Conversation
Notices
-
password generator (#pwdgen v1.3) !bash script .create/recover strong and secure passwords mathematically in !linux http://bit.ly/Li7NVw
about a year ago from web- Jason Self likes this.
- Ankur Sinha repeated this.
-
excelent tool , but i prefer use keepass. take a look http://bit.ly/LGZFOb
-
seems like a nice tool ;) but the main idea behind pwdgen is it doesn't store your password, so it's much safer! it simply regenerates them
-
@bijan That sounds a lot like DisPass: http://dispass.babab.nl
-
@ryuslash now that i see it, yes but with some few extra parameters :) do you think these approach for creating passwords is better or ...?
-
@bijan when passwords are concerned it is always better to store nothing, I would think. The only challenge is remembering your labels/salts
Bijan likes this. -
@bijan but dispass tries to solve that by keeping a list of the labels used, along with their lengths. Or is will in the next release
-
pwdgen's algorithm: substring(base64(md5(master+salt)),start,end) so you can simply regenerate your password online when it's not around ;)
-
@ryuslash simply using #duckduckgo, thanks to it's built-in functions (md5: bit.ly/M9Au6o) (base64: bit.ly/LiXeBA)
-
@bijan So I'd noticed, I'm very impressed with its simplicity
-
@bijan hehe, very funny, can't imagin that being very practical, using ddg to generate passwords
-
@bijan #md5 is not suitable for storing passwords, sha1 or 2 neither. Info: http://ur1.ca/z6t2
-
@cyberkiller That's really helpful, thank you for sharing it!
-
@toksyuryel just doing my job - saving the world from storing passwords as #md5 ;-D
-
@cyberkiller that was very interesting :) but remember that message is to not store md5 hashes (in database) cause with a given hash they...
-
can find the actual encrypted password. in here we use the hash itself as passwords.it's totally different cause the output of bcrypt ...
-
will also be in range alphabetic/numeric characters and it's simply the matter of a simple loop to create all possible combination :)
-
@bijan ok, it seems I misunderstood your algorithm :-)
All Identi.ca content and data are available under the