News for hackers. Stuff that matters.
Re:I Know What Your Password Was Last Summer by DeathArrow on Sunday February 11, 2024 @11:13AM (#39335976)
>Just use a password manager!

What if I don't have access to the password manager at some point but I do need to log into some website? I.e. visiting friends house, forgot my phone at home but I need to log in my banking app to do a transfer? Or visiting a foreign country, someone steals my papers and my phone and I need to login to mail at a public cafe to let my family know I am well.

Re:I Know What Your Password Was Last Summer by williamscales on Sunday February 11, 2024 @11:15AM (#39335991)
In the first case most password managers I’m aware of let you log in online. So I’d just log in and use my hardware token on my keyring for 2FA.
Re:I Know What Your Password Was Last Summer by yieldcrv on Sunday February 11, 2024 @11:55AM (#39336296)
you can read your passwords in a password manager, memorize a couple of them for the risks you think you have

what I typically would do in both of those scenarios is a password reset. I would know my email password and do a password reset of everything else and get that in my email.

privilege escalate on yourself.

realistically, I’ve been at Apple Stores multiple times where I needed to login manually to my icloud account while my phone was being RMA’d. nothing to remind you there.

Re:I Know What Your Password Was Last Summer by ianburrell on Sunday February 11, 2024 @01:51PM (#39337432)
I think it is important to have a few passwords that have memorized. The most important one for me is Google, cause then can reset passwords with Gmail. I don't store them in password manager.