A few newbie Qs

Faramir faramir.cl at gmail.com
Sat May 3 00:20:24 CEST 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

El 27-04-2014 9:04, Simon Ward escribió:
...
> The password manager should clear or overwrite the clipboard after
> a short time, which should help. Keepass includes "timed clipboard
> clearing" in its feature list. Of course, there is still the
> question of whether it does (or can*) do it securely.

  It also has a setting that somehow splits the password and paste it
in 2 parts, I didn't get the mumbojumbo related to it, but supposedly
should cause clipboard captures to collect 2 times half the password,
not the whole thing. But is also says it is vulnerable to malware
aimed specifically to Keepass2. In other words, its goal is to make it
harder to malware to capture the password, but not impossible.

   The problem is, if my password is too strong, I want to autotype
it. If it is too short, it is not secure enough, and if I have too
many passwords, no matter how simple they are, I tend to forget them,
so I either autotype them or re utilize them, another big NO. Reaching
some point, passwordcard.org starts looking very good, but I don't
know how random are these cards.

   Best Regards

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBCAAGBQJTZBooAAoJEMV4f6PvczxAt6QH/jn7d9IIdnL1ni2kBJ1n+rME
hNWi2CagpdVSGyWO03dm768ggqygQ/3G7XtkRJT0SbEdga2jGrPOx5OuwJNhnH2/
33an53ulfBfJ04IizNFp7qDeIhY+8ewyTZdyhK3KcLlaI7I9O3LHvdsBeHSOjVX1
4sDRtmwY4fiWtT7JFpPvlcK0uR7jdVl+BkyBkkQbgNM+eTj+M+zARf1S3lzhNh3N
GO/ZWb6eJfieOckD4Ti6s9DKHkS1pBLBk4goL7pHaHcd94fi4v2e1K+4WQtNGhXY
Y81tk5lPIWZVog4YguQM1yvEsnX8wH+KVmmUS1HClGg0e3HV1oSL0zAvpbaSAwc=
=jesB
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list