tag:blogger.com,1999:blog-15453937.post3733145418652365053..comments2024-01-10T17:36:15.040-07:00Comments on The Lippard Blog: How Twitter got compromisedLippardhttp://www.blogger.com/profile/16826768452963498005noreply@blogger.comBlogger4125tag:blogger.com,1999:blog-15453937.post-9748194702610524172009-07-25T16:29:22.267-07:002009-07-25T16:29:22.267-07:00On balance, I like this article a lot. But it (uni...On balance, I like this article a lot. But it (unintentionally) seems to encourage cracking (by romanticizing the cracker) as much as it encourages everyone to employ practices that will keep their accounts safe. I suppose without giving the cracker a (more than?) fair shake, they probably wouldn't have gotten the story. Again, on balance, I think it's a great article. Certainly very interesting.<br /><br />I use KeePass as well and would recommend it.Trotthttps://www.blogger.com/profile/03598011905845663700noreply@blogger.comtag:blogger.com,1999:blog-15453937.post-30074640153407286992009-07-24T09:53:30.358-07:002009-07-24T09:53:30.358-07:00Eamon:
Check out KeePass (http://keepass.info/) o...Eamon:<br /><br />Check out KeePass (<a href="http://keepass.info/" rel="nofollow">http://keepass.info/</a>) or PasswordSafe (<a href="http://passwordsafe.sourceforge.net/" rel="nofollow">http://passwordsafe.sourceforge.net/</a>).<br /><br />I use the former.Lippardhttps://www.blogger.com/profile/16826768452963498005noreply@blogger.comtag:blogger.com,1999:blog-15453937.post-79303623659962657562009-07-24T09:29:17.205-07:002009-07-24T09:29:17.205-07:00Since I use the same password (as it happens, a re...Since I use the same password (as it happens, a reasonably strong one by the standards of guessability, even against dictionary attack) for multiple on-line activities, I've recently become concerned about this vulnerability (especially since for many sites, my login info now gets automagically filled in). I assume the idea is to somewhat automate the process of maintaining an encrypted file on your machine which indexes login IDs against passwords.<br /><br />A brief Google search turns up some hits, but do you (being in the biz) have any advice what to look for?Eamon Knighthttps://www.blogger.com/profile/04262012749524758120noreply@blogger.comtag:blogger.com,1999:blog-15453937.post-5555456950657989642009-07-23T18:30:01.048-07:002009-07-23T18:30:01.048-07:00I use the firefox Password Maker extension. This g...I use the firefox <a href="http://passwordmaker.org/" rel="nofollow">Password Maker</a> extension. This generates a unique password for each site, by hashing the hostname and a password I enter. This means that I only have to remember one password, yet no-one can capture the password I use on one site and reuse it. There are also versions for Opera and other environments.Alexhttps://www.blogger.com/profile/08561946313056153729noreply@blogger.com