From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 5E6F6138334 for ; Mon, 4 Feb 2019 21:06:53 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id DAE8EE0D8A; Mon, 4 Feb 2019 21:06:45 +0000 (UTC) Received: from smarthost03c.mail.zen.net.uk (smarthost03c.mail.zen.net.uk [212.23.1.22]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 79178E0D6D for ; Mon, 4 Feb 2019 21:06:45 +0000 (UTC) Received: from [82.69.83.178] (helo=mail.digimed.co.uk) by smarthost03c.mail.zen.net.uk with esmtpsa (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1gqlS0-0004LZ-1j for gentoo-user@lists.gentoo.org; Mon, 04 Feb 2019 21:06:44 +0000 Received: from digimed.co.uk (fenchurch.digimed.co.uk [192.168.1.6]) by mail.digimed.co.uk (Postfix) with ESMTPA id 8F9FC65462 for ; Mon, 4 Feb 2019 21:06:43 +0000 (GMT) Date: Mon, 4 Feb 2019 21:06:43 +0000 From: Neil Bothwick To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Re: Coming up with a password that is very strong. Message-ID: <20190204210643.59a8636a@digimed.co.uk> In-Reply-To: References: <8d027455-f210-c399-f5a7-bfb05692cc5f@gmail.com> <42eecf5d-0fbc-0396-55c6-6528c81a4920@gmail.com> Organization: Digital Media Production X-Mailer: Claws Mail 3.17.3 (GTK+ 2.24.32; x86_64-pc-linux-gnu) X-GPG-Fingerprint: 7260 0F33 97EC 2F1E 7667 FE37 BA6E 1A97 4375 1903 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; boundary="Sig_/N69gglmYORxEXS5p.k_Ux=m"; protocol="application/pgp-signature" X-Originating-smarthost03c-IP: [82.69.83.178] Feedback-ID: 82.69.83.178 X-Archives-Salt: c116934b-fd48-4fa5-bf75-cac973389535 X-Archives-Hash: 1944f6ac64ab818e505e12b81e545659 --Sig_/N69gglmYORxEXS5p.k_Ux=m Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Mon, 4 Feb 2019 15:59:02 -0500, Rich Freeman wrote: > > One reason I use LastPass, it is mobile. I can go to someone else's > > computer, use LastPass to say make use of Paypal, Newegg, Ebay etc, > > logoff and it is like I was never there. =20 >=20 > As much as I like Lastpass I would never do that. It isn't magic - it > is javascript. If there is a compromise on your computer, then your > password database will be compromised. This is true of other > solutions like KeePassX and so on - if something roots your box then > it will be compromised. I don't see what root has to do with it. If someone gains access to your box, they can copy the database file and then take their time trying to crack the password, but you don't need to be root to do that. --=20 Neil Bothwick ... "I'm simply not a nice girl", she whispered tartly. --Sig_/N69gglmYORxEXS5p.k_Ux=m Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEGfLZTV7dXdQXh/dDdCdyyQfftocFAlxYqWMACgkQdCdyyQff tof+TRAArhBySKvxZegBTgYLgCHzvV2Yw1rKXpCGMxvLS8PV2SPRdm3CihpbaPgu xGZXDEU2XmglKejh6OqKF34jTwh6k24kr8v4Ns6KVuDeykG/FXE1qOpA5jJE7AuL zrRGRzoBnzabiRAxNKb+p3p6pMkfcP5ds38uRwIBCNIj/K5XtBWpfcbfAC7Vld4M 3VmAFtCr27HUECU5dGcBck4pfZso28cdp4S/1jhB3PxyS8uQVbXrDH5BoYOx4FRP msYMHFstmJa+8k/A4IJHw1pOng9yIgkygTruuOD8r0oGh1lN5K0Mvq4jlnKMTGQW UwDp0/sEhAlEuW0ZEhfcKSkzhe+sJtJASGdbqvuAjCTQM4pmFKS05m7z5LXvuFcM M6cZi/VAXeAkrvCazaOk/YplJiMF62Ezqj9fbIH02xIepDO/moRGA69Yp/h3GJaS 3YOOnQnaOs5z/mWYQ3s9zSfzzZr0jR1o0W1dCXWRZMS7j2pgiwbgjKfLWNz7tKWE NHhpTQo+/qRSqgkCF+r6GyfQAokcH+GCDLoQoTh9YdoRHL1lutqwOAqVmLYV0iNa rCvcL/ILep9r5LYZ5cKKMVuTTjyg3izeKIKpa9HOD2V634SJEN4n9vsXJ60YxQKC e1ClJYdVwNxlm3m6VBF0UUpiFF40A3Tyal6OLwMF4EOysD7JbGc= =bAmh -----END PGP SIGNATURE----- --Sig_/N69gglmYORxEXS5p.k_Ux=m--