The closest I've ever come to falling for a Gmail phishing attack

Re:The closest I've ever come to falling for a Gmail phishin... by sly010 on Wednesday January 11, 2017 @10:07AM (#13374373)

> 3. Kill re-authentications dead.

Then I would forget my password, like I always forget my github password and have to reset it every leap year when i log out for some reason, but i guess that's a small price to pay.

[ Parent | on HN ]

Re:The closest I've ever come to falling for a Gmail phishin... by jungletek on Wednesday January 11, 2017 @01:42PM (#13376328)

Password Safe is a (Bruce Schneier recommended) alternative. Free, runs locally. I'm a big fan.

https://pwsafe.org/

[ Parent | on HN ]

Re:The closest I've ever come to falling for a Gmail phishin... by uwu on Wednesday January 11, 2017 @12:36PM (#13375694)

you should invest in a password manager (i use keepass)

[ Parent | on HN ]

Re:The closest I've ever come to falling for a Gmail phishin... by sly010 on Wednesday January 11, 2017 @01:21PM (#13376125)

I have. I use 1Password for about a year now. But I didn't log out (hence log in) of github since I installed it and as a result it (1password) doesn't know my github password. And frankly nor do I. So my point is valid, at least until next time I have to relogin.

Case in point: I also use Authy with backup, but I don't store my backup password in the password manager, because that would be a potential single point of security failure. The app kindly asks for a backup password occasionally. It's not for access, but for reminder. In fact if I don't remember my password, I can reset it right there in the app. I find that feature very useful.

[ Parent | on HN ]