My Password Generator

[iCarrot]

(02-24-2012 04:00 AM)Elements Wrote:  a browser that dosen't remember the password

It's time to move on to a more modern browser. That one sucks.

[Nevil]

(02-24-2012 04:00 AM)Elements Wrote:  Yeh I agree if I use a browser that dosen't remember the password it kinda deletes the purpose.

So if we were up to your opinion we should use passwords like 123123 or something easy that you can remember.

I guess you are not aware that even password from this generator are being cracked by hackers with a few easy tricks like a good hardware.

So the only person who is disturbing to security is yourself in the case you get hacked.

The purpose of the generator is to provide secure passwords.

[net_robber]

why there is not one talk about my shell-password-generator

[Nevil]

It's not a real password generator, it drops a MD5 sum which is quite too long.

I don't think that people would be willing to keep MD5 hashes in mind.

[Elements]

(02-24-2012 09:15 PM)Murderwrecker Wrote:  

(02-24-2012 04:00 AM)Elements Wrote:  Yeh I agree if I use a browser that dosen't remember the password it kinda deletes the purpose.

So if we were up to your opinion we should use passwords like 123123 or something easy that you can remember.

I guess you are not aware that even password from this generator are being cracked by hackers with a few easy tricks like a good hardware.

So the only person who is disturbing to security is yourself in the case you get hacked.

The purpose of the generator is to provide secure passwords.

I never said that I just said without browsers that remember no passwords there really is no point.Only a stupid person would use a password like 13442 when they can just make they're own one up with as many characters as they want.

[kukelekuuk00]

if you want your password to be saved than you can just save all the passwords in a single text file and password protect it.

[Nevil]

There are quite a few good and free password managers on the Internet.

The have everything to track all you passwords and keep them safe for the case you forget one, much better than a password protected plain-text file.

[wayofcoder]

my 2 cents:
There is 1% chance that your pass will be hacked because hacker leaked the db of random site and de-hashed(Not the word I was looking for, correct me here) your pass.
On other hand, passwords get hacked because of human stupidity or because someone was looking at your keyboard while you were typing.
There was an article on HN about this.

In my opinion, only good password is the one that you CAN'T remember. You will never get your password compromised with social engineering/keyloggers/sneak peaking if you just copy/paste your password from an email or password app.

[f8ll]

Most keyloggers can get the contents of anything you copy to the clipboard.

Really the only way against keyloggers (which many security experts advise, but I'm not sure I agree with it), is to have your browser store the password.

[ismywb]

(03-10-2012 08:06 AM)f8ll Wrote:  Most keyloggers can get the contents of anything you copy to the clipboard.

Really the only way against keyloggers (which many security experts advise, but I'm not sure I agree with it), is to have your browser store the password.

Wrong. There is one sure fire way, and I know multiple people who do this.

Lets say your pass is password93783

Type in: word

Use your mouse (not keyboard, keyloggers can track even special keys, not just letters and numbers) to put you cursor in front of "word"

Now, Type: ss

Move cursor to front using same method

Now, Type: pa

Move cursor to end using above method

Now, Type: 783

Move cursor to front of newly typed number using above method

Now, Type: 93

Congrats. You just mind-fucked the logger.
To the logger, it looks like you typed: wordsspa78393

Also, remember, the best way to keep a password secure is to put it in one place. Your mind. Odds are, no one cares enough to torture it out of you.