[Discuss] Password app

[jay at lentecs.com (Jason Normand)]

This sounds viable for sites that do not need high security, and that you
do not use a lot.  easy to just to keep the app available and quickly run
the passwords as you need them.  never hurts to have more tools available.

this could be especially useful for times when you are using throw away
accounts and do not want to keep the passwords in your primary password
store.

also it sounds like the counter could be used as another security level.
just always set your counter to start at X rather than 1.  as long as you
can remember X and your password you will always be able to regenerate the
passwords, and others will have a much harder time cracking it if they have
the app.

On Fri, Oct 10, 2014 at 1:24 PM, Bill Bogstad <bogstad at pobox.com> wrote:

> On Fri, Oct 10, 2014 at 7:08 PM, Mike Small <smallm at panix.com> wrote:
> > Matthew Gillen <me at mattgillen.net> writes:
> >>
> >> Because you don't have to keep a that "password database file" on 5
> >> different backup devices (and keep it updated on all your backup
> >> copies every time you add one).  It's certainly not a security
> >> improvement. It's a usability improvement at the expense of security.
> >>
> >
> > What happens when you need to change a site's password? You use a new
> > master pass phrase. Now you either have to go change all your passwords
> > on each site or keep track of which were generated from the old and
> > which the new master passphrases. Is that not how it would work?
>
> The algorithm apparently has a per site password counter:
>
> http://masterpasswordapp.com/algorithm.html
>
> Of course, the current state of the counter is now something which has
> to be shared
> between devices.   Nor sure how that works.   I suppose you could also
> modify the name of the site as well.  Instead of "comcast.com" use
> "myf***ingisp" as the site name.
>
> Bill Bogstad
> _______________________________________________
> Discuss mailing list
> Discuss at blu.org
> http://lists.blu.org/mailman/listinfo/discuss
>