News for hackers. Stuff that matters.

A comment on Show HN: Instantly pass your passwords securely. Parent comment

Re:Show HN: Instantly pass your passwords securely by pinehqcom on Tuesday November 12, 2019 @01:53PM (#21516900)
It is secure. The password is not sent to my service. Try setup an `netcat -l -p 8000` and go into your browser and write `http://localhost:8000/#hi` You will see the hi is never sent to the server
[ Parent | on HN ]
Re:Show HN: Instantly pass your passwords securely by ben509 on Wednesday November 13, 2019 @08:29AM (#21523712)
It's insecure because anyone who intercepts the message can trivially decrypt it by pasting it into their browser.

Yes, self-destructing messages are more secure than simply pasting plain text. But it's offering no protection against eavesdropping, so it's not secure.

[ Parent | on HN ]
Re:Show HN: Instantly pass your passwords securely by dfalfndfk on Wednesday November 13, 2019 @04:27PM (#21529785)
At least you'd know the message has been compromised, no? Although I guess a perp can feed you a different link and delay the realization.
[ Parent | on HN ]
Re:Show HN: Instantly pass your passwords securely by pinehqcom on Thursday November 14, 2019 @09:12AM (#21535450)
It's not a perfect solution. As @dfalfndfk says you will know that you're eavesdropped.
[ Parent | on HN ]