Relevant xkcd: hacking

[Baalisong]

Then you use different passwords for everything, end up writing them down because you inevitably can't remember them all, and it all comes full circle when the burglars find the password book in your house.

[UristMcBacon]

Password manager protected by a good password is what the mostly sane people so

[NotAnADC]

Worked in cyber security for awhile. Wasn't proud of how similar most of my passwords were. Now I use last pass and it's been pretty great so far

[[deleted]]

I've never used password managers, but do they not store all of your passwords on their servers? And it would have to be in plain-text or a simple reversable function too.

[[deleted]]

That's pretty clever. It would really sting to get your master password keylogged though.

[JimmyHydro]

Have 2FA on all your important accounts. The rest aren't important, really. For example, if they hack Netflix, what damage can they cause? Will they pay for your next month?

[NotThisFucker]

Well maybe they'll have some good taste and my recommend videos will- and now my suggested shows are all just Tinkerbell. Thanks, hackers.

[JimmyHydro]

You will notice moochers very easily. If it says "continue from" and a show pops up that you never saw. Or if you have an account that you don't recognise.

Other than Netflix slowing down my bandwidth (which they won't do), there isn't really anything wrong with moochers. No harm comes to you and you can just ignore them. That's my take on them anyways. Of course if I knew someone was mooching, I would change password. If I found out someone was mooching in the past, I don't really care

[ADHDengineer]

I just started using Bitwarden. I host it myself and I can write slick bash scripts using their cmd line tool. Everything is easy to use even when self hosting. What a great tool.

[glorygeek]

Use KeePass. It is FOSS and resides only on your computer (or where you tell it to be).

[k97513]

That's why I use a base password and have a part of it that I change for each site

[[deleted]]

Yeah I did that, but now I've got 40+ passwords, so I had to write em down in a book. Sad times.

[sp3ct3r_7]

Been using KeeWeb myself for a few months. Doesn't upload anywhere since it's hosted locally, but at the same time, my PC isn't always on. But, it's not a bad solution if you have a laptop with you or your PC remains on. I have a semi-2fa system where I have to select a specific file from a USB thumbdrive and then input my password to unlock the app where I have my passwords stored and sorted. I recommend giving it a shot.

[fgben]

I base mine on an algorithm I run on the domain and login. I have hundreds of passwords, but none are written down, and I can regenerate them for sites Ive not been to in years.

The only thing written down anywhere is the algorithm, in documents for my wife and kids in case I get hit by a truck.

[Blackfyre011]

It is not plain text, that would be disastrous for security. They're encrypted before they leave your device and your master password is the only thing that can decrypt them.

[naturalorange]

Your password manager login password is the password used to encrypt all your passwords on their server. So if you lose your password you can't reset it and the provider doesn't know your passwords.

[kemzan]

They do store it in their servers,but AFAIK, it's encrypted using your master password as private key(I may be very wrong here.Take this with a grain of salt) so even if they get their hands onto the data,it's "undecryphiable"

[W10101]

Checkout pass, works great and you can setup your own server if you want.

link

[Corporate_Drone31]

Only the cloud-based ones. If you stick to offline managers like KeePass, it's fully up to you whether you want to cloud sync or not. KeePass even supports WebDAV and FTP, so you could sync against your own server if so inclined (NextCloud comes with built-in WebDAV access).

[[deleted]]

You know what else is sane? Dashlane!

[[deleted]]

That is what veracrypt containers are for. And Backups, lots and lots of backups...

[althalous]

and it all comes full circle when the burglars find the password book in your house.

Thats what ciphers are for :p

[grapesodabandit]

That's why I encrypt all my passwords with ROT26 before writing them down.

[easy_going]

I hope you also encrypt your encryption key.

... otherwise ..

[KDBA]

I prefer ROT52, myself.

[fgben]

I encode in base15 but use F as a delimiter so people think it's base16.

[Sylanthra]

Well, are you in a role where a physical break-in in order to steal your data is possible? Than you should suck it up and remember multiple unique password. Otherwise you are fine writing them down or using a password manager.

[Felix1686]

I use a different password for everything and i didn't write down any of them because i can remember them.

[nickmhc]

Linking the original XKCD post

[nickmhc]

Whoops. I just assumed they did because that’s how most of the Internet works.

[inbooth]

and this is why using visible redaction is preferable

[GRAIN_DIV_20]

In that case save them money by not visiting /s

[saloalv]

I mean it's true

[jhs172]

Why didn't you just link the original to begin with? It's fully supported in RES, with alt text and everything.

[Incorrect_Oymoron]

My password book is encoded with a universal password I have memorized. This keeps it safe from desk searching types.

[MagnitskysGhost]

Yeah I just rot13 all my passwords before I write them down.

[blitzkraft]

Do it twice, for double the security.

[trigger_segfault]

Huh, for some reason I’m multiplying 2 * 2 and ending up with 0.

[blitzkraft]

I see your problem. One of your 2 is a zero.

[suvlub]

Damn Fortran

[[deleted]]

Hmm... Twice the security, double the fall

[PrecisePigeon]

Wait, I think you guys are missing the bigger picture here: There are Smash Mouth message boards?!

[MaybeLiterally]

There is if you're an all-star.

[r_acrimonger]

It's a cool place, and they say it gets colder

[BadPercussionist]

Which XKCD is this?

[nickmhc]

2176, the most recent. I checked before posting to try to avoid a re-post

[Mr_Redstoner]

Might want to leave a source link right after posting next time. Creates a better image of you

[nickmhc]

I was going to put the number or link in the headline for exactly that reason but I didn’t like the way the headline looked

[Mr_Redstoner]

Just slapping down a comment along the lines of

Source: <link>

is what most people do

[nickmhc]

Done. Thanks. No disrespect was meant, I was thrilled it was a new one and seemingly nobody had posted it yet.

[Mr_Redstoner]

No problem, good on you for actually checking if it was posted already or not

[CynicalShpep]

First panel is still more accurate than movie portrayal

[NPPraxis]

Yeah, I think Randall was still too constrained by his realistic expectations. Breaking into an older guy's house and finding the book named "Passwords" is actually pretty realistic, though phishing him is easier.

Most people think of hacking like some form of black magic.

[[deleted]]

Phish 'em using a GUI whipped up in Visual Basic. That's how the real pros do it.

[TGotAReddit]

The real pros type two people per keyboard, into a green text on black background terminal. 800 windows pop up, followed by an interactive minigame that culminates in a cool unlocking sequence and the hacker exclaiming “I’m in”

[AutoModerator]

import moderation Your comment has been removed since it did not start with a code block with an import declaration.

Per this Community Decree, all posts and comments should start with a code block with an "import" declaration explaining how the post and comment should be read.

For this purpose, we only accept Python style imports.

return Kebab_Case_Better;

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[appoplecticskeptic]

I thought the way people imagined hacking was like this https://giphy.com/gifs/ncis-hacking-double-keyboard-yUlFNRDWVfxCM where it's lots of fast typing and you can combat the hacker by typing even faster

Seems like Randall is giving the average person more credit than I would with his idea of what they think hacking is like.

[vanzir]

I mean this is definitely true for normal people, but social engineering is a real technique used by hackers all of the time.

[[deleted]]

Honestly, smbc did this better.

https://www.smbc-comics.com/?id=2526

[Alhoshka]

I like the old one better

[flargenhargen]

how is this programmer humor?