#diceware — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #diceware, aggregated by home.social.
-
Diceware 중에 주사위 6개 굴리는 옵션은 아직 없구나 (다이소에서 파는 작은 게 6개 한 세트라서)
#Diceware -
I'm looking for a simple (standalone, offline, portabel) password generator.
The idea is to "give" it to users when they are requested to change their password
(Reasoning: The time you are forced to change your password NOW is the worst time to think of a unique strong password)Ideally the generated password should be memorable and typable (on mobile)
It might be a good idea to offer choices and a regenerate option.
Choices might be #DiceWare passwords (with a language specific wordlist)Ideally the passwords should confirm to configurable password policies
And it should be necessary to mention it. It should be secure!
Edit: a way to add the password proposals to the Windows password change dialog would also be nice (i believe Ubuntu día something like this)
Edit 2: I'm looking for something similar to pwgen or diceware Linux/Unix command line tools (see screenshots) but suitable for general Windows user
While I principally like diceware I think the user experience entering long passphrases on mobile is terriblem Muscle memory is not working and it is so easy to get single characters or capitalisation wrong. Special characters are an additional nightmare
#Boost and recommendations welcome
-
Due to a cockup on my part (shipping a partial password in a log file to a support request) I just had to reset my password asap. As it's a #password I need to use regularly (before I unlock my password manager), I use #Diceware to generate it. Unfortunately I couldn't find a single d6 in my room while I was running around like a headless chicken to reset it. So I've just generated a password using my giant foam novelty die. I'm *certain* it's not a truly fair die, but its definitely close enough for these purposes ;p
-
@thenewoil
I use #diceware random words and have never used as few as 3 so this doesn’t surprise me. The author advocates for using #passkeys but I have so far resisted that advice from him and others. Using a #password mgr with a browser extension, passkeys seem to be only a small increase in utility. Also don’t like the “black box” aspect of passkeys: what are they, where are they locally, how secure is this system. Happy to hear how I am wrong to be a passkey skeptic. -
Perché la lista di parole italiane per #diceware inizia con una lunga lista di numeri e simboli? https://www.taringamberini.com/downloads/diceware_it_IT/lista-di-parole-diceware-in-italiano/4/word_list_diceware_it-IT-4.txt
Quella in inglese è di sole parole! -
8,192 French #Diceware word list for use with computers.
-
Looks like Arnold Reinhold's home directory ~reinhold/ no longer exists on The World, even though the ISP is still online.
This means the #Diceware page is no longer accessible.
Anyone know what's going on?
-
Vor kurzem wurde das 2024 update zum hive systems password table veröffentlicht und wird gerade wieder viel geteilt.
Leider behandelt hive systems das Theme passphrases absolut inadequat, deswegen haben wir das zum Anlass genommen unsere passphrase Tabelle zu aktualisieren.
Details im Kommentar. ⬇️
#passwords #passphrases #security #passwordSecurity #passphraseSecurity #diceware
-
Did you know the #Diceware word list has the following words?
35413 kkk
35416 klan
35425 klux -
@lovinggrace change your passwords, everyone #diceware
-
It’s time to generate some strong passphrases! #diceware
-
Debunking Cybersecurity Myths
Cybersecurity expert Eva Galperin — @evacide — helps debunk some common myths about cybersecurity.
☑️ Is the government watching you through your computer camera?
☑️ Does Google read all your Gmail?
☑️ Does a strong password protect you from hackers?
☑️ Will encryption keep my data safe?
☑️ Are all hackers bad people?
Eva answers all these questions and much more using clear language that's easy to understand.
Eva Galperin is the Director of Cybersecurity at the Electronic Frontier Foundation — @eff
Rather read than listen? A helpful transcript is available.
https://www.wired.com/video/watch/expert-debunks-cybersecurity-myths
#Infosec #Cybersecurity #BeCyberSmart
#MoreThanAPassword #InfosecTraining
#DiceWare #Encryption #Passwords
#PasswordManagers #PublicWiFi #VPN
#EFF #ElectronicFrontierFoundation -
Is it REAL or is it FAKE?
Did you know that the skills you need to recognize a real word are completely different from the skills you use to recognize a fake word?
How well would you do? Which one of your word-recognition superpowers is naturally stronger?
The Center for Reading Research provides an online Word Test to measure:
➡️ How large your vocabulary is.
➡️ How well you can distinguish between a FAKE word and a REAL word.
With this test you get a valid estimate of your English vocabulary size within 4 minutes and you help scientific research by advancing word knowledge.
You can enter profile information about yourself if you like, or not enter any personal info.
These are the same folks at Ghent University in Belgium who conducted the readability research which led to major improvements in DiceWare. These improvements mean DiceWare is now ready for a larger audience, and could provide an "on ramp" to engage more members of the public in cybersecurity.
-
Debunking Cybersecurity Myths
Cybersecurity expert Eva Galperin — @evacide — helps debunk some common myths about cybersecurity.
☑️ Is the government watching you through your computer camera?
☑️ Does Google read all your Gmail?
☑️ Does a strong password protect you from hackers?
☑️ Will encryption keep my data safe?
☑️ Are all hackers bad people?
Eva answers all these questions and much more using clear language that's easy to understand.
Eva Galperin is the Director of Cybersecurity at the Electronic Frontier Foundation — @eff
Rather read than listen? A helpful transcript is available.
https://www.wired.com/video/watch/expert-debunks-cybersecurity-myths
#Infosec #Cybersecurity #BeCyberSmart
#MoreThanAPassword #InfosecTraining
#DiceWare #Encryption #Passwords
#PasswordManagers #PublicWiFi #VPN
#EFF #ElectronicFrontierFoundation -
BIP-39 passphrases: A standard for mnemonic passwords. Main application is Bitcoin wallets but generally applicable idea. 2048 words in the list.
https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki
#horsebatterystaple #cryptography #passphrase #security #diceware #bitcoin #+ -
@IchoTolot While I don't use #diceware myself, it is actually not bad.
I prefer tied-together, long and ridiculously weird looking chemical formulas that I'm actually able to memorize easily.
Just don't ask me to remember names of persons. More often than not I recognize someone, but can't remember their name... I hate that.
-
#Passwords are a popular topic today - which is good! Far too many people make up easy/simple passwords, reuse them, and complain that it's too hard to figure out #strong passwords AND remember them. I get it! But just adding more symbols or numbers just makes it harder for you to remember, but not a machine to guess. Computers can quickly go through the iterations of 'i', '1', '!', '|' that you used to change up the letter 'i' you have in your password. So why not make it easier on yourself and harder for the machine? Great question! Use #diceware! I've been using it myself for decades now, and enforce its use for #Sysadmins at my company. Use it to create super secure, random #passphrases of 4-6 words that are easy for you, and extremely difficult for a machine. Aside from the manual way of doing it (like I do) a #netizen made a site where it does the dice rolling for you and spits out words from the list that is likely better than whatever you do lol. Give it a try, be #CyberSecure https://diceware.rempe.us/#eff
-
In Australia, the National Cyber Security Centre tells consumers "passwords are passé — passphrases are longer and stronger" and points their citizens directly to the Electronic Frontier Foundation’s DiceWare Passphrases page.
-
Happy #WorldPasswordDay!
I've cracked billions of #passwords from tens of thousands of #data #breaches in the past 12+ years, and because of this, I likely know at least one #password for 90% of people on the Internet. And I'm not alone! While I primarily crack breached passwords for research purposes and the thrill of the sport, others are selling your breached passwords to criminals who leverage them in #AccountTakeover and #CredentialStuffing attacks.
How can you keep your accounts safe?
- Use a #PasswordManager! I recommend @bitwarden and @1password
- Use a #Diceware style #passphrase - four or more words selected at random - for passwords you have to commit to memory, like your master password!
- Enable MFA for important online accounts, including cloud-based password managers!
- Harden your master password by tweaking your password manager's KDF settings! For #Bitwarden, use Argon2id with 64MB memory, 3 iterations, 4 parallelism. For #1Password and other PBKDF2 based password managers, set the iteration count to at least 600,000.
- Use unique, randomly generated passwords for all your accounts! Use your password manager to generate random 14-16 character passwords for everything. Modern password cracking is heavily optimized for human-generated passwords, because humans are highly predictable. Randomness defeats this and forces attackers to resort to incremental brute force! There's no trick you can do to make a secure, uncrackable password on your own - your meat glob will only betray you.
- Use an ad blocker like #uBlock Origin to keep you safe from password-stealing #malware and other browser based threats!
- Don't fall for #phishing attacks and other social engineering attacks! Browser-based password managers help defend against phishing attacks because they'll never autofill your passwords on fake login pages. Think before you click, and never give your passwords to anyone, not even if they offer you chocolate or weed.
- #Enterprises: require ad blockers, invest in an enterprise password management solution, audit password manager logs to ensure employes aren't sharing passwords outside the org, implement a Fine Grained Password Policy that requires a minimum of 20 characters to encourage the use of long passphrases, implement a password filter to block commonly used password patterns and compromised passwords, disable #NTLM authentication and disable RC4 for #Kerberos, disable legacy broadcast protocols like LLMNR and NBT-NS, require mandatory #SMB signing, use Group Managed Service Accounts instead of shared passwords, monitor public data breaches for employee credentials, and crack your own passwords to audit the effectiveness of your password policy and user training!
-
Debunking Cybersecurity Myths
Cybersecurity expert Eva Galperin -- @evacide -- helps debunk some common myths about cybersecurity.
☑️ Is the government watching you through your computer camera?
☑️ Does Google read all your Gmail?
☑️ Does a strong password protect you from hackers?
☑️ Will encryption keep my data safe?
☑️ Are all hackers bad people?
Eva answers all these questions and much more using clear language that's easy to understand.
Eva Galperin is the Director of Cybersecurity at the Electronic Frontier Foundation -- @eff
Rather read than listen? A helpful transcript is available.
https://www.wired.com/video/watch/expert-debunks-cybersecurity-myths
#Infosec #Cybersecurity #BeCyberSmart
#MoreThanAPassword #InfosecTraining
#DiceWare #Encryption #Passwords
#PasswordManagers #PublicWiFi #VPN
#EFF #ElectronicFrontierFoundation -
Is it REAL or is it FAKE?
Did you know that the skills you need to recognize a real word are completely different from the skills you use to recognize a fake word?
How well would you do? Which one of your word-recognition superpowers is naturally stronger?
The Center for Reading Research provides an online Word Test to measure:
➡️ How large your vocabulary is.
➡️ How well you can distinguish between a FAKE word and a REAL word.
With this test you get a valid estimate of your English vocabulary size within 4 minutes and you help scientific research by advancing word knowledge.
You can enter profile information about yourself if you like, or not enter any personal info.
These are the same folks at Ghent University in Belgium who conducted the readability research which led to major improvements in DiceWare. These improvements mean DiceWare is now ready for a larger audience, and could provide an "on ramp" to engage more members of the public in cybersecurity.
-
Debunking Cybersecurity Myths
Cybersecurity expert Eva Galperin -- @evacide -- helps debunk some common myths about cybersecurity.
☑️ Is the government watching you through your computer camera?
☑️ Does Google read all your Gmail?
☑️ Does a strong password protect you from hackers?
☑️ Will encryption keep my data safe?
☑️ Are all hackers bad people?
Eva answers all these questions and much more using clear language that's easy to understand.
Eva Galperin is the Director of Cybersecurity at the Electronic Frontier Foundation -- @eff
Rather read than listen? A helpful transcript is available.
https://www.wired.com/video/watch/expert-debunks-cybersecurity-myths
#Infosec #Cybersecurity #BeCyberSmart
#MoreThanAPassword #InfosecTraining
#DiceWare #Encryption #Passwords
#PasswordManagers #PublicWiFi #VPN
#EFF #ElectronicFrontierFoundation -
Is it REAL or is it FAKE?
Did you know that the skills you need to recognize a real word are completely different from the skills you use to recognize a fake word?
How well would you do? Which one of your word-recognition superpowers is naturally stronger?
The Center for Reading Research provides an online Word Test to measure:
➡️ How large your vocabulary is.
➡️ How well you can distinguish between a FAKE word and a REAL word.
With this test you get a valid estimate of your English vocabulary size within 4 minutes and you help scientific research by advancing word knowledge.
These are the same folks at Ghent University in Belgium who conducted the readability research which led to major improvements in DiceWare.
