Notes on the Celebrity Data Theft

Re:Notes on the Celebrity Data Theft by jsmthrowaway on Tuesday September 02, 2014 @06:59PM (#8260662)

AKA 1FailureToUnderstandTheThreatVector, the common antisecurity argument of lazy or pedantic people. A password manager is not defending against a social engineering attack (how could it?), it's defending against Joe's Blog getting knocked over and your re-used password on Wells Fargo being disclosed.

Your comment is a really lame excuse for not using a password manager and is quite a bit of FUD; there is no technical solution to a social engineering attack, so it's a clever way out as an excuse to avoid doing something difficult. You are not the first person to try it on me. You also sound like you're making the case for social engineering control of their machine, at which point what does the password manager matter? You have physical. Game over.

I have this conversation regarding self-signed certificates and MD5 hashing as well. "But they don't authenticate," or "but MD5 is insecure!" Yep, I know. Do you understand the threat vector for my usage of either? You sure?

Just use one. Seriously.

[ Parent | on HN ]

Re:Notes on the Celebrity Data Theft by anigbrowl on Wednesday September 03, 2014 @04:25AM (#8262005)

I'm at a loss as to what benefit I'm supposed to gain by using one. I don't reuse passwords for anything that actually needs to be secure, though I reuse a few for sites that make me create a password even though I don't care about whether those accounts are secure or not. I dpn't see why I should adopt a password manager just because other people don't practice good password security.

[ Parent | on HN ]

Re:Notes on the Celebrity Data Theft by simonw on Wednesday September 03, 2014 @12:21PM (#8263762)

How do you remember all of your passwords?

[ Parent | on HN ]