorithm in my head and can always recreate them.

you are viewing a single comment's thread
view the rest of the comments

[–] AlternateRoute@lemmy.ca 11 points 1 year ago* (last edited 1 year ago) (1 children)

~~Would be more relevant if you linked to something relevant to your argument not just the wiki on him.~~

Travis actually recommends several https://lock.cmpxchg8b.com/passmgrs.html

Good examples of simple and safe password managers are keepass and keepassx, or even pass if you’re a nerd.

He doesn't like password managers that are hosted or integrate with apps via plugins.

[–] eager_eagle@lemmy.world 7 points 1 year ago* (last edited 1 year ago) (1 children)

the post title is actually the link you pasted here, which I think it's even worse because it demonstrates a severe lack of interpreting skills from OP.

[–] AlternateRoute@lemmy.ca 4 points 1 year ago* (last edited 1 year ago)

Ya the conclusion is very clear

Conclusion If you want to use an online password manager, I would recommend using the one already built into your browser. They provide the same functionality, and can sidestep these fundamental problems with extensions.

I use Chrome, but the other major browsers like Edge or Firefox are fine too. They can isolate their trusted UI from websites, they don’t break the sandbox security model, they have world-class security teams, and they couldn’t be easier to use.

Also there are studies showing how bad mental formula passwords are, while computers are not truly random, humans are even worse.

https://lifehacker.com/password-formulas-don-t-fool-hackers-1826238163