News for hackers. Stuff that matters.

A comment on I Know What Your Password Was Last Summer. Parent comment

Re:I Know What Your Password Was Last Summer by hobs on Sunday February 11, 2024 @11:40AM (#39336166)
You missed a few glaring failure modes in the mental model one - one of the most extreme is if someone pops your password on two sites, they can likely derive all your other passwords.
[ Parent | on HN ]
Re:I Know What Your Password Was Last Summer by throw310822 on Sunday February 11, 2024 @12:32PM (#39336664)
Sure, although I wonder how often anyone is actually looking at single passwords, rather than just pushing tons of them through automated systems.
[ Parent | on HN ]
Re:I Know What Your Password Was Last Summer by evilduck on Sunday February 11, 2024 @01:35PM (#39337238)
Depends on your threat model.

Public figures likely have their passwords individually scrutinized when their accounts are found out.

[ Parent | on HN ]
Re:I Know What Your Password Was Last Summer by paulryanrogers on Sunday February 11, 2024 @12:58PM (#39336874)
I'd go further and point out that derived secret systems put all your future passwords at risk. Whereas a password manager is only your current and past passwords.
[ Parent | on HN ]