Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

The Password Pandemic: A password “classification scheme” for the home or small business user
Stronghold Cyber Security ^ | November 13, 2017 | Jason McNew

Posted on 11/13/2017 8:22:15 AM PST by Gennie

click here to read article


Navigation: use the links below to view more comments.
first previous 1-2021-36 last
To: Gennie

Using 1Password for about 2 years. Don’t know how I managed before without it.


21 posted on 11/13/2017 9:48:03 AM PST by Flick Lives (The FBI is a taxpayer funded Mafia organization)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Perseverando

>My only concern is about the loss of control should the master password be hacked on LastPass’s site, and then the list is downloaded and the master PW is changed.

Sorry if I sound like a last pass sales guy, but I love the software. It simply works:

https://www.lastpass.com/how-it-works

>Your data is encrypted and decrypted at the device level. Data stored in your vault is kept secret, even from LastPass. Your master password, and the keys used to encrypt and decrypt data, are never sent to LastPass’ servers, and are never accessible by LastPass.


22 posted on 11/13/2017 9:51:48 AM PST by JohnyBoy (The GOP Senate is intentionally trying to lose the majority.)
[ Post Reply | Private Reply | To 20 | View Replies]

To: Perseverando
My only concern is about the loss of control should the master password be hacked on LastPass’s site
C'mon, that won't happen ... just ask millions of Equifax customers.
23 posted on 11/13/2017 9:53:14 AM PST by oh8eleven (RVN '67-'68)
[ Post Reply | Private Reply | To 20 | View Replies]

To: oh8eleven

> C’mon, that won’t happen ... just ask millions of Equifax customers.

BTW, my primary credit card was hacked yesterday. This is a first for me for unauthorized CC breaches. Someone attempted to bill my card for a couple of hundred dollars to a money transfer site. Fortunately my credit card company flagged it and contacted me. Should have a new card in a couple of days.

I try to be very security conscious in all aspects of life, not just internet.


24 posted on 11/13/2017 10:09:16 AM PST by Perseverando (For Progressives, Islamonazis & other Totalitarians: It's all about PEOPLE CONTROL!)
[ Post Reply | Private Reply | To 23 | View Replies]

To: Gennie; All

Do we really trust password managers that are hosted on other people’s servers?

I know, encryption, blah blah.


25 posted on 11/13/2017 10:15:46 AM PST by old-ager
[ Post Reply | Private Reply | To 1 | View Replies]

To: JohnyBoy

> Last pass does not have access to the passwords

You sure? Can’t decrypt? Ever?


26 posted on 11/13/2017 10:16:41 AM PST by old-ager
[ Post Reply | Private Reply | To 19 | View Replies]

To: tiki

> just 4 alternatives to check out.

and hackers have just four alternatives to try.

I don’t know if I have anything better.

But it’s a problem!


27 posted on 11/13/2017 10:17:40 AM PST by old-ager
[ Post Reply | Private Reply | To 8 | View Replies]

To: old-ager

> Last pass does not have access to the passwords

>>You sure? Can’t decrypt? Ever?

If you lose your master password with LastPass you can’t get any of your passwords from them. That’s a pretty strong indication that they do not store it and can’t decrypt your stuff without it.

Of course, there’s no way to know for sure, but from a liability standpoint, there’s no reason to lie about it.


28 posted on 11/13/2017 10:26:41 AM PST by JohnyBoy (The GOP Senate is intentionally trying to lose the majority.)
[ Post Reply | Private Reply | To 26 | View Replies]

To: old-ager

I think it comes with the territory.

If we’re talking about computers and devices you own, and are with you at home/carried, then why go cloud?

But do imagine how many people have passwords that give them access to the so-called cloud. This web site is one of them.

Your Free Republic password is stored online, or the cloud if you will.

I literally scores and score of sites and cloud services I manage, and each one has a different password to not just use it, but to maintain and administrate it.

It then makes sense to use a cloud-based password management system. It’s helpful when I’m on the road teaching a computer class or giving a presentation—I then don’t have to worry about getting remembering all the different account names and passwords to my home servers, cloud servers, etc.

And my credit cards, PayPal, etc. All of those are vulnerable. The great thing about my premium online password management system is they are liable for damages if they get hacked and any of my passwords are used illegally!

I pay a little extra, but it is worth it.


29 posted on 11/13/2017 10:29:01 AM PST by Alas Babylon! (Keep fighting the Left and their Fake News!)
[ Post Reply | Private Reply | To 25 | View Replies]

To: Perseverando
Fortunately my credit card company flagged it and contacted me.
Had the same thing happen two years ago and I'm VERY security conscious.
Many years ago the Senate held hearings regarding hacking and a "reformed" hacker was asked what sites he had been unsuccessful in gaining access to. He answered - none - and added that included banks, the gubmint, colleges, military, all of them.
30 posted on 11/13/2017 10:42:24 AM PST by oh8eleven (RVN '67-'68)
[ Post Reply | Private Reply | To 24 | View Replies]

To: Alas Babylon!

Just curious, what password manager did you choose?


31 posted on 11/13/2017 10:42:33 AM PST by Perseverando (For Progressives, Islamonazis & other Totalitarians: It's all about PEOPLE CONTROL!)
[ Post Reply | Private Reply | To 29 | View Replies]

To: Perseverando

Dashlane and IOP for Business.


32 posted on 11/13/2017 10:51:46 AM PST by Alas Babylon! (Keep fighting the Left and their Fake News!)
[ Post Reply | Private Reply | To 31 | View Replies]

To: Alas Babylon!

Thanks for replying.

I am leaning toward LastPass if I change, though I’ve been using Norton Identity Safe for years. I’m hoping Norton will add some new bells and whistles when 2017 Norton Security comes out. I’ll grab my annual updated copy on Black Friday


33 posted on 11/13/2017 10:57:19 AM PST by Perseverando (For Progressives, Islamonazis & other Totalitarians: It's all about PEOPLE CONTROL!)
[ Post Reply | Private Reply | To 32 | View Replies]

To: old-ager

I don’t think they would be able to get through the 1st 2 steps, it is pretty complicated if you are not me.


34 posted on 11/13/2017 12:02:14 PM PST by tiki
[ Post Reply | Private Reply | To 27 | View Replies]

To: CatQuilt

I have a Password Manager called “Pins”. It uses a matser password for access to the DB that stores all your other passwords...CC #s, etc, etc. And it’s free. And it is portable. You can put it on a thumb drive for use on any computer. Simple and elegant. And free.


35 posted on 11/13/2017 1:45:19 PM PST by Bloody Sam Roberts (Ban pre-shredded cheese now! Make America grate again.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: JohnyBoy

Yes, I use it on my pc, my phone and my tablet.


36 posted on 11/13/2017 2:34:05 PM PST by CatQuilt (Lover of cats =^..^= and quilts)
[ Post Reply | Private Reply | To 18 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-36 last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson