“God,” who supposedly created all aspects about humans, their nature and the world and already knew in advance everything that would happen including humans eating from the tree of knowledge: and who’s fault is that?
It’s like writing a bad computer program and then being mad at it when it crashes.
I had a girl in high school (high school!) literally say to me “when am I going to get to feel that dick of yours inside me?” and I blew it, thought she was just joking.
Imagine a girl you like putting a hand on your shoulder, looking into your eyes, saying some gentle word I don’t quite remember due to being mesmerized by those eyes, and you know what I did? I just looked back uneasily for a few seconds, then nervously took her hand off my shoulder, shook it a bit, released it and awkwardly smiled. (That even wasn’t her last attempt to make me happy against my best efforts ; ended bad anyway.)
Thinking about that time I comped a cute girl’s meal (she forgot her card and I had a line to the door). She came back after closing hours and knocked on the door. She was really greatful for me covering her meal and wanted to pay me back. I told her it was okay and then locked the door (without a further thought). She then stood there for a bit before leaving… Later a coworker came over and was like “dude, I think she wanted you to ask for her number.” You could hear the gears turning in my head after that
Counterpoint: Password Manager = One point of failure
Multiple Strong Passwords that have to be changed every 3 months even to sign on to your cornerstore rewards program without a password manager? Guess you’re never accessing any account older than 3 months because you’ve forgotten th3 b1lli0n$ oF s+r0ng p4s5w0rds Y0u h4Ve cr3atEd!
You can have strong authentication on your central password manager, and have an encrypted container protecting it.
There is no logical argument against password vaults as a concept. There are bad implementations of specific password vaults, but a password vault is the answer for the highest possible password based security available in 2023.
I have no idea about how to protect a password manager with an encrypted container.
And to be honest with you, it’s not something I’m likely to do even if you do attempt to explain the 60 minute long $10 18-step process to me. Or however long it takes and whatever it costs.
And really, for all my ignorant ass knows you could’ve just as well been encouraging me to get malware and I’d be none the wiser.
What makes it completely unusable for me is that I don’t have a single work computer I use. I have to bounce around computers at work, my personal phone, computer, work iPad, etc.
Okay and now let’s get into threat modelling and risk management.
What is the purpose of a password manager? What are the possible threats against them, and what are those against singular passwords for services? What is the risk of each of those?
Guys, before you argue with me, password security is something that EVERYONE in the 1st world has to deal with, not just tech nerds. If you need to grow up around computers or take a class for it to be a good form of security, its a shit form of security for the general public
Password managers really are not hard to use. Also there’s stuff like the password manager built into iOS, for example, which you don’t even have to think about.
My comment about threat modelling was that you do not seem to understand the purpose of password managers. A way bigger problem for the average person online is password reuse, not targeted attacks against password vaults. That is the problem they solve.
The weird trope I’ve seen now is “don’t use the password manager in your browser”. For the life of me, I can’t think why some think a browser plugin to a commercial password manager is safer than the built in version.
They probably think it’s safer somehow. But I don’t really get how.
Most built-in password managers allow for you to setup a master password of sorts if you try to sync everything to a new device, and most also require you to use your computer’s native verification to view a single password in plaintext or export all of them as plaintext. (For browsers on Windows, they use Windows Hello; for browsers on Android, they use the fingerprint scanner or the lock screen pin.)
memes
Top
This magazine is from a federated server and may be incomplete. Browse more on the original instance.