News for hackers. Stuff that matters.
Re:Show HN: Alzheimer password generator by gmemstr on Sunday July 29, 2018 @08:42PM (#17641296)
I second this, and I don't really know if a memory-deficient password manager is a _good_ thing.

> Final password is cryptographically derived from web page URL address, salt and user provided secret passphrase. The salt should be stored physically, so you can recover it in the future.

I didn't really know, at first glance, what this project accomplishes besides generating a random password, although looking through some of the screenshots it looks like passwords are _always_ generated on-page instead of storing an encrypted vault. A super cool idea, but I'd be curious what everyday use of it would look like, and since I don't use Chrome I can't really test it myself.

Re:Show HN: Alzheimer password generator by viralpoetry on Monday July 30, 2018 @04:13AM (#17642869)
Hi, author here. You are right, the password is generated on the fly using URL, unique seed and provided passphrase. The extension javascript is sandboxed from the webpage, so it is not possible to obtain the inputs to the PBKDFunction from the context of website.

I have coded this for myself and using it more than 2 years. The only problems are with some dynamically created login forms, like new reddit login.