News for hackers. Stuff that matters.

A comment on Show HN: Transform insecure passwords to secure passwords. Parent comment

Re:Show HN: Transform insecure passwords to secure passwords by krapp on Sunday January 31, 2016 @05:46PM (#11008526)
You're offering a Windows installer for an application that appears to add complexity to simple passwords - probably hashing it with a seed - but without source code, there's no way for anyone to validate the effectiveness of that process, that it doesn't make passwords easier to guess, or even that the app isn't sending everyone's passwords directly to you. You're not even offering a signed binary.

Some people will probably use it and it might work perfectly well but I think most, especially here, are going to be suspicious.

[ Parent | on HN ]
Re:Show HN: Transform insecure passwords to secure passwords by cpb2948 on Sunday January 31, 2016 @06:09PM (#11008609)
I understand what you are saying and thank you for offering your thoughts.

The app doesn't do any type of hashing. The app just intercepts your keystrokes as you type and replaces what you type with a random character. I would of thought the validation would be through giving it a try and using it.

In regards to signing the binary, i didn't want to buy a code signing cert until I had some positive feedback and it was worth getting.

Again i understand your concerns and thank you for the feedback.

[ Parent | on HN ]