News for hackers. Stuff that matters.
Re:Essential security for Linux servers (2013) by 3np on Wednesday December 08, 2021 @04:41AM (#29482776)
Nitpick: passphrase, not password
Re:Essential security for Linux servers (2013) by atoav on Wednesday December 08, 2021 @06:05AM (#29483375)
Nitpick: if you have a password manager it doesn't matter
Re:Essential security for Linux servers (2013) by 3np on Wednesday December 08, 2021 @01:16PM (#29488293)
Well it kind of does.. A password is validated, and if you lose it there is usually some recourse. Reset or whatnot. It may be a hassle but always possible somehow.

If you lose a passphrase, no one can help you even if you hit HN front page and /r/all with a sob story. So backups and availability have a different cruciality.

Also if you store a private key on the same medium as a password store with weak encryption or key that contains the passphrase, they key can't be considered as strong anymore.

There are practical reasons to make a distinction and mistakes can be expensive.

Re:Essential security for Linux servers (2013) by Aldipower on Wednesday December 08, 2021 @10:19AM (#29485764)
Thanks, yes, passphrase is the correct word. :)