[153598] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Password safes &c. (was: Dear Linkedin,)

daemon@ATHENA.MIT.EDU (Andrew Sullivan)
Fri Jun 8 17:08:25 2012

Date: Fri, 8 Jun 2012 17:07:40 -0400
From: Andrew Sullivan <asullivan@dyn.com>
To: nanog@nanog.org
In-Reply-To: <CAJEFqDdZo0aZmFohOk1QOUM0dZOjou6Ln8OezQ6h--BuPJu+nQ@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On Fri, Jun 08, 2012 at 05:00:14PM -0400, Tyler Haske wrote:
> KeePass, KeyPassDroid and Dropbox.

Yes, of course, I'll just upload all my passwords to a place totally
under the control of someone (well, actually, _two_ other ones) else,
and then pray that there never turns out to be a nasty attack against
the programs and algorithms I used.  (I'm more concerned about the
programs.  Obviously, if SHA-2 or whatever breaks, we gots bigger
problems than all my personal passwords.)

I'm not trying to be dismissive.  Those are excellent stopgap
measures.  They're not a solution.

Best,

A

-- 
Andrew Sullivan
Dyn Labs
asullivan@dyn.com


home help back first fref pref prev next nref lref last post