News for hackers. Stuff that matters.

A comment on Why even let users set their own passwords?. Parent comment

Re:Why even let users set their own passwords? by croes on Saturday July 22, 2023 @11:29AM (#36827047)
A password can be stored offline without any electronic device or even be memorized only.

Passkey depends on your device.

[ Parent | on HN ]
Re:Why even let users set their own passwords? by justsomeadvice0 on Saturday July 22, 2023 @11:37AM (#36827125)
While you can't memorize it (memorizing a fair amount of entropy would take an intelligent human quite some time), you can of course store them offline (it's just a key). Today's initial implementation on macOS restricts exporting, but that is supposed to be added according to reliable Apple devs: https://hachyderm.io/@rmondello/110329118270492669
[ Parent | on HN ]
Re:Why even let users set their own passwords? by croes on Saturday July 22, 2023 @01:50PM (#36828194)
>you can of course store them offline

>Today's initial implementation on macOS restricts exporting,

So you can't. Will be able. How long can Tesla owner earn money with their self driving Tesla?

If you can export and import them, isn't that a security risk?

[ Parent | on HN ]
Re:Why even let users set their own passwords? by Terretta on Sunday July 23, 2023 @12:51PM (#36837140)
> memorizing a fair amount of entropy would take an intelligent human quite some time

Everyone who has seen it remembers correct horse battery staple and intelligent humans find it relative straightforward to reroll diceware until they can imagine a story for the words they see.

Permute case, use symbols and digits as word dividers, and most HN readers can remember 'uncrackable' amounts of entropy.

[ Parent | on HN ]