Slashdot Mirror
The Best Way To Protect Real Passwords: Create Fake Ones
jfruh writes: Many security-savvy users have a password manager that stores their randomly-generated passwords — but if that manager is cracked, the gig is up. Some security researchers are suggesting a technique to stop this: a password manager that offers up fake passwords when an attacker tries and fails to crack it, which makes the process of figuring out if you've broken in much more difficult.
No, this will solve the problem once and for all.
We need a password managers manager!
We need a password managers manager!
... It's password managers all the way down.
My passwords are on a post-it note stuck to my monitor.
Let's see them crack THAT!
Any insufficiently advanced magic is indistinguishable from technology.
Yeah, ask TV5 how that works...
Me too. But I've instructed my secretary to generate a fake set of post-it notes if someone comes into the office pretending to be me.
I have fake passwords on a post-it note stuck to my monitor.
My REAL passwords are on a post-it note stuck to the bottom of my keyboard.
You fools with your single layer of misdirection, thinking it will keep you safe!