Ogg wrote to Boraxman <=-
@MSGID: <6266CAFF.5137.dove-int@capitolcityonline.net>
@REPLY: <6265E1A9.5336.dove-int@bbs.mozysswamp.org>
Hello Boraxman!
** On Monday 25.04.22 - 09:47, Boraxman wrote to Ogg:
Or... the two of you could agree on using exactly the same
book, and use something like this:
passphrase = ourbook(the first 3 words on page 100, row 10)
--
A workable idea, definately.
Two people can even establish a "phrase" based on a favourite
"anything" (a food item, wine, tech toy, book, etc..) ..and
simply pre-establish that you will use the first or last 5-
digits of the product code (or in the case of a book, part of
the isbn number.)
I get totally frustrated when some people send me eTransfers
and they put the answer to the passphrase right in the message
box (even when the system expressly reminds the user NOT to do
that.)
Or, they use something really simple like "the town you live
in". Anyone who knows me would know the answer to that.
It's a sad commentary that some people just don't appreciate
the relevance of keeping things like passphrases and passwords
private.
High trust in some cases. I did admin work, and people had no issue leaving me passwords. This was a while ago, and sometimes they wanted me to help them with their home computer, again, they just left me with the passwords.
The post-it notes with passwords were always a headache.
Another simple option, if you're just looking for the "keep
prying eyes who might steal my laptop/gain my password"
people out is to send the password in an SMS.
SMS is totally in the clear, and probably all logged - forever.
Not as secure,especially if your phone is stolen, but if
you delete the message, it should protect you from 99% of
the cases where you will need encryption.
Deleting an SMS on your phone, maybe. But all those messages
are accessible to the people who work in the phone industry.
The level of security you need, is based on the threat. SMS's are in the clear, but it would take a lot of work to match an SMS with with an account, particularly if you say by e-mail you'll send the password by SMS, and send the password by SMS alone, without any other information.
Someone could attack, but for the most part, if your laptop is stolen for example, your safe, or any other compromise of your computer/e-mail.
Not ideal, but far better than sending it in the same email.
--- MultiMail/Linux v0.52
þ Synchronet þ MS & RD BBs - bbs.mozysswamp.org
Like us on Facebook
