[clug] Adobe Password Breach

[Sam Couter]

Hal Ashburner <hal at ashburner.info> wrote:
> Does anyone have a link to best practices with passwords?

That's a big question, not helped by people misunderstanding "popular
practice" with "best practice". The top five Google results are not very
useful.

> Now we're all "hedge moon voodoo pancake"

Use a hardware true random number generator (ordinary six-side dice)
with this:

http://world.std.com/~reinhold/diceware.html

> given we all have 100+ passwords what is the best way to cope with that

There are many password managers that can securely encrypt your passwords
using a single master password.

> given you don't want them on your phone

Sure you do, then you have access to them wherever you take your phone,
which is... everywhere, right? Just make sure you use a decent master
passphrase.

https://play.google.com/store/apps/details?id=com.android.keepass&hl=en

> And you will need them from different computers.

http://keepass.info/ is a common format implemented by many programs for
many platforms. I'm sure there are alternatives, but this is what I use.
-- 
Sam Couter         |  mailto:sam at couter.id.au
OpenPGP fingerprint:  A46B 9BB5 3148 7BEA 1F05  5BD5 8530 03AE DE89 C75C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.samba.org/pipermail/linux/attachments/20131105/1fcbf845/attachment.pgp>