News for hackers. Stuff that matters.
Re:Twitter urges users to change passwords after computer 'g... by abrichr on Thursday May 03, 2018 @07:45PM (#16991002)
What if you’re on someone else’s machine?
Re:Twitter urges users to change passwords after computer 'g... by yorwba on Thursday May 03, 2018 @08:09PM (#16991120)
The last time I needed a password on a someone else's machine, I just looked it up on my phone and typed it in.
Re:Twitter urges users to change passwords after computer 'g... by TimWolla on Thursday May 03, 2018 @08:00PM (#16991081)
Not GP, but KeePass user: I store my KeePass database on a small thumb drive (SanDisk Cruzer Fit), together with a copy of the KeePass executable. If I absolutely need to decrypt my password database on someone else's machine I can take the "secure" software from the USB and hope for the best. The USB also stores a copy of Truecrypt and a large Truecrypt container with backups of my encrypted private keys (PGP, SSH).
Re:Twitter urges users to change passwords after computer 'g... by anf on Friday May 04, 2018 @02:11AM (#16992544)
Key logger + making a cron job that copies everything off your drive = 5 minutes of work? I hope you trust the folks you use this setup on...
Re:Twitter urges users to change passwords after computer 'g... by alex_duf on Friday May 04, 2018 @06:10AM (#16993409)
Key logger + screen shots and you also get access to a 1 password account

No matter what you do if the computer you are using isn't trustworthy you're losing.

Re:Twitter urges users to change passwords after computer 'g... by anf on Friday May 04, 2018 @09:31PM (#16999773)
Yeah, totally with you — don't trust devices you (or your employer) doesn't own. I'm borderline still where I trust my employer's devices with my personal passwords sometimes, but even that seems a bit iffy.