Remix.run Logo
▲ iamnothere 5 hours ago

Never use a website to generate a password for something important like this. You can print out diceware passwords and roll dice.

▲throw0101c 37 minutes ago | parent | next [-]

> You can print out diceware passwords and roll dice.

Or on the CLI:

* https://packages.debian.org/search?keywords=diceware

* https://packages.debian.org/search?keywords=pwgen

▲fluidcruft 3 hours ago | parent | prev [-]

You can just take a picture of a pile of dice, a pile of rice, or a tree, patch of grass, etc, and compute a secure hash/whatever and base six it to get the rolls.

▲Brybry 2 hours ago | parent | next [-]

Are you saying to take a hash of a picture and convert that to base 6 for your dice rolls to plug into a word list for creating a passphrase?

Is that actually better (in practice, not in terms of entropy) than /dev/urandom? I have a lot less trust in my ability to successfully scrub a picture from my phone that deterministically created my passphrase.

▲lisper 2 hours ago | parent | next [-]

> Is that actually better (in practice, not in terms of entropy) than /dev/urandom?

It offers protection in the event that your /dev/urandom is compromised. Otherwise no.

(Of course, if your /dev/urandom is compromised then whatever process you use to compute a hash of a photo is likely compromised as well.)

▲Matumio 2 hours ago | parent | prev [-]

If you're concerned about that, you can concat your JPEG with a few bytes from /dev/random and you'll get the security of whichever is stronger. In practice none of this will be your weakest link.

▲theendisney 2 hours ago | parent | prev | next [-]

If you have a computer do something you cant know if it really did what you wanted.

▲cj 2 hours ago | parent | prev [-]

I actually have a lava lamp next to my desk for this reason. Snap a photo, compute a hash!

▲theendisney 2 hours ago | parent [-]

Count the bubbels with your fingers while you count from 0 to 9. Every x fingers you write down the number.

Extra points if you hold you face really close and count in a dead language. You can also make ordered hand gestures in stead of counting on your fingers. Be a wizard about it!

▲cheschire an hour ago | parent [-]

Yer a cryptographer, Harry!