Esca

joined 1 year ago
[–] Esca@lemmy.one 6 points 1 year ago* (last edited 1 year ago) (5 children)

So basically a fancy hashing algorithm to get the same password for the same information you give it. Neat idea but I am not convinced yet.

If your Spectre secret gets somehow leaked (and your full name could easily be found), that's immediately all your current and future passwords leaked. Now, this would in theory also be a problem with regular password managers that live in the cloud. Though smart ones hopefully add 2FA or similar before they let their users log in. For offline password managers the hacker would need your secret + database to get your password. That's a lot harder. Spectre takes one of those items away, because the 'database' is their algorithm which literally runs on their webpage. All they need is a single password.

What if a site you use leaks your password and you have to change your password for that site only? Spectre won't help you with that, as it will still give you the (burned) password. So you manually have to remember which sites use Spectre for passwords and which ones don't.

Have any services that have been provided to you with a set password you can't change (eg: some service your job uses), Spectre won't help you with this as it won't hold any custom passwords. Have any weird services that requires a specific length and/or forbidden characters Spectre does? Good luck, Spectre can't help you here either. It's not a password manager.

[–] Esca@lemmy.one 9 points 1 year ago* (last edited 1 year ago) (10 children)
[–] Esca@lemmy.one 1 points 1 year ago (1 children)

That only works if they're actually discoverable when you search for them, so you can pick the correct one. On reddit if you search for a specific thing, you get a list of all possible subreddits in one go. On lemmy... it really depends on the instance you're on, and if anyone else on your instance has discovered the other communities yet. You never know if the search results are complete. Even https://browse.feddit.de is not always showing all the communities I noticed.

And even now I have to keep rechecking communities/interests I have already subscribed too because new duplicates get made all the time with new instances showing up.

view more: ‹ prev next ›