News for hackers. Stuff that matters.
Re:Password Managers: Under the Hood of Secrets Management by gruez on Wednesday February 20, 2019 @09:39PM (#19214074)
What you're basically describing is no-sync password managers[1], with all of its disadvantages (password changes/rotation, username storage, etc) but also with security by obscurity instead of a proven KDF.

[1] I'm not sure what they're called exactly, but basically all you do is enter a password and it generates your password using your password + site + KDF.

Re:Password Managers: Under the Hood of Secrets Management by kaens on Wednesday February 20, 2019 @10:20PM (#19214233)
correct, the point of doing something like what i'm describing is to have a system for keeping / creating N unique passwords stored only in your head, in a way that provides an acceptable amount of strength, avoids disclosing all of your passwords if one is compromised, and doesn't require you to be a savant of long-random-string memorization.

there are plenty of things that this isn't an appropriate approach for, and fwiw I wouldn't tell someone it would be a good strategy for all their passwords.

it can be useful when you have a set of longer lived passwords that you need to care about guaranteeing that the entire set can't be snarfed without holding you at gunpoint.

Re:Password Managers: Under the Hood of Secrets Management by jsutton on Thursday February 21, 2019 @01:40PM (#19219364)
Your strategy doesn't negate the need for a password manager for all of your non-essential web accounts.