Thats embarrassing.

maynard · Apr 14, 2018

if I ever lose the notebook where I wrote down my character names and passwords I will be well and truly fucked

I wouldn't dream of trying to keep that shit in my head

Takeiteasy · Apr 14, 2018

I have a keepass to fall back on but forget to update it quite often, so end up with useless details. Still it's good and secure, more than a notebook.

https://keepass.info

Check it out if you don't know what it is because you only need to remember one password to get access to all your passwords. Very handy and very secure.

Vavrik · Apr 14, 2018

Keypass is probably as good as password stores get, since the passwords are stored locally on your system. As long as you haven't inadvertently stored that file in a shared folder, someone would need physical access to your computer. But then passwords are actually a weak way to secure systems, and to protect users anyway. I want to like 3 factor identification, but what happens when your phone falls into a cup of tea?

Then you use one of these sites... and boom. All your password maintenance is for naught. https://gist.github.com/Enegnei/6b13b2d5d0bc7adebb66195f807f3f3b

DirectorGunner · Apr 15, 2018

This is why you ladies and gents need to use encrypted files to store your logins.. like an offline password manager.
I never have to remember my passwords.... what's a password?

FZD · Apr 15, 2018

Vavrik said:
Keypass is probably as good as password stores get, since the passwords are stored locally on your system. As long as you haven't inadvertently stored that file in a shared folder, someone would need physical access to your computer. But then passwords are actually a weak way to secure systems, and to protect users anyway. I want to like 3 factor identification, but what happens when your phone falls into a cup of tea?

3 factor identification? You're way too trusting. I secure all my accounts behind an Email, that is secured by a phone, which is held by my neighbor, who is trained in martial arts and is locked away in a bunker, to which I have the only key, which I melted down to a solid bar of metal and will reforge from memory when needed, by a hammer that I have buried at undisclosed location in the Caribbean, to which I have a treasure map, which is broken into 4 pieces and each piece is held by a member of "The Cult of the Map", who I control by holding their master, my neighbor, hostage in a bunker.

Talonsbane · Apr 16, 2018

TEST Squadron 4 factor security in all things : B. E. E. R.

Blind Owl · Apr 16, 2018

Vavrik said:
Keypass is probably as good as password stores get, since the passwords are stored locally on your system. As long as you haven't inadvertently stored that file in a shared folder, someone would need physical access to your computer. But then passwords are actually a weak way to secure systems, and to protect users anyway. I want to like 3 factor identification, but what happens when your phone falls into a cup of tea?

Then you use one of these sites... and boom. All your password maintenance is for naught. https://gist.github.com/Enegnei/6b13b2d5d0bc7adebb66195f807f3f3b

DirectorGunner said:
This is why you ladies and gents need to use encrypted files to store your logins.. like an offline password manager.
I never have to remember my passwords.... what's a password?

Wait. There are safe ways to store passwords? Help me fellas. Links or info.

hardroc77 · Apr 16, 2018

Sanzennin said:
3 factor identification? You're way too trusting. I secure all my accounts behind an Email, that is secured by a phone, which is held by my neighbor, who is trained in martial arts and is locked away in a bunker, to which I have the only key, which I melted down to a solid bar of metal and will reforge from memory when needed, by a hammer that I have buried at undisclosed location in the Caribbean, to which I have a treasure map, which is broken into 4 pieces and each piece is held by a member of "The Cult of the Map", who I control by holding their master, my neighbor, hostage in a bunker.

Ah, I see you have the basic package. The upgraded one has all that and the location of the key to the bunker is encrypted into a chip embedded in the neighbor's dog which is kept at a humane society in an undisclosed location.

Talonsbane said:
TEST Squadron 4 factor security in all things : B. E. E. R.

Hey, how did you guess my password?

Vavrik · Apr 16, 2018

No, there is no totally safe ways to store passwords in a file, that includes in Keypass files. These are pretty secure, but that doesn't translate to really safe. The problem with password management systems is, they are protected by a single master password. If a black-hat obtains the file, he only needs to crack THAT password, and he has access to all of the passwords. This does takes time, but it has proven to take far less time than you'd think. Keypass is probably the best of these, probably good enough for most people - but read the last paragraph.

A more robust system uses a password salt for each password, but no encryption method known to man is unbreakable. In this case you'd need to crack the master password, and the unique key for any of the passwords it contains. It just makes it harder, not impossible.

Ok so you do all this, and your password file is as secure as man can make it. But then what are your passwords used on? Your bank. Your e-mail. This website, RSI's website. Every other website you have passwords on. So even then, you are still depending on the place the password is for to be secure. That is proving to be "hit and miss" at best. You would be amazed how many "secure" websites, aren't. That's who you're trusting. Don't trust them.

Talonsbane · Apr 16, 2018

hardroc77 said:
Ah, I see you have the basic package. The upgraded one has all that and the location of the key to the bunker is encrypted into a chip embedded in the neighbor's dog which is kept at a humane society in an undisclosed location.

Hey, how did you guess my password?

Beer Everything Every-time Regardless

hardroc77 · Apr 16, 2018

Vavrik said:
Ok so you do all this, and your password file is as secure as man can make it. But then what are your passwords used on? Your bank. Your e-mail. This website, RSI's website. Every other website you have passwords on. So even then, you are still depending on the place the password is for to be secure. That is proving to be "hit and miss" at best. You would be amazed how many "secure" websites, aren't. That's who you're trusting. Don't trust them.

I get what yer saying. But if RSI suffers a data breach, they would be responsible for any damages, wouldn't they? And most, all?, financial institutions are insured to cover losses as well.

Vavrik · Apr 16, 2018

hardroc77 said:
I get what yer saying. But if RSI suffers a data breach, they would be responsible for any damages, wouldn't they? And most, all?, financial institutions are insured to cover losses as well.

Good questions by the way.

If RSI passwords are hacked, it's pretty much you'll find your ship inventory all given away or something. That can be fixed on RSI's end. No big deal - and no they aren't really responsible for damages.

Your bank has insurance, yeah to a limit. And they also are insured themselves. So, your rent is due in 1 week. But your bank takes minimum of 30 days to refund any money missing from your bank account. You find yourself stuck between a rock and a hard place, with a hopeful promise instead of a bank balance. Your rent check bounces. You get dinged 35 bucks for the rubber check that shouldn't have been, and 35 more because oh hey that first fine put your balance into overdraft. Then, your landlord is at your door, wants 50 more because of the bounced check. You explain so he says, "Yeah I understand so I won't evict you, but understand that your banking problem is not MY problem." It's not fair, but that is how the world works. AND you need groceries.

[Edit] I actually have some experience with this one. Wasn't even lost money. The bank put a hold on my account by mistake. They ultimately refunded me only part of the fees that they charged.

Blind Owl · Apr 16, 2018

Well shit. I'll just keep on keeping on with my system of hiding slips of paper in pillow cases around the house.

Takeiteasy · Apr 16, 2018

Just use keepass with a good secure and long password and there's really no need to go crazy with your security.

You'll end up with a keylogger virus before masked intruders slice your fingers off until you tell them your keepass password and log into your Runescape account with an evil laugh.

MWUAHAHAHAH we have the party hat!!!

DirectorGunner · Apr 16, 2018

As revealing the name of the program I use will introduce a vulnerability in my security system.... lol....
here's some links
https://www.slant.co/topics/2169/~offline-password-managers
https://lifehacker.com/5529133/five-best-password-managers
https://www.freelancer.com/community/articles/diving-into-offline-password-managers

Blind Owl · Apr 16, 2018

DirectorGunner said:
As revealing the name of the program I use will introduce a vulnerability in my security system.... lol....
here's some links
https://www.slant.co/topics/2169/~offline-password-managers
https://lifehacker.com/5529133/five-best-password-managers
https://www.freelancer.com/community/articles/diving-into-offline-password-managers

Thanks DG. You're the bestest ever!

Blind Owl · Apr 16, 2018

NaffNaffBobFace said:
I don't use a software, sorry :slight_smile:

I'll stick to hardware! Scratching my passwords into rocks with a stick.

Yes, with a stick.

Thats embarrassing.

Space Marshal

Space Marshal

Space Marshal

Space Marshal

Space Marshal

Space Marshal

Space Marshal

Hallucinogenic Owl

Space Marshal

Space Marshal

Space Marshal

Space Marshal

Space Marshal

Space Marshal

Hallucinogenic Owl

Space Marshal

Space Marshal

Hallucinogenic Owl

Space Marshal

Hallucinogenic Owl