News for hackers. Stuff that matters.

A comment on Double Blind Passwords a.k.a. Horcruxing. Parent comment

Re:Double Blind Passwords a.k.a. Horcruxing by upbeat_general on Tuesday December 22, 2020 @02:24PM (#25510054)
True but all of the methods you mention to determine the horcrux are also ways to get someone's typical password, so password manager + horcrux is still much stronger as you need both (besides obviously the keylogger/malware).

You could also just have a horcrux for a couple sites and make them all distinct obviously.

[ Parent | on HN ]
Re:Double Blind Passwords a.k.a. Horcruxing by Thorrez on Wednesday December 23, 2020 @05:50PM (#25523204)
Well my thought is that it doesn't take much effort to get a typical password, but does to get a password manager user's password. So an attacker who gets the password from a password manager can probably easily get the horcrux as well.
[ Parent | on HN ]