• dejected_warp_core@lemmy.world
    link
    fedilink
    English
    arrow-up
    19
    ·
    5 days ago

    PSA: Home use? That’s probably okay. Work use? If you’re in-office, this is a ticking time-bomb that can get you fired, one way or another. Use the company 1password or whatever you have access to, please. Thank you.

    • Frostbeard@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      4 days ago

      In my office I have a list that says passwords all nonsens and just as a decoy. I have a system that I use for rotation woth a visual reminder (by association, not directly) somwhere in my office

  • ZILtoid1991@lemmy.world
    link
    fedilink
    English
    arrow-up
    9
    ·
    4 days ago

    It’s actually super useful for old people, who sometimes like to “accidentally log off” and stuff.

  • TheGrandNagus@lemmy.world
    cake
    link
    fedilink
    English
    arrow-up
    29
    ·
    6 days ago

    Honestly, a physical password book isn’t a bad idea.

    Not accessible via the internet, and in most cases if someone has physical access to your system you’re done for anyway.

    The main weakness it has is from a nosey flatmate, spouse, or child in the house.

    • tarknassus@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      5 days ago

      “People can no longer remember passwords good enough to reliably defend against dictionary attacks, and are much more secure if they choose a password too complicated to remember and then write it down.

      We’re all good at securing small pieces of paper. I recommend that people write their valuable passwords down on a small piece of paper, and keep it with their other valuable small pieces of paper: in their wallet.

      Obscure it somehow if you want added security: write “bank” instead of the URL of your bank, transpose some of the characters, leave off your userid. This will give you a little bit of time if you lose your wallet and have to change your passwords. But even if you don’t do any of this, writing down your impossible-to-memorize password is more secure than making your password easy to memorize.”

      Bruce Schneier - 2005.

  • JigglySackles@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    4 days ago

    Honestly, for at home personal use, it’s better than any on device password manager. It’s not hackable. Someone has to break into your home and steal it. For an office environment though…worst way to handle it after sticky notes.

  • appropriateghost@lemmy.ml
    link
    fedilink
    English
    arrow-up
    14
    ·
    5 days ago

    we might laugh at this but I think this is useful. Even though I wouldn’t use something like this and I’d just use a regular dedicated blank notebook and my password manager, it can be useful to people who have problems with computers and can’t handle a password manager, yet may give pages with good templates to show how to record sensitive information.

  • tym@lemmy.world
    link
    fedilink
    English
    arrow-up
    12
    arrow-down
    3
    ·
    5 days ago

    This isn’t the flex you think it is, OP. 99% of cybercriminals are also cowards. Physical security of ANY kind beats even the best password managers.

    If you don’t know what lattice-based encryption is and how to purchase it through NordVPN, start reading up because encryption as we know it isn’t long for this world. Pretty sure they already dragged their feet too long on Bitcoin’s algorithm but the day cracking common ciphers is within the grasp of quantum clusters is the day we all become Amish. Plan accordingly!

    • Cocodapuf@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      edit-2
      4 days ago

      My understanding is that quantum computing has been taken into account for some modern cryptography. And that memory-hard cryptography basically defeats quantum computing solutions. There are a few methods, but one of them is just very long keys, it’s trivial to make a cryptographic key longer.

      So sure, you could defeat some of that with a machine operating with 1024 entangled qbits, (which is… oh man… not an easy task), in which case, wow, congratulations. But what if I increase my key length to 100k? It might take an extra 3 seconds to check the key and log in, but it’ll take an extra 25 years for quantum computing to catch up.

    • TwoBeeSan@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      5 days ago

      Of the 200 elderly I see maybe 75% still use the book or a variation of it.

      The best is when they use iPad notes or even their fucking contacts to save info lol

    • tabular@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      6 days ago

      I’ve not found anything better. Storing on my computer, or worse someone else’s computer, doesn’t seem safe.

      • Bonesince1997@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        6 days ago

        The trick is to use code language, and don’t forget the code. Then you can use digital sources more freely, I feel.

  • ansiz@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    5 days ago

    Sure, it’s a horrible idea in an open office environment but if someone wants to use this at home for all their passwords it really won’t hurt anything.

  • flop_leash_973@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    edit-2
    5 days ago

    My mother uses something similar to keep track of her passwords for everything. While I prefer a password manager like Bitwarden or Keepass. I would rather her use a note book like this over something like Google or Apples password managers.

    Or even worse, the same password for everything.

  • logicbomb@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    6 days ago

    This isn’t even weird.

    I think most security experts would recommend that you have your most important passwords written down somewhere, and then hopefully locked up in some safe or deposit box somewhere. You don’t need to buy an entire book for it, but some people like to spend money.

    If this is for your less important passwords, then for the most part, writing them down is actually better. You won’t be as tempted to reuse your banking password for your social media. And some people like writing things down. A password manager is a better solution, but lots of people aren’t as good with technology and if they even let the browser remember it, they won’t know how to retrieve it later if they want to use a different computer, for example.

  • aceshigh@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    5 days ago

    That’s exactly what I use. Chances of my house getting robbed is small. Chances of yet another data breach is very high - this year my data was breached at least 2ce that I remember.