Re:Notes on the Celebrity Data Theft
by marcosdumay on Tuesday September 02, 2014 @06:25PM
(#8260539)
You can't, but if you use a password manager, you can actually use different passwords on every service.
And you can use stronger passwords (if the service permits), thus if they only lost the passwords datbased (assuming it's hashed) you are still safe.
No because say your cloud provider recycle your hard drive to another client with a bad password, then the attacker not only can access the data of the other client but can run a file recovery tool and get some of your files.
Most providers don't erase disks properly. Takes too much time.
Re:Notes on the Celebrity Data Theft
by Anderkent on Wednesday September 03, 2014 @07:37AM
(#8262472)
AFAIK most providers who don't erase disk get them destroyed. At least in EU.
Don't use Password managers because someone can always root a server and unerase deleted files.
Logic. Win.
I think the main point is that while no platform is 100% safe, you can help alleviate the issue by reducing risk (in the case of the original commentor, they were emailing passwords to themselves).
Of course there are limits to any measure of security, but 1password does a great job in helping people manage themselves.
Personally, it's helped me a lot in just keeping my various usernames/user accounts organized (I sign up for just about anything).
Sure, but it'll stop rayiner from gmailing passwords to himself.
Password managers only protect against certain kinds of attack. Many cloud services do not or can not properly encrypt their users' data, so having a strong password won't help in the event that your cloud provider's datacenter gets rooted.