Timeline for Password generator + storage console app
Current License: CC BY-SA 4.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 28, 2018 at 18:46 | comment | added | Matej Novosad | Yep and that is why you hash the user password or the 'name' part. In the end you can only hash one of the two informations. And when i was thinking about it i thought it may be better idea to hash the user typed password. | |
| Nov 28, 2018 at 18:42 | comment | added | Graipher | @MatejNovosad True, but saving passwords as plaintext files is not something you will find as good security advice anywhere. | |
| Nov 28, 2018 at 18:41 | comment | added | Matej Novosad | truth is when you manage to get to that file you can use generated passwords you have found in dictionary attack. | |
| Nov 28, 2018 at 18:27 | comment | added | Graipher | @MatejNovosad In addition, your logic is slightly wrong in another place. If I manage to read that file, I know all your passwords. They are saved in cleartext. I don't know for which site, but I know that they are passwords you use somewhere. You usually want to encrypt that part, not the identifier. | |
| Nov 28, 2018 at 18:20 | comment | added | Graipher | @MatejNovosad Well, if your name is your password, then now you have a weak password protecting your strong password, so now the only difference from having a weak password in the first place is some security by obscurity and the weak password being under your control (instead of on someone else's server). You are probably better of in having something like a password vault, which is protected by a single strong password, instead of each password being protected by its own potentially weak password. | |
| Nov 28, 2018 at 18:17 | comment | added | Graipher | @MatejNovosad Yes, I would put the GUI, the CLI and the password generation in different functions/classes. | |
| Nov 28, 2018 at 18:14 | history | edited | Graipher | CC BY-SA 4.0 |
deleted 4 characters in body; added 17 characters in body; added 19 characters in body
|
| Nov 28, 2018 at 17:43 | vote | accept | Matej Novosad | ||
| Nov 28, 2018 at 17:41 | comment | added | Matej Novosad | Thank you! I am planning to rewrite this to a simple GUI with tkinter module. Do you recommen me to put GUI and password generation in separate class? Btw the point behind this is only having to remember your simple password such as your name and you can use it to protect even the most private things. | |
| Nov 28, 2018 at 17:20 | history | edited | Graipher | CC BY-SA 4.0 |
added 138 characters in body
|
| Nov 28, 2018 at 17:15 | history | answered | Graipher | CC BY-SA 4.0 |