On 26/12/2022 12:05 am, david c wrote:
> I disagree, a good password manager like keypass will generate random
> passwords of any length. Even with a super computer breaking one is darn
> near impossible. A little off topic, but the FBI couldn't get into an
> Apple Cell phone.

Passwords should only be stored inside your brain. That's the most
difficult place to hack into, without killing someon. :)

On Tue, 27 Dec 2022 00:52:35 +0800, "Mr. Man-wai Chang"
<toylet.toylet@gmail.com> wrote:

>On 26/12/2022 12:05 am, david c wrote:
>> I disagree, a good password manager like keypass will generate random
>> passwords of any length. Even with a super computer breaking one is darn
>> near impossible. A little off topic, but the FBI couldn't get into an
>> Apple Cell phone.
>
>Passwords should only be stored inside your brain. That's the most
>difficult place to hack into, without killing someon. :)

That's one of the easiest places to hack into. It's called social
engineering, and hackers are sometimes very good at getting people to
spill a password.

On Sun, 25 Dec 2022 08:42:42 -0800, David E. Ross wrote:
> the IRS once
> disputed whether I made all four quarterly payments of estimated taxes
>

That's not ever going to be a problem if you pay on the IRS site:
https://www.irs.gov/payments/direct-pay
or
https://www.irs.gov/payments/your-online-account
And it's free.

--
Stan Brown, Tehachapi, California, USA https://BrownMath.com/
Shikata ga nai...

On Mon, 26 Dec 2022 12:07:51 -0600, Char Jackson wrote:
>
> On Tue, 27 Dec 2022 00:52:35 +0800, "Mr. Man-wai Chang"
> <toylet.toylet@gmail.com> wrote:
> >Passwords should only be stored inside your brain. That's the most
> >difficult place to hack into, without killing someon. :)
>
> That's one of the easiest places to hack into. It's called social
> engineering, and hackers are sometimes very good at getting people to
> spill a password.

Quite true.

There's a second reason: you need to write your password down
_somewhere_ so that the person holding your power of attorney can
access your account. There are many ways to become incapacitated
without no time to make those arrangements.

--
Stan Brown, Tehachapi, California, USA https://BrownMath.com/
Shikata ga nai...

On Thu, 22 Dec 2022 22:30:34 +1100, Mr. Man-wai Chang
<toylet.toylet@gmail.com> wrote:

> On 22/12/2022 11:11 am, Michael Trew wrote:
>> I'd be afraid of any program holding my passwords on an internet
>> connected device. Safer to write them out, print it for a hard copy,
>> and have a back up on a thumb drive.

> I second this.

I don't. Much more convenient to have the password manager
auto fill the fields as soon as they show on the screen.

> Separation can be good security!

But is a damned nuisance when you need to use a password, quite
apart from having to fart around typing in a good unguessable password.

Its easy to have a password manager which securely encrypts its database
and which has a bulletproof password for the password manager or
a fingerprint or facial id.

> That's why I disable Lockwise of Firefox through about:config. :)

> And printing passwords to a piece of paper gives you a backup.

But is useless if someone breaks into your house and steals your device
and printout. And I'm fucked if I am going to fart around digging out the
printout whenever I need to enter a password.

> But then you have a physical object to defend against thieves. You might
> also accidentally drop it in the streets.

> You might want to split the passwords into multiple parts printed on
> different sheets of papers... the separation trick.

Again, much too much farting around when you need to enter a password.

>> I can't fathom having 60 different passwords. I don't think I have half
>> that many accounts or otherwise that need a password, and some of the
>> lesser important ones share a password.
>
> Could be temporary accounts... :)

On Fri, 23 Dec 2022 01:36:20 +1100, Ken Blake <Ken@invalid.news.com> wrote:

> On Wed, 21 Dec 2022 22:11:19 -0500, Michael Trew
> <michael.trew@att.net> wrote:
>
>> On 12/21/2022 6:30, Mr. Man-wai Chang wrote:
>>> On 18/12/2022 7:11 am, swalker wrote:
>>>> I find that I can no longer remember the 60 passwords I have. So I
>>>> keep a list which isn't very safe I guess. So I have decided to use a
>>>> password manager.
>>>> And I don't mind paying something for a good one.
>>>>
>>>> Anybody have a recomendation?
>>
>> I'd be afraid of any program holding my passwords on an internet
>> connected device. Safer to write them out, print it for a hard copy,
>> and have a back up on a thumb drive.
>
> Safer in some respects, but less safe in others. A burglar can steal
> your hard copy or your thumb drive.
>
> Not mention that it's far more trouble to use than a good password
> manager.
>
> In balance, I think a good password manager is a much better choice.
>
> Note that I said a *good* password manager. I think Mr. Man-wai
> Chang's suggestion of using Excel is a very poor choice.
>
>
>> I can't fathom having 60 different passwords. I don't think I have half
>> that many accounts or otherwise that need a password, and some of the
>> lesser important ones share a password.
>
>
> We are in agreement there. I don't know how many I have, but I know
> it's far fewer than 60

Mine is far more than that but I can't see any way to count them in
Roboform.

Some are for other people who get me to use their account on
various services because they don't find the accounts easy to use.

>>> Excel with a password? ;)

Mr. Man-wai Chang <toylet.toylet@gmail.com> wrote

> Whatever you choose, you just canNOT fight determinded attacks from
> professional hackers, notably dictionary attack against any form of
> password requests.

That is wrong. You can completely protect against any determined
attack by using a very long and complex password which can never
be hacked using a dictionary attack.

On Tue, 27 Dec 2022 03:52:35 +1100, Mr. Man-wai Chang
<toylet.toylet@gmail.com> wrote:

> On 26/12/2022 12:05 am, david c wrote:
>> I disagree, a good password manager like keypass will generate random
>> passwords of any length. Even with a super computer breaking one is darn
>> near impossible. A little off topic, but the FBI couldn't get into an
>> Apple Cell phone.
>
> Passwords should only be stored inside your brain.

Not even possible with the best passwords.