[Meta] On doxxing and password security

Demonspawn · 2015-06-11T18:48:43+00:00

I highly recommend lastpass and/or keepass to generate passwords for you that you don't have to remember.

ARedSchoolofThought · 2015-06-12T09:04:15+00:00

It would actually be very simple to put together an excel spreadsheet to do this exact same purpose while keeping it offline. Just have to setup an auto generating script and set it up. If anyone's interested let me know.

billthane · 2015-06-12T00:48:33+00:00

Good tips - especially for sites like this you want a different password. I like to have a string of letters and numbers which I add part of the website's name to for each site. So for Reddit it might be Gr66beui8Red and for Google it would be Gr66beui8Goo. Easy to remember, since you just need to know the first bit plus the name of the website you're on.

8n0n · 2015-06-12T10:39:59+00:00

http://www.techzoom.net/Tools/PasswordGenerator

Proper use of that web utility for me also includes generating several results and using only partials from a few of them to generate a new password.

Example 25 passwords of 32 characters each, using upper and lowercase plus digits and default set of special characters (you can also add extra custom characters in the provided textbox, I added the '!' for this post) had these 3 results among the first 6 generated sets of passwords

vdkPhDI16p6jm9PgwIhtgXS1in1jF0kn
inU+6bwnJJGOFoOeo74UHMfJkhLqNbaG
xweXsTAcBW8H6PZYaIaDbGPUJEkT84!t

You could then use those to mix and match a new password, or continue generating more to mix and match from, or even add more characters beyond the site (if paranoid that site is keeping a full set of generated passwords from it).

Final example result, and sorry if it is one of yours :P.

xweXsTAc4UHMfJ6jm9PgwIhtG0hX8s!v

For throwaway accounts and similar one off items, just using whatever result looks up to scratch will do fine. The aim in this instance is to avoid complacency with using simple to remember passwords or other similar themes that could be doxxed via keyboard loggers (pick 3 random things about yourself that you would use inside passwords and they can be used to begin user profiling).

As for password storage (unless you can memorize passwords like those here), up to you what tools you use but I have found using an air-gaped device (device not connected to the net, an old tablet without any network connectivity or a pre WiFi box/laptop without an Ethernet network card installed) to be my preferred option on sensitive passwords (where paper is not pragmatic for physical security).

Encryption is also an alternative but you then run the risk of broken decryption routines locking you from your passwords, or complacency when the encryption method used has a hidden weakness/exploit amongst those who practice in these fields on the regular (black hats and 0-day exploits especially).

In the end, if it can be made by man it can also be broken. Secure your passwords as well as you can but do it pragmatically against the potential cost if the password is breached (I don't expect high grade security on Reddit throwaway account 007).

bitches_be_crazy86 · 2015-06-12T15:46:53+00:00

Plus don't use your main email address when signing up. Worse yet is using the same password (it happens waaaay more often than you think).

I've seen fallout after an adult hookup service database was compromised. Literally you can google a given email address and voila - you find a list or compromissed passwords and email addresses used for registration - and it's there. It's one thing when you find out that a housewife from your neighbourhood is into kinky casual sex - it's an entirely different situation when you can just log in and see all the naked pics she sent and footage from gangbangs.

TheRedThrowAwayPill · 2015-06-12T03:09:15+00:00

Encrypting is NOT a best practice.

Encryption means there is decryption. If a hacker gets that user table they have all day and millions of samples to reverse the key to that encryption.

What you ideally want is pure, theoretically irreversible one-way hashing.

khanistan · 2015-06-11T19:52:52+00:00

If you have problems with remembering multiple passwords, write down usernames, passwords, and other crucial details in your computer's notepad or a piece of paper. This is very helpful for me, and can be for ya'll too.

Title	[Meta] On doxxing and password security
Author	DocTomoe
Upvotes	27
Comments	21
Date	June 11, 2015 5:20 PM UTC (11 years ago)
Subreddit	Posted in /r/TheRedPill
Original Link	https://old.reddit.com/r/TheRedPill/comments/39gxkv/meta_on_doxxing_and_password_security/
Archive Link	https://theredarchive.com/r/TheRedPill/meta-on-doxxing-and-password-security.33531 https://theredarchive.com/post/33531

Comments