Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

What is your threat model? If this is the just the described hacking I propose -> https://www.troyhunt.com/going-dark-online-privacy-and-anony... https://vox.space/blog/89/being-privacy-aware-in-2016

Get anonymous identity and VPN.

Using KeePassX/LastPass/1Password is a bit problematic. They become a single point of failure. Someone can get my master password (https://github.com/cxxr/lostpass) or can pwn LastPass. To improved that my passwords becomes <last_pass_gen_pass> + <random_nonce_that_i_know_how_to_generate_in_my_head> + <helper_password>

I divided accounts into tiers:

Tier0: The most important account: Macbook, Gmail, Github Tier1: Still important, but not as much as Tier0: Youtube Tier2: I don't really care. Tier3: Testing accounts for local dev server: Single simple password like qwerty1234.

I just need to remember 5 passwords(Gmail, Macbook, Github, LastPass, helper password). I think this strategy gives a nice balance between connivance and security.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: